Introduction
HEC Bore ("we," "our," or "us") operates the HEC Bore application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, and protect information when you use our Service.
HEC Bore is an internal business tool designed for managing horizontal directional drilling operations, field data collection, and project documentation.
Information We Collect
Account Information
- Name and contact information
- Email address
- PIN (for field worker authentication)
Location Data
- GPS coordinates for bore logs and rod tracking
- Utility encounter locations
- Tie-in point locations
- Project site locations
Media Files
- Photos and videos captured for job documentation
- Uploaded documents and files
Project Data
- Job and project information
- Client details
- Work assignments
- Field submissions and notes
Technical Information
- IP addresses
- Device information (type, operating system, browser)
- Access timestamps and activity logs
How We Use Your Information
We use the collected information for the following purposes:
- Providing and operating the Service
- Managing user accounts and authentication
- Recording and tracking field work activities
- Generating project documentation and reports
- Security monitoring and audit logging
- Troubleshooting and improving the Service
- Administrative analytics and usage monitoring
Data Storage and Security
All data is stored on our own private servers. We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction.
Security measures include:
- Encrypted data transmission (HTTPS/TLS)
- Secure authentication mechanisms
- Access controls and audit logging
- Regular security monitoring
Third-Party Services
We integrate with the following third-party services to provide our Service:
- Google Maps: Used for location and mapping functionality. Your use of map features is subject to Google's Privacy Policy.
- Stripe: Used for payment processing. Payment information is handled according to Stripe's Privacy Policy. We do not store your full credit card numbers on our servers.
- Cloudflare: Used for content delivery and security. See Cloudflare's Privacy Policy.
We do not sell, trade, or otherwise share your personal information with any third parties for marketing purposes.
Data Retention
We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this policy. Project data and documentation may be retained for business record-keeping purposes.
- Active accounts: Data retained for the duration of your subscription
- After cancellation: Data available for 30 days for export, then deleted
- Audit logs: Retained for 2 years for security and compliance purposes
- Backup data: Retained for 90 days before permanent deletion
Cookies and Tracking Technologies
We use cookies and similar technologies to operate and improve our Service:
- Essential cookies: Required for authentication, security, and basic Service functionality. These cannot be disabled.
- Session tokens: Used to maintain your login state securely. These expire when you log out or after a period of inactivity.
- Local storage: Used by our mobile application to enable offline functionality and store pending data submissions.
We do not use advertising cookies or third-party tracking cookies for marketing purposes.
International Data Transfers
Our servers are located in the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States, which may have different data protection laws than your country.
By using the Service, you consent to this transfer. We implement appropriate safeguards to protect your information in accordance with this Privacy Policy.
Children's Privacy
The Service is intended for business use by adults. We do not knowingly collect personal information from children under 13 years of age. If we learn that we have collected information from a child under 13, we will promptly delete it.
If you believe a child has provided us with personal information, please contact us immediately.
Data Breach Notification
In the event of a data breach that affects your personal information, we will:
- Notify affected users via email within 72 hours of discovery
- Describe the nature of the breach and the types of data involved
- Explain the steps we are taking to address the breach
- Provide recommendations for protecting yourself
- Report to relevant authorities as required by law
Your Rights
Depending on your location, you may have certain rights regarding your personal information:
General Rights (All Users)
- Access your personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Withdraw consent where processing is based on consent
California Residents (CCPA)
Under the California Consumer Privacy Act, California residents have additional rights:
- Right to know what personal information is collected and how it is used
- Right to delete personal information held by businesses
- Right to opt-out of the sale of personal information (note: we do not sell personal information)
- Right to non-discrimination for exercising your privacy rights
European Residents (GDPR)
Under the General Data Protection Regulation, EU/EEA residents have additional rights:
- Right to data portability
- Right to restrict processing
- Right to object to processing
- Right to lodge a complaint with a supervisory authority
How to Exercise Your Rights
- Data Export: Company administrators can request a complete data export from Company Settings. Exports are delivered as a ZIP file within 72 hours.
- Account Deletion: Company administrators can request account deletion from Company Settings. A 48-hour grace period allows you to cancel if needed.
- Other Requests: Contact us through our Support Page. We will respond within 30 days.
Some data may need to be retained for legitimate business or legal purposes (e.g., anonymized billing records, audit logs for security compliance).
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of any material changes by updating the "Last updated" date at the top of this page. If you have questions about any changes, please contact us.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us: