Privacy Policy

1. Who we are and how to reach us

Mender provides IT asset disposition services: we collect used IT equipment from business customers, securely sanitize the data on it, and refurbish, resell or responsibly recycle it. Our registered address is 1301 Texas Star Parkway Euless, TX 76040. For any privacy question or request, email legal@withmender.com or call us toll-free at 844-373-4823.

Our role. In most cases Mender handles personal information as a service provider (a "processor") on behalf of the business customer that engages us. That customer decides what information to give us and how it may be used, and our handling of it is governed by our service agreement with the customer. Where this Privacy Policy and a service agreement differ, the service agreement controls for that customer's data. Mender acts on its own behalf (as a "controller") only for the limited information it collects for its own purposes, such as website visitor data, portal account credentials, marketing contacts, and the records of vendors and contractors we pay.

2. Information we collect

Information you give us

• Contact and account details: name, work email address, phone number, job title, employer, and login credentials for the customer portal.
• Service information: pickup addresses, site contacts, equipment lists, serial numbers, asset tags, and any notes or attachments you submit with a request.
• Communications: messages you send us by email, through the portal, or by phone.
• Vendor and contractor details: if you provide services to Mender, your name, business address, email address, phone number, and the payment and tax information needed to pay you.

Information we collect automatically

• Usage data: pages viewed, features used, actions taken in the portal, and the time and date of activity.
• Device and connection data: IP address, browser type, operating system, and device identifiers.
• Cookies and similar technologies, described in section 6.

Information from other sources

• Business contact details provided by your employer when it sets up your portal access.
• Shipment and tracking data from logistics carriers.
• Records from the business systems we use to run our operations, including our accounting software (see section 5).

Data stored on equipment you send us

Equipment entrusted to us for disposition may contain data belonging to our customer or to third parties. That data is handled under the applicable service agreement and our documented data-sanitization procedures, and it is not covered by this Privacy Policy.

3. How we use information

We use personal information to:

• provide and operate the Services, including scheduling pickups, tracking equipment, producing reports, and settling recovered value;
• set up and manage accounts, and authenticate users;
• communicate with you about requests, shipments, settlements and support;
• run our business, including invoicing, accounting, paying vendors and contractors, record-keeping and compliance;
• monitor, secure and improve the Services, and diagnose problems;
• comply with legal obligations and enforce our terms; and
• with your consent where required, send information about our services. You can opt out of marketing messages at any time.

4. How we share information

We do not sell personal information. We share it only as follows:

• Service providers that help us run the Services, such as cloud hosting, databases, email delivery, analytics, error monitoring and customer-support tools. They may use the information only to provide services to us.
• Logistics and processing partners, such as carriers and downstream recycling or resale partners, to the extent needed to collect, move and process equipment.
• Business systems we rely on, including our accounting and customer-relationship software (see section 5).
• Professional advisers such as auditors, lawyers and insurers.
• Authorities or other parties when required by law or to protect our rights or safety. Personal information may also be transferred as part of a merger, acquisition, financing or sale of all or part of our business, in which case it will remain subject to this Privacy Policy or a successor policy.
• Within your organization: information in the portal is visible to other authorized users of your employer's account according to the access they have been granted.

5. Connected third-party services, including Intuit QuickBooks Online

We connect our internal business systems to third-party platforms to run our operations. These include accounting software (Intuit QuickBooks Online), a customer-relationship management system, enterprise resource-planning software, logistics and shipping platforms, email delivery, and product analytics.

QuickBooks Online specifically: Mender connects its own QuickBooks Online company file to Steward, our internal operations platform, so that accounting records such as customers, vendors, invoices, bills and payments can be synchronized with our operational data for reporting and reconciliation. The connection runs between Mender's systems and Mender's own accounting account; we do not connect to or access any customer's QuickBooks account. The only personal information involved is the business contact information that ordinarily appears in accounting records, such as the names, business addresses and email addresses of customer billing contacts and of the vendors and contractors we pay. Service data, including pickup addresses, site contacts, equipment lists and serial numbers, is not sent to QuickBooks. Access is authorized through Intuit's OAuth process, the resulting credentials are stored encrypted, access is limited to authorized Mender staff, and the connection can be revoked at any time from Intuit's connected-apps settings. Information obtained from QuickBooks is used only for the purposes described in section 3 and is not sold or shared beyond the parties listed in section 4. Intuit's own handling of data is described in Intuit's privacy statement.

6. Cookies and analytics

We use cookies and similar technologies to keep you signed in, remember your preferences, keep the Services secure, and understand how they are used. Session cookies are essential and cannot be switched off while using the portal. Analytics tools collect usage and device data so we can improve the Services and identify errors. You can control cookies through your browser settings, although disabling essential cookies will stop the portal working.

7. How long we keep information

We keep personal information for as long as needed for the purposes described above, which typically means for the duration of our relationship with your organization plus the period required by our record-keeping, tax, audit and legal obligations. Service records, including certificates and settlement statements, are retained in line with the applicable service agreement and regulatory requirements. We delete or anonymize information when it is no longer needed.

8. How we protect information

We use administrative, technical and physical safeguards appropriate to the sensitivity of the information, including encryption in transit, encrypted storage of credentials and secrets, role-based access controls, logging, and secure development practices. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and will notify you and the relevant authorities of a breach where the law requires it.

9. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, to withdraw consent, and to appeal a decision we make about your request. Residents of California, Texas and other U.S. states with comprehensive privacy laws have these rights under their state's law, including the right to know what categories of personal information we collect and how we use and share them. We do not sell personal information, we do not share it for cross-context behavioral advertising, we do not use it for profiling that produces legal or similarly significant effects, and we do not discriminate against anyone for exercising their rights.

To make a request, email legal@withmender.com or call us toll-free at 844-373-4823. We will verify your identity before acting on a request and respond within the time required by law. If we decline all or part of a request, you may appeal by replying to our response, and we will tell you how to contact your state attorney general if you are not satisfied with the outcome. If you use a customer organization's account, or your information was provided to us by a customer, we act as a service provider for that customer and may refer your request to them so they can respond.

10. International transfers

Our Services are operated from the United States, and our service providers may process information in the United States and other countries. Where we receive personal information from the European Economic Area, the United Kingdom or other jurisdictions that restrict international transfers, we rely on the safeguards required by applicable law, such as standard contractual clauses, and we handle that information under the terms of our agreement with the customer that provided it.

11. Children

The Services are intended for business users and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact legal@withmender.com and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top shows when it last changed. If we make a material change, we will post the updated policy on this page before it takes effect.

13. Contact us

For privacy questions, requests or complaints, contact Taber Group, LLC (d/b/a Mender) at legal@withmender.com, by phone at 844-373-4823, or by mail at 1301 Texas Star Parkway Euless, TX 76040.