Privacy Policy

1. Introduction

RockPoint Automation ("we," "our," or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

By accessing our website or using our services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us, including:

• Name and contact information (email address, phone number, mailing address)
• Company name and job title
• Account credentials and login information
• Payment and billing information
• Communications you send to us

2.2 Operational Data

When providing SCADA and automation services, we may collect:

• System performance metrics and operational data
• Equipment status and diagnostic information
• Production and flow data
• Alarm and event logs
• System configuration data

2.3 Website Usage Information

We automatically collect certain information when you visit our website:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on pages
• Referring website addresses
• Clickstream data

2.4 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. You can control cookie preferences through your browser settings.

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve our SCADA and automation services
• Communication: To respond to inquiries, provide support, and send service-related notifications
• System Monitoring: To monitor system performance, detect issues, and ensure 99.9% uptime targets
• Analytics: To analyze usage patterns and improve our services
• Security: To protect against unauthorized access and maintain system security
• Compliance: To comply with legal obligations and industry regulations
• Billing: To process payments and manage accounts
• Marketing: To send promotional communications (with your consent)

4. Information Sharing and Disclosure

4.1 Service Providers

We may share information with third-party service providers who assist us in:

• Cloud hosting and data storage
• Payment processing
• Technical support and maintenance
• Analytics and performance monitoring

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

4.3 Legal Requirements

We may disclose information when required by law or to:

• Comply with legal processes or government requests
• Enforce our Terms of Service
• Protect our rights, property, or safety
• Investigate fraud or security issues

4.4 Client Data Ownership

Operational data collected through our SCADA systems remains your property. We do not sell or share your operational data with third parties except as necessary to provide services or as required by law.

5. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption of data in transit and at rest
• Secure access controls and authentication
• Regular security assessments and updates
• Employee training on data protection
• Incident response procedures
• Regular backups and disaster recovery plans

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to:

• Provide ongoing services
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain system performance records

Operational data from SCADA systems is typically retained according to industry standards and client agreements, often for 1-7 years depending on regulatory requirements.

7. Your Privacy Rights

7.1 Access and Correction

You have the right to:

• Access your personal information we maintain
• Request correction of inaccurate information
• Request deletion of your personal information (subject to legal requirements)
• Object to certain processing of your information

7.2 Communication Preferences

You can opt out of marketing communications at any time by:

• Clicking the unsubscribe link in emails
• Contacting us directly
• Updating your account preferences

7.3 California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising privacy rights

8. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete such information.

9. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

10. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where we or our service providers operate. By using our services, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection laws.

11. Industry-Specific Compliance

As an oil and gas automation provider, we comply with industry-specific regulations including:

• NERC CIP (North American Electric Reliability Corporation Critical Infrastructure Protection) where applicable
• API (American Petroleum Institute) standards
• OSHA safety and incident reporting requirements
• State and federal environmental data reporting

12. Data Breach Notification

In the event of a data breach that may compromise your personal information, we will:

• Notify affected individuals without unreasonable delay
• Provide information about the nature of the breach
• Describe steps we are taking to address the breach
• Provide recommendations for protecting your information
• Comply with all applicable breach notification laws

13. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will:

• Post the updated policy on our website
• Update the "Last Updated" date
• Notify you of material changes via email or prominent website notice

Your continued use of our services after changes become effective constitutes acceptance of the updated policy.

14. Contact Us About Privacy

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

15. Additional Information for EU Residents

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to data portability
• Right to restrict processing
• Right to object to automated decision-making
• Right to lodge a complaint with a supervisory authority

Our legal basis for processing your information includes:

• Consent you have provided
• Performance of a contract
• Legitimate business interests
• Legal compliance