Privacy Policy

BaylynxPortal uses cookies and similar technologies to provide our services. A cookie is a small data file stored on your device.

Essential Cookies We Use:

• Session Cookie (baylynx-session): Required for authentication and maintaining your login session. Expires after 120 minutes of inactivity or when you close your browser.
• CSRF Token (XSRF-TOKEN): Security protection against cross-site request forgery attacks. Essential for form submissions.
• PLC Session Cookie (PlcManagerId): Required for accessing PLC web interfaces through our platform. Expires after 5 minutes.

Why These Cookies Are Necessary: All cookies we use are strictly necessary for the application to function. You cannot use BaylynxPortal without these cookies as they are essential for:

• Authentication and security
• Maintaining your session across pages
• Protecting against security attacks
• Accessing connected equipment

Third-Party Cookies: We do not use third-party cookies for tracking, advertising, or analytics.

Cookie Security: Our cookies use HttpOnly and Secure flags to prevent unauthorized access. All session data is encrypted and stored securely in our database.

Managing Cookies: You can delete cookies through your browser settings, but doing so will log you out and may prevent you from using the application. By using BaylynxPortal, you consent to our use of these essential cookies.

Account Information: When you create an account, we collect your name, email address, and role within your organization.

Machine Data: We collect data from your concrete mixing equipment including batch tickets, production metrics, and equipment status. GPS location data from routers is relayed in real-time but not stored.

Security Logs: We log security-related actions such as logins, password changes, and administrative activities for audit and security purposes.

We use the collected information to:

• Provide and maintain our services
• Process your batch tickets and production data
• Generate reports and analytics for your organization
• Provide technical support
• Improve our platform and develop new features

We do not sell your personal information. We may share data with:

• Your Organization: Data is shared within your company as configured by your administrators
• Service Providers: Third-party vendors (Tough Commerce or AggSmart) who assist in providing services if selected by you
• Legal Requirements: When required by law or to protect our rights

We implement industry-standard security measures to protect your data, including:

• Encryption in transit and at rest
• Regular security audits
• Access controls and authentication
• Secure data centers

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data (subject to legal requirements)
• Opt out of optional data processing

To provide our services, we use the following third-party service providers. Your data may be processed by these services as described:

• Google Cloud Vision (OCR): When drivers upload photos of batch tickets, images may be sent to Google Cloud Vision API for optical character recognition (OCR) to extract ticket data automatically. Images are processed according to Google Cloud's data usage policies.
• Photon Geocoding (by Komoot): Delivery addresses may be sent to the Photon geocoding service (photon.komoot.io) to convert addresses to GPS coordinates for route planning. This service uses OpenStreetMap data.
• OpenStreetMap: Map displays and routing use data from OpenStreetMap, licensed under the Open Database License (ODbL). Map data © OpenStreetMap contributors.
• GraphHopper: Route calculations for delivery optimization may be processed by GraphHopper routing services (self-hosted or API).
• Anthropic (AI Chat Summaries): If enabled, support chat conversations may be sent to Anthropic's Claude AI to generate summaries. This feature is optional and can be disabled in your privacy settings.

We select service providers that maintain appropriate data protection standards. For questions about specific third-party data processing, contact us at the email below.

This application uses open source software components licensed under various terms including MIT, BSD, Apache, and LGPL licenses. A complete list of third-party components and their licenses is available upon request. For LGPL-licensed components, source code is available at the links provided in our THIRD_PARTY_LICENSES documentation or by contacting email@bay-lynx.com.

If you opt in to receive push notifications, we collect and store the following information:

Data Collected:

• Push subscription endpoint URL (provided by your browser/device)
• Encryption keys required for secure message delivery
• Your browser and device type

Purpose:

Push notifications are used to alert you about:

• New job assignments
• Job status updates
• Important dispatch communications
• System alerts relevant to your deliveries

Data Retention:

• Push subscription data is stored only while you have an active subscription
• Unsubscribing immediately removes your subscription data from our servers
• Subscriptions are automatically cleaned up when they expire or become invalid

Your Control:

• Push notifications are entirely optional
• You can enable or disable notifications at any time from your browser settings or the notification bell icon in the driver portal
• You can manage notification permissions through your browser or device settings

Third-Party Services:

Push notifications are delivered through your browser's push service (e.g., Google's Firebase Cloud Messaging for Chrome, Mozilla's push service for Firefox, Apple's Push Notification service for Safari). These services receive only encrypted notification payloads and the subscription endpoint - no personal data is shared with them.