MachLink Privacy Policy

Enquiries

When you send an enquiry, MachLink records the contact and business details you provide, your requirements and the relevant MachLink application. We use this information to respond and manage the conversation. Limited campaign information may be included to understand how enquiries reach us. Access to enquiries is restricted to authorised administrators. Enquiry information is not used to create an account or subscribe you to marketing.

You can use the contact form to ask about an enquiry you have submitted or request its removal.

Information associated with your MachLink account

MachLink may process account identifiers such as your email address, authentication/session information, your organisation or workshop relationship, and the vehicles or assets your account is authorised to access. This information is used to authenticate you, enforce access permissions, provide support and protect the service.

Vehicle and asset telemetry

The MachLink hardware and cloud platform can record engine, ECU, sensor and related operational telemetry according to the configured MachLink service. That existing cloud recording is separate from the mobile app's local Bluetooth dashboard. Opening the mobile dashboard does not cause the app to upload a second high-rate copy of the live Bluetooth stream to Supabase or the MachLink cloud.

Bluetooth pairing and device security

To authorise a phone, MachLink processes identifiers for the physical MachLink, the app installation and the associated account, together with short-lived pairing information and revocable read-only authorisation records. Long-lived MachLink cloud device credentials are not placed in the QR code or mobile app. The app stores the phone's local MachLink authorisation and login session in operating-system protected secure storage.

Camera

The app requests camera access only so you can scan a MachLink QR code during pairing. MachLink does not require you to take or upload photographs for this purpose, and the app does not use the microphone for QR pairing.

Location

The MachLink mobile app does not use the phone's location as part of the V1 live dashboard. On older Android versions, the operating system may classify Bluetooth scanning permission as a location-related permission even when the app uses it only to discover a nearby MachLink. Any GPS data collected by MachLink hardware is governed by the vehicle's configured consent and privacy controls and is not automatically exposed simply because a phone is nearby.

Why information is used

• to authenticate users and authorised MachLink devices;
• to connect the correct phone to the correct physical MachLink;
• to enforce vehicle, customer, workshop and organisation access permissions;
• to provide telemetry, diagnostics, EngineINTEL and other enabled MachLink services;
• to investigate security events, faults and support requests;
• to maintain service reliability and prevent abuse.

Retention and revocation

Mobile Bluetooth authorisations are time-limited and can be revoked. Pairing tickets are short-lived and one-time use. Other account, telemetry, security, billing and operational records are retained according to the relevant MachLink service purpose, technical requirements and applicable obligations. Removing a MachLink from the phone does not itself delete historical telemetry already recorded by the main MachLink platform.

Service providers

MachLink uses service providers to operate parts of the platform, including authentication/database hosting, application hosting, source/release infrastructure and mobile-app distribution. Information is shared with those providers only as required to operate the relevant service and remains subject to their service and security arrangements.

Security

MachLink uses technical controls including authenticated user and device sessions, access controls, encrypted network transport, secure mobile storage and cryptographic protection of the local live Bluetooth session. No system can guarantee absolute security; suspected account or device compromise should be treated as a reason to revoke access and reauthorise the affected device or phone.

Your choices

You can sign out of the app, remove a paired MachLink from the phone and revoke the associated mobile grant. Vehicle owners and organisations may have additional controls in the MachLink web service, including access assignment and configured location/consent settings.

Questions and support

Use the MachLink support page for mobile-app help. Existing users can also sign in to the MachLink web service for the account help centre and workshop support workflow.

Changes to this policy

This policy may be updated as MachLink adds mobile, vehicle-interface, fleet or other powered-asset capabilities. The effective date above will be updated when a revised policy is published.