Last updated: May 20, 2026
This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.
We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.
The Application is intended for business use by authorized personnel of organizations that subscribe to the Obsolescence IQ Service (each, a "Customer"). It is not intended for personal, household, or consumer use. When You use the Application as an authorized user of a Customer, the information You create or submit through the Application (including photographs and equipment records) is processed on behalf of, and under the instructions of, that Customer.
In data-protection terms:
With respect to business records and content You submit through the Application (such as nameplate photographs, equipment data, facility selections, and notes), the Customer is generally the data controller and the Company acts as a data processor (or "service provider") on the Customer's behalf.
With respect to Your account identifiers (such as Your work email and display name), authentication metadata, and the technical and diagnostic information described below, the Company acts as a data controller.
This dual role is reflected throughout this Privacy Policy: where We describe Our use of Personal Data, We act as a data controller; where We describe handling of content You submit on behalf of a Customer, We act as a data processor and follow the Customer's documented instructions, the data processing terms of Our agreement with that Customer, and applicable law.
If You are an authorized user of a Customer and have questions about how that Customer handles Your information, You should review the Customer's own privacy notice and policies.
The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
For the purposes of this Privacy Policy:
Account means a unique account created for You to access our Service or parts of our Service.
Affiliate means an entity that controls, is controlled by or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.
Application refers to OIQ Capture, the software program provided by the Company.
Business, for the purpose of CCPA/CPRA, refers to the Company as the legal entity that collects Consumers' personal information and determines the purposes and means of the processing of Consumers' personal information, or on behalf of which such information is collected.
CCPA and/or CPRA refers to California Consumer Privacy Act (the "CCPA") as amended by the California Privacy Rights Act of 2020 (the "CPRA").
Company (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) refers to CloudCompass, LLC.
The Company's role under applicable data-protection law is described in the "Scope and Our Role" section above.
Consumer, for the purpose of the CCPA/CPRA, means a natural person who is a California resident. A resident, as defined in the law, includes (1) every individual who is in the USA for other than a temporary or transitory purpose, and (2) every individual who is domiciled in the USA who is outside the USA for a temporary or transitory purpose.
Country refers to: United States
Customer refers to the organization that subscribes to the Obsolescence IQ Service and on whose behalf an authorized user uses the Application.
Data Controller, for the purposes of the GDPR (General Data Protection Regulation), refers to the legal person which alone or jointly with others determines the purposes and means of the processing of Personal Data.
Data Processor means a natural or legal person who processes Personal Data on behalf of the Data Controller.
Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.
Do Not Track (DNT) is a concept that has been promoted by US regulatory authorities, in particular the U.S. Federal Trade Commission (FTC), for the Internet industry to develop and implement a mechanism for allowing internet users to control the tracking of their online activities across websites.
GDPR refers to EU General Data Protection Regulation.
Personal Data is any information that relates to an identified or identifiable individual.
For the purposes of GDPR, Personal Data means any information relating to You such as a name, an identification number, location data, online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity.
For the purposes of the CCPA/CPRA, Personal Data means any information that identifies, relates to, describes or is capable of being associated with, or could reasonably be linked, directly or indirectly, with You.
Service refers to the Application, the Obsolescence IQ platform it connects to, and any related services provided by the Company.
Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used.
Third-party Social Media Service refers to any website or any social network website through which a User can sign in or create an account to use the Service.
Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.
Because automated analysis of photographs You submit is a distinctive feature of the Application, We disclose Our practices here in a dedicated section.
When You capture or import an equipment nameplate, the Application can request automated analysis to extract structured fields (such as manufacturer, model number, and dates) from the image. To perform that analysis, the photograph is sent from Our servers to a third-party AI Service Provider that returns the extracted text and structured fields to the Application.
We have contractual commitments with Our AI Service Provider that the content We submit on Your behalf is processed only to return analysis results to the Service and is not used to train the provider's underlying models. The AI Service Provider acts as a sub-processor and is bound by confidentiality and security obligations consistent with this Privacy Policy.
You remain in control of the extracted fields: You can review, edit, or discard them before saving and synchronizing the record. If You disagree with how Your Customer organization has configured this feature, You should contact that Customer.
While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:
Email address
First name and last name (or display name)
A stable user identifier issued by Your single sign-on identity provider
The Customer organization(s) You are authorized to access
Usage Data
The Application allows authorized users to capture equipment information in the field. The content You submit through the Application may include:
Photographs of equipment nameplates taken with Your Device's camera or imported from Your photo library;
Equipment data such as manufacturer, model number, equipment tag, description, equipment class, manufactured date, refurbished date, run-to-failure designation, spare designation, and free-text notes;
Operational context selected by You within the Application, such as the company, facility, and location to which a record belongs;
Submission and synchronization metadata, such as batch identifiers, sequence numbers, timestamps, and synchronization status.
The Application is intended for photographs of industrial equipment nameplates. We do not request and do not need photographs of people. We ask Customers and their authorized users not to submit personal information (other than ordinary business-contact information) through the Application.
Usage Data is collected automatically when using the Service.
Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), the time and date of Your visit, the API endpoints accessed, response codes, user-agent strings, and other diagnostic data.
When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the operating system of Your mobile device, the type of mobile Internet browser You use, unique device identifiers, the Application version, and other diagnostic data generated when the Application encounters an error.
While using Our Application, in order to provide features of Our Application, We may collect, with Your prior permission:
Pictures and other information from Your Device's camera and photo library
We use this information to provide features of Our Service, to improve and customize Our Service. The information may be uploaded to the Company's servers and/or a Service Provider's server or it may be simply stored on Your device.
You can enable or disable access to this information at any time, through Your Device settings.
The Application does not collect or request:
Precise or coarse geolocation through device location services;
Contacts, calendar entries, SMS, call logs, or microphone audio;
Health, fitness, biometric, or financial-account information;
Advertising identifiers (IDFA, AAID) for cross-app advertising;
Browsing activity on other apps or websites.
The Company may use Personal Data for the following purposes:
To provide and maintain our Service, including to authenticate You, associate You with the correct Customer, allow You to capture and edit equipment records offline, synchronize work product to the Obsolescence IQ platform, and return AI-assisted nameplate analysis results.
To manage Your Account: to manage Your registration as a user of the Service, to associate You with the Customer organization(s) You are authorized to access, and to enforce role-based permissions and tenant isolation.
For the performance of a contract: the development, compliance and undertaking of the contract for the Service You have acquired or of any other contract with Us through the Service.
To contact You: To contact You by email regarding updates or informative communications related to the functionalities, products or contracted Service, including security alerts and material changes to this Privacy Policy.
To manage Your requests: To attend and manage Your requests to Us.
For business transfers: We may use Your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding.
For other purposes: We may use Your information for other purposes, such as data analysis, identifying usage trends, determining the effectiveness of Our Service, and to evaluate and improve Our Service, products, services, marketing and Your experience.
We do not sell Your Personal Data, share it for cross-context behavioral advertising, or use it to train third-party generative-AI models for purposes unrelated to providing the Service.
We may share Your personal information in the following situations:
With Service Providers: We may share Your personal information with Service Providers to monitor and analyze the use of Our Service, to authenticate users, to host the platform, to store photographs and equipment records, to perform AI-assisted nameplate analysis, and to contact You.
With Your Customer organization: Information You submit through the Application is made available to the Customer organization on whose behalf You use the Application, and to other users within that organization who are authorized to access it.
For business transfers: We may share or transfer Your personal information in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of Our business to another company.
With Affiliates: We may share Your information with Our affiliates, in which case We will require those affiliates to honor this Privacy Policy.
With Your consent: We may disclose Your personal information for any other purpose with Your consent.
The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.
The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time (typically up to twelve (12) months), except when this data is used to strengthen the security or to improve the functionality of Our Service, or We are legally obligated to retain this data for longer time periods.
Content that You submit on behalf of a Customer is retained under the direction of that Customer in accordance with Our agreement with that Customer. Authentication tokens stored on Your Device are retained only while needed and are deleted when You sign out or uninstall the Application.
Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to - and maintained on - computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from Your jurisdiction.
Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer.
The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of Your data and other personal information. Where required by applicable law (including for transfers from the European Economic Area, United Kingdom, or Switzerland), We rely on appropriate transfer mechanisms, such as the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum, where applicable), together with supplementary technical and organizational measures.
You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You.
Our Service may give You the ability to delete certain information about You from within the Service. You may update, amend, or delete Your information at any time by contacting Us. Please note, however, that We may need to retain certain information when we have a legal obligation or lawful basis to do so. Where Your information was submitted by a Customer, We will refer requests to that Customer and assist them, as required, in responding.
If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.
Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).
The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:
Comply with a legal obligation
Protect and defend the rights or property of the Company
Prevent or investigate possible wrongdoing in connection with the Service
Protect the personal safety of Users of the Service or the public
Protect against legal liability
The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.
Our security measures include encryption of data in transit, encryption at rest for content stored on Our cloud infrastructure, role-based access controls, tenant isolation enforced at the database level, secrets management, and audit logging.
The Service Providers We use may have access to Your Personal Data. These third-party vendors collect, store, use, process and transfer information about Your activity on Our Service in accordance with their Privacy Policies.
The Application offers single sign-on through third-party identity providers, which may include Microsoft (Azure AD / Entra ID), Google, and Our hosted identity service. When You choose to sign in through a third-party identity provider, Your interaction with that provider is governed by that provider's own terms and privacy policy.
We host the Obsolescence IQ platform, store photographs and equipment records, and operate supporting databases and networking on commercial cloud infrastructure located in the United States.
We use an error-monitoring Service Provider to receive diagnostic information when the Application encounters an error, including stack traces, the Application version, the operating system version, the device model and locale, and a tag identifying the signed-in user, so We can debug and improve reliability.
We may process Personal Data under the following conditions:
Consent: You have given Your consent for processing Personal Data for one or more specific purposes.
Performance of a contract: Provision of Personal Data is necessary for the performance of an agreement with You and/or for any pre-contractual obligations thereof.
Legal obligations: Processing Personal Data is necessary for compliance with a legal obligation to which the Company is subject.
Vital interests: Processing Personal Data is necessary in order to protect Your vital interests or of another natural person.
Public interests: Processing Personal Data is related to a task that is carried out in the public interest or in the exercise of official authority vested in the Company.
Legitimate interests: Processing Personal Data is necessary for the purposes of the legitimate interests pursued by the Company.
The Company undertakes to respect the confidentiality of Your Personal Data and to guarantee You can exercise Your rights.
You have the right under this Privacy Policy, and by law if You are within the EU, to:
Request access to Your Personal Data. The right to access, update or delete the information We have on You.
Request correction of the Personal Data that We hold about You. You have the right to have any incomplete or inaccurate information We hold about You corrected.
Object to processing of Your Personal Data. This right exists where We are relying on a legitimate interest as the legal basis for Our processing.
Request erasure of Your Personal Data. You have the right to ask Us to delete or remove Personal Data when there is no good reason for Us to continue processing it.
Request the transfer of Your Personal Data. We will provide to You, or to a third-party You have chosen, Your Personal Data in a structured, commonly used, machine-readable format.
Withdraw Your consent. You have the right to withdraw Your consent on using Your Personal Data. If You withdraw Your consent, We may not be able to provide You with access to certain specific functionalities of the Service.
You may exercise Your rights of access, rectification, cancellation and opposition by contacting Us. Please note that We may ask You to verify Your identity before responding to such requests. If You make a request, We will try Our best to respond to You as soon as possible.
Where Your information was submitted to the Service by a Customer (for example, business records about You created by Your employer), We will refer requests to that Customer and assist them, as required, in responding.
You have the right to complain to a Data Protection Authority about Our collection and use of Your Personal Data. For more information, if You are in the European Economic Area (EEA), please contact Your local data protection authority in the EEA.
This privacy notice section for California residents supplements the information contained in Our Privacy Policy and applies solely to all visitors, users, and others who reside in the State of California.
We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular Consumer or Device. The following is a list of categories of personal information which We may collect or may have been collected from California residents within the last twelve (12) months:
Category A: Identifiers. Examples: A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name. Collected: Yes.
Category B: Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). Examples: A name, signature, address, telephone number, employment. Collected: Yes (employment-context identifiers only, where applicable).
Category C: Protected classification characteristics under California or federal law. Collected: No.
Category D: Commercial information. Collected: No.
Category E: Biometric information. Collected: No.
Category F: Internet or other similar network activity. Examples: Interaction with our Service. Collected: Yes.
Category G: Geolocation data. Collected: No.
Category H: Sensory data. Examples: Visual information (such as photographs You capture through the Application). Collected: Yes (photographs of equipment nameplates submitted by You).
Category I: Professional or employment-related information. Examples: Your association with a Customer organization. Collected: Yes.
Category J: Non-public education information. Collected: No.
Category K: Inferences drawn from other personal information. Collected: No.
Category L: Sensitive personal information. Collected: No.
As defined in the CCPA/CPRA, "sell" and "share" include certain activities involving the transfer of personal information to a third party for monetary or other valuable consideration, or for cross-context behavioral advertising purposes. We do not sell Your personal information and We do not share Your personal information for cross-context behavioral advertising.
The CCPA/CPRA provides California residents with specific rights regarding their personal information. If You are a resident of California, You have the following rights:
The right to notice. You have the right to be notified which categories of Personal Data are being collected and the purposes for which the Personal Data is being used.
The right to know/access. Under CCPA/CPRA, You have the right to request that We disclose information to You about Our collection, use, sale, disclosure for business purposes and share of personal information.
The right to say no to the sale or sharing of Personal Data (opt-out). You have the right to direct Us to not sell Your personal information. As stated above, We do not sell or share Your personal information.
The right to correct Personal Data. You have the right to request Us to correct any inaccurate personal information about You that We have.
The right to limit use and disclosure of sensitive Personal Data. You have the right to request to limit the use or disclosure of certain sensitive personal information We collected about You, unless an exception applies.
The right to delete Personal Data. You have the right to request the deletion of Your Personal Data, subject to certain exceptions.
The right not to be discriminated against. You have the right not to be discriminated against for exercising any of Your consumer's rights.
In order to exercise any of Your rights under the CCPA/CPRA, and if You are a California resident, You can contact Us using the contact information provided below.
Only You, or a person registered with the California Secretary of State that You authorize to act on Your behalf, may make a verifiable request related to Your personal information.
Our Service does not respond to Do Not Track signals.
However, some third-party websites do keep track of Your browsing activities. If You are visiting such websites, You can set Your preferences in Your web browser to inform websites that You do not want to be tracked. You can enable or disable DNT by visiting the preferences or settings page of Your web browser.
The Application is a business tool intended for use by adults in a professional capacity. Our Service does not address anyone under the age of 16. We do not knowingly collect personally identifiable information from anyone under the age of 16. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 16 without verification of parental consent, We take steps to remove that information from Our servers.
If We need to rely on consent as a legal basis for processing Your information and Your country requires consent from a parent, We may require Your parent's consent before We collect and use that information.
Our Service may contain links to other websites that are not operated by Us. If You click on a third-party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.
We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.
We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the "Last updated" date at the top of this Privacy Policy.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
If You have any questions about this Privacy Policy, You can contact us:
By email: info@cloudcompass.net