Privacy Policy

OnPoint Automation LLC · Midland, Texas · Effective July 28, 2026

This portal is a business tool: it shows oil and gas operators live data from their own field sites. We collect the minimum personal information needed to run it, we don't sell any of it, and there is no advertising or tracking anywhere on this site.

What we collect

Account information. When your company asks us to create a portal account for you, we store your name, username, email address, and the company you work for. If your company signs you up for alarm notifications or daily reports, we also store the email address and/or mobile number those should go to.

Usage and security records. We log sign-ins, failed sign-in attempts, the pages and sites viewed, and administrative actions, along with the IP address and time. These records exist to keep the portal secure and to answer "who changed this?" — not for marketing.

Site telemetry. The measurements shown here — flow rates, tank levels, pump data, alarms — come from equipment at our customers' field sites. That is operational data about machinery, not personal information, and it belongs to the customer it was collected for.

What we don't do

We do not sell or rent personal information to anyone. We do not run advertising, analytics trackers, or social-media pixels. This site sets exactly one cookie: an essential session cookie that keeps you signed in. That's why there's no cookie banner — there's nothing to opt out of.

Who we share with

Only the service providers required to operate the system: our hosting provider (Hetzner), our email delivery provider (SendGrid/Twilio) for reports and alert emails, and Twilio for SMS alerts. Each receives only what it needs to deliver its function. We disclose information beyond that only if the law requires it.

How long we keep things

Account information is kept while your account is active and removed on request after it's closed. Security and audit records are kept as long as they're useful for security. Site telemetry is retained per our agreement with your company (currently about 90 days of live data, plus archived daily reports).

How it's protected

All traffic is encrypted (HTTPS). Passwords are stored only as salted hashes — we cannot see them. Access is role-limited so each company's users see only their own sites, administrative actions are audit-logged, and the system is backed up nightly.

Your choices

To correct or delete your account information, stop receiving reports or alerts, or ask what we hold about you, email carlosromero@onpointautomation.net or ask your company's administrator. This service is for businesses and their personnel; it is not directed at children.

Changes

If this policy changes in a way that matters, we'll note the new effective date here and tell your company's administrator.