Back to MACHINEMIND

Privacy notice

Last updated: October 22, 2026

MACHINEMIND / CDT Global provides industrial AI and preventive-maintenance coordination. For privacy or support requests, contact info@cdtglobal.org.

Account, equipment and conversation data

We process account email addresses and identifiers, equipment descriptions and files you provide, generated kits, PM tasks, schedules, evidence reports, agent conversations and operational events. Communications may include names, departments, roles, business emails, phone numbers, message content, timestamps, delivery status and access-request decisions. Identity supplied by SMS is a claim until reviewed; it is not authentication. Optional account city, state/region and country can contextualize regional labor references. They do not change billing addresses, tax settings or timezone automatically.

We use this information to provide account access, answer questions, coordinate maintenance, identify missing context, preserve traceability, support users and protect the service. Share only information you are authorized to provide; do not send passwords, API keys or payment-card details in chat or SMS.

Essential browser storage

We store your privacy choice, daily free-use count and interface preferences on your device. Essential HttpOnly session cookies maintain account access; the application ends an inactive session after 24 hours. This storage is not used for advertising.

To prevent automated signup, verification-code abuse and fraudulent free usage, we use a signed security cookie lasting up to 30 days and temporary request limits. Rate-limit identifiers derived from email and network addresses are pseudonymized; expired counters are removed in bounded cleanup batches. These essential controls do not track advertising activity or identify your physical device.

Optional analytics

Only if you choose Allow analytics, we create a pseudonymous session ID and record product events, machine labels generated by the service, ratings, and feedback. We do not send your browser user-agent string. Please do not submit personal or confidential information in feedback.

AI processing and verifiable memory

Machine photos, operator notes and relevant conversation and equipment context are processed by server-side AI to identify equipment, generate maintenance kits and assist conversations. API credentials remain server-side. Reported information may be retained with its source and review status; an unconfirmed statement is not automatically verified evidence of completed work.

Generation cache

To reduce repeated AI processing, MACHINEMIND may store a one-way fingerprint of the image and the generated analysis and maintenance kit for up to 180 days. The original machine photo and operator notes are not stored in this cache. Changing the image, notes, output language, or generator version creates a different fingerprint.

Cached kits are scoped to your account or anonymous browser. An essential signed, HttpOnly cookie preserves anonymous kit ownership for up to 180 days so your kits can be linked to your account after sign-in. It is not an analytics identifier.

New kits may retain a 96-pixel preview derived from the supplied equipment photo for the same cache period. This is not the original photo. Account-owned execution records may include timestamps, duration, outcome, model-request counts and token totals; performance metrics do not include copies of prompts or verification codes.

Agent communications and SMS privacy

New v4 consent is one permission for all current and future engineering agents in the inviting account, only for the invited contact and exact sender. It is not shared with another account or sender and does not authorize marketing, recurring email or voice calls. Existing per-agent maintenance-only v3 consent is not expanded without a new explicit opt-in. Account-scoped acceptance evidence survives deletion of the inviting agent, but is removed with the account or contact and is included in the account export. STOP withdraws all agents on this sender; START restores only previously accepted scope.

A personal email invitation opens the SMS consent form and public evidence. Opening the email or link never enrolls anyone. The page shows the invited number and an optional SMS-only checkbox, unchecked by default. Selecting it and clicking Authorize engineering SMS records consent. No login is required. This does not authorize recurring email or voice calls; those require separate authorization. We retain the invitation ID, recipient, phone, account, exact sender, owner authorization, originating invitation, exact disclosure text/version and acceptance or withdrawal timestamp as evidence. Invitations expire after 72 hours.

The MACHINEMIND Agent Communications program supports two-way engineering questions, including maintenance and process engineering, schedules, status updates and evidence follow-up. Message frequency varies with your interactions and engineering needs. Message and data rates may apply. This refers to your mobile operator's plan, not an additional MACHINEMIND fee. The SMS terms explain recurring communications, membership coverage, help and cancellation.

Creating an account, accepting general terms, providing a colleague's phone number, or receiving administrator approval does not by itself enroll anyone in recurring SMS. Each recipient must separately consent to recurring messages. Consent is optional and is not a condition of purchasing, implementing or using MACHINEMIND. Mobile phone numbers are not shared with third parties or affiliates for marketing or promotional purposes. Access approval and messaging consent are separate requirements; private tenant information is available only after the organization's owner/admin authorizes the contact.

We do not sell or rent mobile information or SMS opt-in data and consent. We do not share mobile information or SMS opt-in data and consent with third parties or affiliates for marketing or promotional purposes. We do not transfer SMS consent to another sender or program. Providers may process only the information needed to deliver and support communications on our behalf, not for their own marketing.

Authorized account owners/admins may review communication-access requests and conversation records within their organization. Communication access does not grant permission to change billing, users, integrations, security, agent settings or phone assignments.

Service providers

We use providers for hosting, database/authentication, AI analysis, email, SMS and payments where enabled. These include Railway, Supabase, OpenAI, Resend, Twilio and Stripe. Only data needed for the relevant service is processed for operational purposes. This processing does not authorize advertising or sale of mobile information or consent.

Retention and your choices

Account, maintenance and communication records are retained as needed to provide the service, maintain operational history, address support/security issues and meet applicable obligations. Clearing visible chat history only hides it from the current view; it does not delete stored records. The 180-day cache period is not a deletion schedule for all account or conversation data.

You may use essential storage only and change analytics consent through Privacy settings in the footer. Withdrawing analytics removes its browser session identifier. Reply STOP to stop SMS and HELP for messaging help, or contact info@cdtglobal.org. Stopping SMS does not delete an account or its maintenance history. Contact us to request access, correction or deletion where applicable; we may need to verify your authority and explain required retention.