SIMAHIR Privacy Policy

Application: SIMAHIR (Simplified Asset Historian) • Domain: ahis.online • Last Updated: November 4, 2026

1. Overview & Platform Purpose

SIMAHIR ("Simplified Asset Historian", operated at https://ahis.online) is an enterprise industrial asset reliability and maintenance tracking platform. The application provides authorized corporate personnel with tools to log equipment failures, monitor electronic notifications (e-Notif), coordinate 7-day maintenance workflows (eMWR), and export audit-ready asset records.

We are committed to maintaining the privacy, integrity, and confidentiality of all user information and operational records entrusted to our platform. This Privacy Policy details how we handle user data and our strict adherence to Google API Services requirements.

Google API Services User Data Policy (Limited Use)

SIMAHIR's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Google user data is never transferred to third parties (unless required by law), is never sold, and is never used for serving advertisements or training artificial intelligence / machine learning models.

2. Information We Collect

When you interact with SIMAHIR, we collect only data strictly necessary to provide industrial asset historian features:

Google Profile & Identity Data: When signing in through Google OAuth, we receive your email address, full name, and avatar picture. This information is matched against your organization's pre-approved employee directory to verify identity and assign appropriate role-based access permissions.
Industrial Maintenance Records: Data entered by users within their company tenant, including equipment hierarchies, notification descriptions, inspection photos/evidence, maintenance priority statuses, and audit activity logs.
OAuth Credentials: Ephemeral authorization tokens provided by Google to facilitate requested user actions (such as direct Google Drive export or sending export files via Gmail). Tokens are held in encrypted, HTTP-only session cookies and are discarded upon user logout.

3. How We Use Google OAuth Scopes

SIMAHIR utilizes incremental authorization. We only request Google API scopes when an authorized user explicitly initiates an action that requires them:

openid, email, profile

Purpose: Primary user sign-in and account verification. Authenticates the user against their company's active workforce directory and identifies the user in internal maintenance audit logs.

https://www.googleapis.com/auth/drive.file

Purpose: Exporting asset reports directly to Google Drive upon user request.
Scope Limitation: This permission only grants access to files and folders created by SIMAHIR. SIMAHIR creates a designated folder named "SIMAHIR Exports" in your Google Drive and uploads your requested CSV or PDF export file. SIMAHIR never reads, browses, accesses, or modifies any other files in your Google Drive.

https://www.googleapis.com/auth/gmail.send

Purpose: Emailing generated export reports to yourself.
Scope Limitation: This permission is used solely to transmit an email containing the generated export document (CSV or PDF) as an attachment from your own authenticated Gmail account directly to your verified email address. SIMAHIR never reads, reads the metadata of, accesses, or deletes your incoming emails, drafts, or message history.

4. Real-Time In-Memory Processing & Storage Policy

All export operations (CSV tables and PDF inspection dossiers with embedded multimedia) are generated entirely in-memory in real-time during user execution.

Export documents are transmitted directly to the user's browser download stream, user's Google Drive folder, or self-addressed email. No exported files are permanently retained on Cloudflare R2 object storage, Cloudflare D1 databases, or intermediate file servers. Once transmission finishes, intermediate memory buffers are immediately purged.

5. Third-Party Sharing, Advertising, & AI Prohibition

No Commercial Sale: We never sell, rent, monetize, or lease your personal information, corporate records, or Google user data to advertisers, data brokers, or any third parties.
No Advertising: SIMAHIR is an industrial operations platform with zero advertising networks or behavioral tracking scripts.
No AI/ML Model Training: Google user data and maintenance records are never used to train, develop, fine-tune, or validate generalized artificial intelligence (AI) or machine learning (ML) models.

6. Your Rights & Revoking Access

You maintain complete ownership and control over your account and data:

Revoking Google Permissions: You can revoke SIMAHIR's access to your Google account at any time via the Google Account Third-party apps & services.
Session Termination: Clicking "Sign Out" immediately clears your session tokens and terminates access to company resources.
Data Deletion Requests: Authorized corporate administrators may request deletion of user profiles or operational records by contacting our support team.

7. Contact Information

For questions, concerns, or inquiries regarding this Privacy Policy or SIMAHIR's data practices, please contact our administrative team:

Platform: SIMAHIR (Simplified Asset Historian)

Website: https://ahis.online

Support & Privacy Email: asset.historian@gmail.com