Privacy Policy

1. Who we are

MachineryDocs (app.machinerydocs.shop) is a subscription library of technical manuals for agricultural and heavy machinery, operated from Brazil and serving customers worldwide. This policy explains what personal data we collect, why, and your rights. Contact: primosnegocios2@gmail.com.

2. Data we collect

• Account data: your email address and an encrypted password. That’s all we need to identify you. Browsing the catalog requires no account and no personal data at all.
• Subscription data: your plan, subscription status and validity dates, received from Stripe when you purchase, renew, cancel or refund.
• Usage data: a log of the PDF files you download (used to apply your monthly download allowance).
• Upload and rating data: if you upload documents we store the files, their metadata and the origin of the upload (IP address and browser identification, kept as a legal record and never shown publicly); if you rate a document we store your rating. Copyright notices submitted through our DMCA form are also stored for legal record-keeping.
• Payment data: none. Payments are processed entirely by Stripe. We never receive or store your card details.

We do not collect data for advertising, we do not use tracking or analytics cookies, and we never sell personal data.

3. Why we process your data (legal bases)

We process the data above to provide the service you purchased (performance of a contract): creating your account, granting and renewing access, applying download limits, and sending essential transactional emails (such as your login details). We may also process data to comply with legal obligations and to prevent abuse of the Service (legitimate interest).

4. Who we share data with (processors)

We use a small number of service providers to operate the platform:

• Supabase: database and authentication (data stored in the United States);
• Stripe: payment processing and subscription billing;
• Resend: transactional email delivery;
• Cloudflare: secure file storage and delivery;
• Hostinger: website hosting.

Each provider receives only the minimum data needed for its function. We do not share your data with anyone else, except if required by law.

5. International transfers

Our infrastructure is hosted in the United States and Europe. By using the Service you acknowledge that your data may be processed in these locations, protected by the safeguards of our providers.

6. Cookies

We use only essential cookies: your login session and a small preference (such as your grid/list layout choice). No advertising, tracking or third-party analytics cookies are used, which is why you don’t see a cookie banner here.

7. Data retention

We keep your account and subscription data while your account exists, and for a reasonable period afterwards to comply with legal, tax and anti-fraud obligations. Purchase event records are kept for audit purposes.

8. Your rights

Depending on where you live (including under the EU GDPR, UK GDPR, California CCPA and Brazil’s LGPD), you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, email us at primosnegocios2@gmail.com from the address linked to your account. We respond within 30 days. You may also lodge a complaint with your local data protection authority.

9. Security

All traffic is encrypted (HTTPS). Files are stored in private storage and served only through short-lived signed links after your access is verified. Database access is protected by row-level security, so each customer can only read their own data.

10. Children

The Service is intended for professional use and is not directed to children under 16. We do not knowingly collect data from children.

11. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with a new “Last updated” date.