ECE Consulting, Inc. d/b/a ECE Global ("ECE Global," "we," "our," or "us") is committed to protecting privacy and responsibly handling personal information. This Privacy Policy explains how we collect, use, disclose, protect, and retain information across our websites, applications, and related services (collectively, the "Sites" or "Services"), including the GWMApp software platform.

This Privacy Policy should be read together with our Terms of Service and, where applicable, our Data Processing Addendum (DPA).

1. Introduction and Scope

This Policy applies to personal information processed by ECE Global through its Sites and Services. ECE Global acts as a data controller when it determines the purposes and means of processing personal information and as a data processor when it processes Client Data on behalf of a client under the DPA.

GWMApp is ECE Global's customer-facing cloud software service for welding-related project management, technical documentation, qualification records, validation, and collaboration.

ECE Global also operates a separate, non-public Ruleset Manager. The Ruleset Manager is an internal application used by authorized personnel to develop, technically review, approve, revise, and control standards-informed rulesets. It is not part of the GWMApp Service licensed to customers.

2. Our Privacy Principles

Our privacy program is based on transparency, purpose limitation, data minimization, appropriate security, controlled access, confidentiality, and compliance with applicable privacy and data-protection laws.

3. Description of Our Services and Ruleset Architecture

Approved rulesets are created and controlled in the separate Ruleset Manager and may be exported through controlled Excel-based rule packages for import into GWMApp. GWMApp then executes the imported logic within applicable forms and workflows.

GWMApp license holders do not receive access to the Ruleset Manager, the underlying ruleset definitions, decision logic, source-standard content, or the Excel rule packages used for administrative transfer. End users receive only the application-specific values, calculations, validations, warnings, qualification ranges, or other results presented in the applicable GWMApp form or workflow.

Source standards, codes, customer specifications, and other technical reference documents used during ruleset development are not transferred into GWMApp as part of a ruleset package and are not made available to GWMApp license holders through the Service.

4. Information We Collect

Depending on how you use the Services, we may collect account and contact information; billing and subscription information; device, browser, log, and interaction data; support and communications records; system and usage data; and Client Data submitted through the Service.

Where a client provides technical standards, specifications, drawings, procedures, or similar source documents for authorized technical work, those materials may constitute Client Data and/or Confidential Information. Such materials are handled only for the authorized business purpose and are not made available to unrelated customers or ordinary GWMApp users.

We do not intentionally collect biometric information or precise geolocation information unless a specific feature requires it and appropriate notice or consent is provided.

5. Sources of Information

We obtain information directly from users and clients, automatically through use of the Services and associated technologies, from service providers supporting the Services, and from other lawful business sources where appropriate.

6. How We Use Information

We use personal information and Client Data to provide and maintain the Services; administer accounts, subscriptions, and billing; provide support; communicate technical or administrative notices; secure the Services; prevent fraud and misuse; maintain quality and audit records; improve platform performance and functionality; and comply with contractual and legal obligations.

Where authorized technical source documents are provided for ruleset development, we use them only for the requested technical, administrative, security, legal, licensing, or quality-control purposes associated with that work.

Unless separately authorized in writing, ECE Global does not use client-provided standards, specifications, drawings, procedures, or other confidential source documents to train public or generally available artificial-intelligence or machine-learning models.

7. Disclosure and Sharing

We may disclose personal information or Client Data to service providers acting on our behalf, professional advisers, regulators or governmental authorities when legally required, and parties involved in a merger, acquisition, financing, reorganization, or sale of assets, subject to applicable safeguards.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising except where such processing is used, legally permitted, and appropriately disclosed or consented to.

Source standards, customer specifications, and other restricted technical materials used for ruleset development are not disclosed to GWMApp license holders or unrelated clients through GWMApp. Approved ruleset packages transferred into GWMApp contain application logic and traceability metadata, not copies of the underlying source standards or specifications.

8. Legal Basis for Processing

Where applicable law requires a legal basis, ECE Global may rely on performance of a contract, legitimate interests, consent, compliance with legal obligations, or another lawful basis appropriate to the processing activity.

9. Cookies and Similar Technologies

We may use cookies and similar technologies that are necessary for security, authentication, session management, functionality, analytics, and user experience. Where required, users may manage non-essential cookie preferences through available consent controls or browser settings.

ECE Global will maintain its cookie disclosures to reflect technologies actually deployed in the Services.

10. Your Privacy Rights and Choices

Depending on your jurisdiction, you may have rights to request access to, correction of, deletion of, or portability of personal information; object to or restrict certain processing; withdraw consent; or opt out of certain data uses. Requests may be submitted to privacy@gwmapp.com. We may verify identity before processing a request and may deny or limit a request where permitted by law.

11. Children’s Privacy

The Services are intended for business and professional users and are not directed to individuals under 18. We do not knowingly collect personal information from children through the Services.

12. Security and Access Controls

ECE Global maintains administrative, technical, and physical safeguards designed to protect personal information and Client Data against unauthorized access, disclosure, alteration, loss, or destruction. Access is restricted according to role, authorization, and business need, and personnel and subprocessors with authorized access are subject to confidentiality obligations.

Source documents used for ruleset development are maintained in controlled company-private locations accessible only to authorized personnel. They are not stored in GWMApp merely because a ruleset references them.

13. Data Retention and Deletion

We retain personal information and Client Data only as long as reasonably necessary for the purposes described in this Policy, contractual obligations, security, quality records, dispute resolution, audit, accounting, or legal requirements.

For technical source documents used in ruleset development, retention is limited to the period authorized or reasonably necessary for development, review, approval, audit, contractual, legal, or licensing purposes. Where continued retention is not authorized or required, working copies may be deleted after the applicable ruleset has been completed and approved.

Approved ruleset logic, source-reference metadata, ruleset revision history, approval records, and audit trails may be retained separately from the source document for technical traceability, software control, quality, contractual, security, and legal purposes.

14. International Data Transfers

ECE Global is based in the United States. Personal information and Client Data may be processed in the United States or other jurisdictions in which ECE Global or its service providers operate. Where required, we use appropriate transfer safeguards, including contractual or other legally recognized mechanisms.

15. Third-Party Services and Links

The Services may rely on or link to third-party services, hosting providers, payment processors, analytics providers, or external websites. Their privacy practices are governed by their own terms and policies. ECE Global is not responsible for the privacy practices of unaffiliated third parties.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will revise the effective date when changes are made. Where required by applicable law, we will provide additional notice of material changes and obtain consent where necessary.

17. Relationship to Terms of Service and DPA

This Privacy Policy describes ECE Global's privacy practices. Contractual use of GWMApp is governed by the applicable Terms of Service. Processing of Client Data by ECE Global on behalf of a client is additionally governed by the applicable DPA. If the DPA conflicts with this Policy regarding processor obligations for Client Data, the DPA controls to the extent of that conflict.

18. Contact Us

ECE Consulting, Inc. d/b/a ECE Global

Leesburg, FL 34748 USA

Phone: (847) 250-5240

General: contact@gwmapp.com

Privacy inquiries: privacy@gwmapp.com