Privacy Policy

1. Scope

This Privacy Policy describes how Balanced Engineering ("we," "us," or "our") collects, uses, and protects information in the Balanced Engineering Lab Platform (the "Service"). The Service is an internal-use lab management tool used only by our employees and contractors. We do not offer the Service to the general public.

2. Information we collect

We collect the following categories of information:

• Account data — name, email, role, and optional profile fields you provide.
• Work data — test results, project assignments, time entries, equipment usage, and similar records you produce in the course of your duties.
• Operational data — sign-in events, audit log entries, IP addresses, and request metadata used for security and debugging.

3. How we use information

We use the collected information solely to operate the Service: managing accounts, recording lab and field work, generating reports, billing internal projects, and securing the system. We do not sell, rent, or share personal information with third parties for marketing purposes.

4. Third-party integrations

The Service connects to the following third-party systems on behalf of authenticated users:

• Intuit QuickBooks Time — engineer timesheet entries are pushed to QB Time for payroll processing. The data sent includes timesheet IDs, jobcodes, dates, durations, and the engineer's QB Time user mapping. Use of QB Time data is also governed by Intuit's Privacy Policy.
• HiveMQ Cloud (MQTT) — temperature sensor readings from concrete curing tanks are received via an MQTT broker.
• Open-Meteo — current weather conditions are fetched for field log auto-fill.
• Cloudflare — used as a CDN and TLS terminator for the Service URL.

5. Data retention

We retain work records and audit logs indefinitely as part of our business records. Account data is retained for the duration of employment or engagement and a reasonable period afterward for offboarding and legal compliance.

6. Security

Passwords are hashed with Argon2id. All traffic is served over TLS. Access is gated by role-based permissions. Audit logs record sensitive actions. No system is perfectly secure, but we apply industry-standard practices to protect the data we hold.

7. Access and corrections

Employees and contractors may request access to or correction of their personal records by contacting the address below.

8. Changes to this policy

We may update this Privacy Policy from time to time. The effective date at the top of the page reflects the most recent revision.

9. Contact

Questions about this Privacy Policy or our handling of your information: [email protected].