Privacy policy

1. Who is responsible

Above AVG Inc. operates totalMOS and is responsible for personal information collected through it. totalMOS is software that manufacturing plants use to run production and quality records.

• If you use the app at a plant, the plant (usually your employer) decides why and how your information is used. Above AVG processes it only on the plant’s behalf and under a written agreement, as its service provider. Your plant has designated a person in charge of the protection of personal information; their name, title and contact details are shown in the app under Privacy & my data.
• If you visit our website or contact us, Above AVG Inc. is responsible for your information.

2. Our person in charge of the protection of personal information

Person responsible for the protection of personal information: Alexander Gidaro, privacy@totalmos.com. Write to this address with questions, requests and complaints about totalMOS itself. We answer within 30 days.

3. What we collect

• Account: your name, work email address, role and the plant you belong to, supplied by you or by the plant’s administrator who invited you.
• Sign-in: one-time codes are generated and emailed by our authentication provider; we keep a session in your browser, or a session token and the device’s name on a tablet.
• Work records you create: quality checks and their readings, production sessions, non-conformity notes and photos of defects, corrective actions (CAPA), checklists, batch-order signatures and the release decisions you sign on a finished run (both record your name and email by design).
• Audit trail: who changed what and when, kept so records can be trusted during inspections.
• Preferences: your language, display theme and cookie choices.
• Feedback: when you send feedback from the app’s menu, your comment together with your name, role, account identifier and plant.
• Questions to Mozzie: if your plant turns on Mozzie, the AI assistant, the questions you ask it, the lookups it made in the plant’s records and the answers it gave. Only you can see your conversations.
• Security logs: technical events such as failed requests, kept briefly to protect the service.

Our website collects nothing about you unless you write to us or book a demo, in which case we receive what you choose to send.

4. Why we use it

To provide the service your plant subscribed to: keeping quality and traceability records, controlling access by role, sending the notifications your plant turned on, answering your questions to Mozzie if your plant turns it on, securing the system, answering support requests and improving the product from the feedback you send us. We do not sell personal information, we do not use it for advertising, and we do not build profiles of you or make automated decisions about you. Mozzie reads the plant’s records without the names of the people who made them, and what it suggests stays a suggestion: deciding what to do is always up to a person.

5. Cookies and similar technologies

• Essential (always on): your sign-in session, a security token that protects forms, and the record of your cookie choice.
• Preferences (off until you allow them): your language, theme and menu layout. If you decline, they last only until you close the browser.
• Analytics: none are used today. If we ever add some, they will stay off unless you opt in.

No technology in totalMOS identifies, locates or profiles you. You can change your choice at any time from Cookie preferences in the app’s menu. Our website sets no cookies at all. The iPad app uses no cookies; it stores your sign-in token and language on the device.

6. Who we share it with

Only with the service providers that run totalMOS for us, bound by contract to protect it and to use it only for that purpose: Neon (database and sign-in), Amazon Web Services (file storage and email delivery), Vercel (application hosting), Discord (delivering the feedback you send from the app to our team) and, if your plant turns on Mozzie, the AI assistant, Anthropic (the AI model that answers the questions you ask it from the plant’s records: the names and email addresses of the people who made those records are left out, free text such as descriptions and notes is sent as written, Anthropic does not use any of it to train its models, and it deletes it within 30 days, except content its safety systems flag for misuse or that the law requires it to keep). We disclose information to anyone else only where the law requires it.

7. Information stored outside Québec

Some of these providers may store or process information elsewhere in Canada or in the United States. Before information leaves Québec we assess the privacy impact, and our contracts require protection equivalent to Québec law. The hosting region used for your plant is set out in its service agreement.

8. How long we keep it

• Your account, for as long as you are a member of the plant. When you leave, the plant can erase your personal information; you can also erase it yourself.
• Quality records and the audit trail, for as long as your plant’s record-keeping obligations require (for example food-safety traceability rules). After an erasure they stay linked to an anonymous reference, except where the law requires the signer to remain identified (batch-order signatures, run releases and the audit trail).
• Tablet sessions: deleted 30 days after they expire or are revoked.
• The log of notification emails: 90 days.
• Anonymous records of cookie choices: 13 months.
• Your Mozzie conversations: until you delete them, or 90 days after the last message (your plant can choose between 30 and 365 days).
• The register of confidentiality incidents: at least 5 years.

9. How we protect it

Encryption in transit, access limited by role, sign-in without passwords, private file storage served only through signed and checked links, sessions that can be revoked at any time, and an audit trail of every change.

10. Your rights

You can ask to access your information, to correct it, to withdraw a consent, and to receive it in a structured, commonly used format — Download my data does this in one tap. You can ask us to stop disseminating it or to erase it, subject to what your plant must keep by law — Erase my personal information does this in one tap. Write to your plant’s person in charge, or to us, and we will answer within 30 days. If you are not satisfied, you may complain to the Commission d’accès à l’information du Québec (cai.gouv.qc.ca).

11. Confidentiality incidents

We keep a register of every confidentiality incident. When an incident presents a risk of serious injury, the Commission d’accès à l’information and the people concerned are notified promptly, and your plant is told without delay.

12. Changes

When this policy changes, we update the date above and show the new version in the app.