MTech Systems Privacy Policy
1. Introduction
Thank you for using our website and services. This privacy policy (the “Privacy Policy”) explains how we collect, use, disclose, and safeguard your personal information when you visit our website and use our products and services, including Amino, Sonar, and Proline (the “Services”). As used in this Privacy Policy, “MTech,” “we,” “us,” or “our” refers to M-Tech Systems USA, LLC and its subsidiaries and affiliates, as applicable depending on the context.
This Privacy Policy applies to personal information we collect about (a) website visitors, (b) job applicants, (c) persons who otherwise interact with us outside of our services (e.g., customer representatives and representatives of potential customers, event attendees and users providing feedback), and (d) users of the Services. The Privacy Policy also describes your rights and how you can exercise them.
For purposes of this policy, “personal information” means information that identifies, relates to, or could reasonably be linked with an individual. In some regions, this may also be referred to as “personal data”.
2. Our Role; Controller vs. Processor
Certain data protection laws and regulations, such as the GDPR or the CCPA, typically distinguish between two main roles for parties processing personal data: the “data controller” (or under the CCPA, “business”), who determines the purposes and means of processing; and the “data processor” (or under the CCPA, “service provider”), who processes such data on behalf of the data controller (or business). Below we explain how these roles apply to our Services, to the extent that such laws and regulations apply.
- When We Are a Controller. We act as a data controller for personal information we determine the purposes and means of processing for, such as information collected on our website, security and audit logs, usage data, and communications we send.
- When We Are a Processor. We act as a processor when providing our Services to a business customer (“Subscriber”) and handle personal information on that Subscriber’s instructions. This includes information the Subscriber or its users submit or generate in the Services (“Subscriber Data”). We process Subscriber Data only to deliver the Services, follow instructions, and meet legal obligations, and we delete or return it as required by our agreement (the “Subscription Agreement”).
- Mixed Interactions. Some activities involve both roles. For example, a support ticket may include Subscriber Data (processor) and diagnostic data we create to run support systems (controller). Similarly, login credentials are used to access Subscriber Data (processor), while related security logs are processed as a controller.
- Third‑party Integrations. If a Subscriber enables a third‑party integration, that third party usually acts as an independent controller under its own terms and privacy notice.
3. Information You Provide to MTech
We collect personal information when you interact with us via our website or the Services as set out below.
- User Account Information. We require everyone with access to our Services to have an account with us. When you or a Subscriber creates an MTech account for you, we collect personal information including your name, email address, phone number, role, language preferences, and account credentials.
- Communication Information. When you contact us for customer support, feedback, or inquiries, we collect your name, email address, phone number, and any other information you provide us with to assist you or resolve your issue. MTech may monitor and record phone conversations or email communications between you and MTech employees for training and quality assurance purposes. We may receive confirmation when you open or click on content in an email from us, which helps us make our communications to you more useful and interesting.
- Social Media Information. We have accounts on social media sites like LinkedIn and YouTube. When you interact with our social media, we will collect personal information that you elect to provide to us, such as your contact details, and third parties that host our social media may provide us with aggregate information and analytics regarding your use of our social media.
- Survey Information. We may provide you the opportunity to participate in surveys on our website or within the Services to measure customer satisfaction. If you participate, we may request certain personal information from you. Participation in these surveys is completely voluntary, and you therefore have a choice whether to disclose this information. The requested information typically includes name, email address, and mailing address.
- Customer Testimonials. We post customer testimonials and comments on our website, which may contain personal information. We obtain each customer’s consent via email or through other agreement between the relevant customer and MTech prior to posting the customer’s name and testimonial.
4. Information Automatically Collected
Like most websites and technology services delivered over the internet, we may automatically collect certain information about you when you use our Services or visit our website.
- Log Data. Whenever you use the Services, your browser will automatically send us your IP address, browser type and settings, the date and time of your request, and how you interacted with the Services.
- Device Information. We will automatically collect information about the device you are using to access the Services, including name of the browser, referring/exit pages, date/time stamps, and clickstream data. The information collected may depend on the type of device you use and its settings.
- Usage Data. We will automatically collect information about your use of our Services, including name, email address, the features you use, actions you take, your time zone, location, the dates and times of access, amount of time spent within the Services, and types and volumes of queries you submit. We will only collect such data in accordance with the applicable Subscription Agreement.
- Cookies. We use cookies and similar technologies to operate our website and Services, remember your preferences, and improve your experience. Cookies may collect personal information. Some cookies are essential for the website and Services to function, while others help us understand usage and enhance performance. For more details about the types of cookies we use and how to manage your choices, please see Section 11.
5. Information Collected from Third Parties
We may collect information about you from third parties, such as security partners, marketing vendors, and event organizers. Subscribers may also give us information about you, such as your contact details, to facilitate us providing our Services. We may combine this information with information we collect from you and use it as described in this Privacy Policy.
- Publicly Available Information. MTech collects publicly available information about Subscribers and prospects, including name, email address, phone number, and other contact details.
- Aggregated Information. MTech may aggregate personal information and use the aggregated information to improve, add features, or analyze the effectiveness of our Services. In addition, we may analyze the general behavior and characteristics of users of our Services and share aggregated information like general user statistics with third parties, publish such aggregated information, or make such aggregated information generally available (in which case the aggregated information will be anonymized). We may collect aggregated information through the Services, through cookies, and through other means described in this Privacy Policy. Use of aggregated information may be subject to restrictions in the applicable Subscription Agreement.
6. How We Use Personal Information
We use personal information for the purposes set out below.
- Communicate Administrative Information. We may send transactional emails and notifications related to billing, account management, and other administrative matters. This may include updates to our Subscription Agreement or other legal agreements with the relevant Subscriber, as well as information about new features.
- Deliver the Services. We use your account information and data to deliver the Services under our Subscription Agreement with the relevant Subscriber. This includes authenticating you during login, providing customer support, resolving technical issues, and diagnosing product outages or bugs.
- Manage Preferences and Customize the Services. We may use your account information and data to remember settings and tailor user experiences (e.g., roles, dashboards, notifications, language/time zone).
- Improve and Develop Our Products and Services. We collect usage data to understand how our website and Services are being used and to improve functionality, performance, and user experience. This may include analyzing its effectiveness and trends to inform new features or integrations. Any insights shared externally are aggregated and anonymized, such that they do not identify individual users or customers.
- Secure and Protect our Services and Subscribers. We use account and usage information to help detect, investigate, and prevent fraud, abuse, or security issues. We also use account and usage information to help detect, investigate, and enforce our legal terms, including any acceptable use policy, and to comply with legal, tax, and regulatory obligations.
- Protect Rights and Safety. We may use account and usage information to protect the rights, privacy, safety, or property of MTech, our affiliates, Subscribers, users, or third parties.
- Market and Promote our Services. We may send service-related communications and promotional messages about features, products, or events that may interest you.
7. How We Share Personal Information
We may share your personal information with third parties without further notice to you, unless legally required, including without limitation in the situations set out below.
- Affiliates. We may share your personal information with our corporate affiliates (e.g., parent, subsidiary, or related entities under common control). MTech’s affiliates will only use the personal information we share with them in a manner consistent with this Privacy Policy.
- Vendors and Service Providers. We may share your personal information with third-party vendors and service providers who help us operate, deliver, and support our website and Services. This includes providers of hosting and cloud services, data analysis, customer service efforts, other information technology services, event management services, email and communication software, advertising and marketing services, and web analytics services. These providers are only permitted to use your information to perform services on our behalf and must comply with our privacy and data protection standards.
- Other Users. When you are using certain features within the Services, certain actions you take may be visible to other users of the Services.
- Third-Party Integrations. If your MTech account is connected to external third-party integrations (e.g., to facilitate single sign on), the providers of those applications may receive information about you from MTech or others. Please be aware that when you use third-party integrations, their own terms and privacy policies will govern your use of those integrations. Please contact the supplier of such integrations directly for information on their privacy practices and policies.
- Third-party Websites and Services. Our website and services may contain links to other websites not operated or controlled by MTech, including social media services. The information that you share with such third-party sites will be governed by the specific privacy policies and terms of service of the third-party sites and not by this Privacy Policy. By providing these links we do not imply that we endorse or have reviewed these sites. Please contact the third-party sites directly for information on their privacy practices and policies.
- Business Changes. If we are involved in strategic transactions (such as sale, merger, reorganizations, liquidation, or transition of service to another provider), your personal information and other information may be shared in the due diligence process with counterparties and others assisting with the transaction and transferred to a successor or affiliate as part of that transaction along with other assets.
- Legal Requirements. MTech may share your personal information if required to do so by law or in the good faith belief that such action is necessary to (a) comply with legal obligations or processes, (b) protect and defend our rights or property, (c) prevent fraud, (d) enforce our agreements or protect against legal liability, or (e) protect users or the public in urgent situations.
8. How We Transfer Personal Information Internationally
To facilitate our global operations, we may transfer personal information to our affiliates where we have operations for the purposes described in this Privacy Policy.
We are headquartered in the United States, and your information may be transferred to and be processed in countries outside your country of residence, including where privacy laws may not provide as the same level of protection as those of your country of residence. Please be aware that your personal information may be transferred to, stored, and processed by us in our facilities and by those third-party vendors and service providers with whom we may share your personal information with for the purposes described in this Privacy Policy. We will take appropriate steps to ensure that your data is treated securely and in accordance with this Privacy Policy and that no transfer of your personal information will take place to an organization or a country unless there are adequate controls ensuring the security of your data and other personal information
9. How We Secure Personal Information
We use a variety of security technologies and procedures to help protect your personal information from unauthorized access, use, or disclosure. All personal information is protected using appropriate physical, technical and organizational measures, which may include physical access controls, encryption, intrusion detection, and network monitoring, depending on the nature of the information and the scope of processing. We keep these measures under review in order to keep our systems and the personal information we process safe.
10. How Long We Store Personal Information
We hold Personal information for as long as necessary to fulfill the purposes set forth in this Privacy Policy, unless a longer retention period is required or permitted by law.
- If you are an MTech user covered by a Subscription Agreement between a Subscriber and MTech, personal information will be retained as permitted by that Subscription Agreement.
- Personal information that MTech is under a legal obligation to retain (e.g., legal obligations under anti-money laundering or bookkeeping laws), is retained for the required periods under the applicable laws.
- Personal information which is not used for the purposes of a contractual relationship or where MTech does not have a legal obligation to retain the data is only retained as long as necessary to fulfil the respective purpose for our data processing (generally up to 1 year).
In some limited cases, we may need to keep personal information longer to protect our legal rights, for example, if there is a dispute or risk of a legal claim. If we don’t have a legal obligation to retain the personal information, we instead make an assessment if we may require the personal information to protect MTech from legal claims. Please note that just because we have a legal obligation to store your personal information, this does not mean that we are also permitted to use this data for any other purpose.
When we no longer need your personal information, we will delete it or permanently anonymize it in accordance with our data retention policies and applicable laws, or, if this is not possible, then we will securely store your personal information and isolate it from any further processing until deletion is possible.
11. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect information about your interactions with our website and Services. Cookies may collect personal information. Cookies are small data files stored on your device’s internal memory that can be used to follow your activity on our websites, and that information helps us to remember your preferences and improve your user experience. Cookies are also used for activities such as remembering your access credentials for our Services. In addition to the cookies used by MTech and our service providers, some cookies are placed by third parties such as Google (e.g., for analytics as described below).
MTech uses cookies for the purposes set out below.
- Necessary Cookies. These are required to enable the basic features of our website, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.
- Functional Cookies. These cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.
Analytics Cookies. These are used to understand how visitors interact with our website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.
Performance Cookies. These are used to understand and analyze the key performance indexes of our website which helps in delivering a better user experience for visitors.
Advertisement Cookies. These are used to provide visitors with customized advertisements based on the pages visited previously and to analyze the effectiveness of ad campaigns.
Please note that third-party cookies might also serve other purposes as determined by the respective third-party organizations. For detailed information on how these organizations use the data collected through such cookies, please refer to each organization’s privacy policy.
Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove or reject cookies, this may affect the functionality and features of our website and Services.
You can manage your cookie preferences at any time through our Cookie Settings tool, which is accessible in the bottom left corner of our website. You can turn off all non-essential cookies (such as analytics or marketing cookies) using the Cookie Settings tool. You can also adjust your browser settings (e.g., Chrome, Safari, Firefox, Edge) to warn you whenever cookies are being used, or block cookies entirely. There are also third-party software tools available that can help you manage cookies. Please note that disabling or removing cookies may affect the functionality and features of our website and Services.
Do Not Track (DNT). Some web browsers include a Do‑Not‑Track (“DNT”) feature or setting that you can activate to signal your privacy preference not to be tracked online. Because no uniform technology standard for recognizing and implementing DNT signals has been finalized, we may not respond to DNT signals. Except where required by applicable law, we also may not respond to other mechanisms that automatically communicate your choice not to be tracked online. As mentioned above, you can communicate your choices about cookies and similar technologies through our Cookie Settings tool, which is accessible in the bottom left corner of our website, or your browser controls.
12. Your Privacy Rights and Choices
12.2. California Residents. If you are a California resident, you should read this Privacy Policy together with the “California Privacy Rights” section, which provides additional information about our California information practices, including a description of the California Consumer Protection Act rights available to some Californians.
12.3. Managing Your Information. You can review, update, or request deletion of your personal information by contacting us using the contact details provided below. Some information may be retained as necessary to comply with legal obligations, enforce agreements, or support legitimate business purposes such as fraud prevention and troubleshooting.
12.4. Withdrawing Consent. If we process your personal data based on consent, you may withdraw such consent. Withdrawing your consent will not affect the lawfulness of any processing carried out prior to withdrawal, or processing based on other legal grounds.
12.4. Opting Out of Email Marketing. You can opt-out of marketing communications at any time by clicking the “unsubscribe” link included in our messages, or by contacting us using the contact details provided below.
13. Personal Information About Children
Our website and Services do not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian aware that your child has provided us with personal information, please contact us immediately so that we may remove that information from our servers
14. Privacy Rights for Non-U.S. Residents
14.2. Legal Basis for Processing Personal Data. Our legal basis for collecting and using the personal data described in this Privacy Policy will depend on the personal data concerned and the specific context in which we collect it. Typically, we process personal data with your consent, to fulfill a contract, to comply with legal obligations, to prevent harm and protect our rights, or where it serves our legitimate interests without overriding your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect your personal data.
14.3. Our Role. As set out in Section 2 of this Privacy Policy, MTech acts as a “controller” for information collected on our website, security and audit logs, usage data, and communications we send, and as a “processor” for Subscriber Data processed on behalf of the Subscriber under our Subscription Agreement.
14.4. Your Data Subject Rights. As a data subject, you have certain rights under the LGPD and GDPR regarding our processing of your personal data, including the rights listed below.
- Right to Access. You have the right to receive written confirmation as to whether your personal data is being processed and, if so, access to the personal data.
- Right to Complain. If you believe that we illegally processed your personal data, you can file a complaint with us or with your local supervisory authority. You can find contact details in the “Contact Us” section below or here (for EU residents).
- Right to Data Portability. You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
- Right of Erasure. You have the right to ask us to delete your personal data, subject to certain limitations and restrictions. We retain your data only as long as necessary to fulfill our contractual obligations with the applicable subscriber, meet legal obligations, and as permitted by applicable law.
- Right to Object. You have the right to object to our processing of your personal data. We will then reassess whether our legitimate interests outweigh your interests and objections. If you object to processing for direct marketing, we will stop processing your personal data for such purposes.
- Right to Anonymization, Blocking, or Deletion of Unlawfully Processed Data. You have the right to request the anonymization, blocking, or deletion of personal data that is unnecessary, excessive, or processed in violation of LGPD.
- Right to Rectification and Restriction. You have the right to rectify inaccurate or incomplete personal data, and, under certain circumstances, you have the right to request restriction of the processing.
- Right to Information on Data Sharing. You have the right to request information about the public and private entities with which we have shared your personal data.
Right to Refuse or Withdraw Consent. If we process your personal data based on consent, you may refuse or withdraw such consent at any time. Withdrawing your consent will not affect the lawfulness of any processing carried out prior to such withdrawal, or processing based on other legal grounds. Refusing to provide your consent may limit the Services we are able to provide.
Right to Information on International Transfer Provisions. You have the right to access information about the contractual safeguards used for international transfers of your personal data, where applicable.
Right to Non-Discrimination. Any request to exercise one’s rights under the LGPD or GDPR will be free from negative consequences.
14.5. International Data Transfers from Brazil. We take appropriate steps to protect your personal data whenever it is transferred from Brazil to another country. These steps follow requirements outlined in LGPD and the rules issued by the Brazilian Data Protection Authority (ANPD) to ensure that it continues to be protected in accordance with applicable laws. To do so, we implement appropriate safeguards to ensure that the data collected is only transferred to countries that provide a degree of protection similar to or greater than what was provided by in Brazil, or to companies that contractually undertake to adopt a degree of protection similar to that provided for in the applicable legislation.
For further information on how MTech transfers your personal data outside Brazil, please refer to the table below.
15. California Privacy Rights
15.2. Your California Rights. As a California consumer, you have certain rights under the CCPA regarding our processing of your personal information, including the following.
- Right to Access. You have the right to request that we disclose what personal information we have collected, used, and disclosed about you in the past 12 months.
- Right of Erasure. You have the right to ask us to delete your personal information, subject to certain limitations and restrictions. We retain your data only as long as necessary to fulfill our contractual obligations with the applicable Subscriber, meet legal obligations, and as permitted by applicable law.
- Right to Rectification. You have the right to rectify inaccurate or incomplete personal information. To update inaccurate or incomplete personal information associated with you, you can contact us using the contacts details set out in the “Contact Us” section.
- Right to Non-Discrimination. Any request to exercise one’s rights under the CCPA will be free from negative consequences.
15.3. What Personal Information We Collect. We have collected the following categories of personal information within the past twelve months.
- Commercial Information. This includes subscription records. We collect this information directly from you or your organization.
- Customer Records Information / Identifiers. This includes information such as your name, e-mail address, mailing address, and phone number. We collect this information directly from you or your organization.
15.4. How We Use Personal Information. The business purposes for which we collect this information are described in Section 6 of this Privacy Policy. The categories of third parties to whom we may share or disclose this information for a business purpose are described in Section 7 of this Privacy Policy. The period for which we retain this information is described in Section 10 of this Privacy Policy.
15.5. How to Exercise your California Rights. You may exercise your rights directly or through an authorized agent. To protect your personal information, we will verify your identity using a method appropriate to the type of your request. If you act through an authorized agent, we may require your written permission and we may also verify your agent’s identity.
Please use the contact details above in the “Contact Us” section if you would like to access this Privacy Policy in an alternative format, exercise your rights, learn more about your rights or our privacy practices, or designate an authorized agent to make a request on your behalf.
16. Updates To This Privacy Policy
17. Contact Us
If you wish to exercise the privacy rights described herein or have questions regarding the processing of your personal data under this Privacy Policy, you can contact us using the details below. Email: support@mtech-systems.com
Mail: 115 Perimeter Center Place NE, Suite 845, Atlanta, GA 30346, USA
If you are in Brazil and have any questions or concerns about how we process your personal data, or if you wish to exercise your rights under LGPD, please reach out to our local Data Protection Officer (“DPO”), Vitor Oliveira, at dpobrasil@mtech-systems.com.
Note that the local entity responsible for handling personal data in Brazil is:
M-Tech Systems America Latina Ltda.
Rua Bahia 850, Do Salto, Blumenau SC, 89031-000
CNPJ: 19.023.519/0001-13