LMT Connect Privacy Policy

Effective date: October 12, 2026
Last updated: October 12, 2026 (replaces the July 17, 2026 version)

Laser Marking Technologies, LLC (“LMT,” “we,” “us,” or “our”) provides the LMT Connect mobile applications for iOS and Android, the LMT Connect website at lmtconnect.lasermarktech.com, the LMT Connect Premium and AutoAlign AI purchase pages on lasermarktech.com, and the related services, APIs, backend systems and machine-telemetry services (together, “LMT Connect” or the “Service”). This Privacy Policy explains what information LMT collects through LMT Connect, how we use and share it, how long we keep it, and the choices and rights you have. Use of LMT Connect is also governed by the LMT Connect Terms of Service. LMT’s marketing website is covered by the LMT website Privacy Policy.

1. Who is responsible

LMT is responsible for the information it processes to operate LMT Connect for its own business purposes, such as account administration, security, support, warranty, billing and product improvement. When your employer or another customer organization manages your access, that organization may also control information associated with its users, machines, tickets and records, and its administrators may see organization information according to their role. In those cases LMT may process information on the organization’s behalf.

2. Information we collect

Information you provide

• Account and profile: first and last name, email address, password (handled by our authentication provider; LMT never sees it in readable form), optional phone number, optional profile photo, company name, organization membership and role, temperature-unit and appearance preferences, notification preferences, and your acceptance of the Terms of Service and this Privacy Policy (version, date and time, app or website, app version and IP address).
• Sign in with Apple or Google: if you choose these, we receive the name and email address (or Apple private-relay email) those providers share, and an identity token used to sign you in.
• Organization and access requests: requests to join an organization, machine serial numbers you submit to request access to a machine, team invitations and the email addresses they are sent to, and approval decisions.
• Support content: ticket titles and descriptions, contact name and phone you enter on a ticket, chat and AI-assistant messages, troubleshooting history, feedback, and photos, videos, documents or other files you attach. Files you send through an LMT upload link (which does not require an account) include the name, email address and note you enter, and the IP address of the upload.
• AutoAlign AI training: part names, notes, photographs of parts you take or select, optional DXF files, the machine you choose, and the trained models produced from them.
• Power-cost features: if you use power-cost tracking, the facility address you type (used to estimate electricity rates) and the electricity rate you enter or select.
• Account deletion requests: the request, its status and any optional reason you give.

Information from purchases

LMT Connect Premium subscriptions and AutoAlign AI token packs are purchased on lasermarktech.com and processed by Stripe, Inc. Stripe collects your card details and billing address directly; LMT never receives or stores your full card number. LMT receives and keeps: the purchaser’s name and email address, the organization and LMT Connect user the purchase is for, Stripe customer, checkout, subscription and price identifiers, the amount, currency, date, plan (monthly or annual), renewal and cancellation status, and the number of tokens purchased. We keep a ledger of AutoAlign token purchases, use, refunds and adjustments for your organization.

Machine and business information

We receive information about LMT machines from LMT’s own records, from your organization, and from connected machines, including: serial number, model, machine type, wattage, laser source, lens, firmware and software versions, notes, warranty dates, ownership and transfer history, documents, service history, machine build and shipping status, carrier and tracking number (customers see shipping information once a machine has shipped), and sample-testing records and their status. Sample and customer records may be synchronized from LMT’s customer-relationship-management system (Pipedrive), including organization names, contact names and email addresses, deal stages and the LMT salesperson responsible.

Machine telemetry

Machines fitted with an LMT telemetry device send readings such as input voltage, current, power and energy, frequency and power factor, internal DC supply voltages, temperature, humidity, barometric pressure, vibration and motion, laser-emission state, power and operating state, fault and alert conditions, timestamps, and device identifiers. Telemetry is operational data about equipment, but it is associated with a customer organization and machine and may therefore be personal information in some jurisdictions.

Information collected automatically

• Push notifications: a push token from Firebase Cloud Messaging (Google) and Apple, a random identifier the app creates for your installation (not a hardware or advertising identifier), platform, app version and build, and when the token was last used.
• Security and service logs: IP address, browser or app information (user agent), request time and path, authentication and multi-factor-authentication events, and audit records of changes made by users and staff. Our hosting provider also keeps standard web-server logs.
• On your device: the app stores your sign-in session and a cache of data you’ve viewed so it loads quickly. If you turn on Face ID, Touch ID or fingerprint unlock, the check is performed by your device’s operating system; LMT never receives biometric data.

What we do not collect: LMT Connect does not use your device’s GPS or precise location, contacts, calendars, microphone, health data or advertising identifier, and does not include analytics, crash-reporting or advertising SDKs. The LMT Connect website uses only the cookies and local storage needed to keep you signed in and remember display preferences; it does not use analytics or advertising cookies.

3. Device permissions

• Camera and photos: used only when you choose to take or select photos for a support ticket, chat, profile photo or AutoAlign training job. Photos are uploaded only when you submit them.
• Files: used when you attach a document or DXF file.
• Notifications: used to alert you about support replies, machine alerts, samples, machine shipping, AutoAlign jobs and billing. You can change categories in the app or turn notifications off in your device settings.
• Face ID / Touch ID / fingerprint: optional unlock of a saved session.

4. How we use information

• to create, verify, approve, secure and delete accounts, and to manage organizations, roles and machine access;
• to provide machine records, live and historical telemetry, alerts, warranty, documents, resources, sample tracking and machine shipping status;
• to provide technical support, tickets, chat and the AI support assistant, and to help LMT technicians resolve similar issues faster;
• to process and manage LMT Connect Premium subscriptions and AutoAlign token purchases, run AutoAlign training jobs and deliver models;
• to send notifications and service, security, billing and account emails;
• to estimate electricity costs for power-cost tracking;
• to secure the Service, prevent fraud and misuse, keep audit records, and enforce our Terms;
• to maintain, debug and improve LMT Connect and LMT’s machines, including using de-identified or aggregated information; and
• to comply with law and respond to lawful requests.

Where the law requires a legal basis, we rely on performing our contract with you or your organization, our legitimate interests in operating, securing, supporting and improving our products, your consent for optional device permissions, and compliance with legal obligations.

5. AI-assisted support

When you use the AI support assistant, LMT sends OpenAI your message, recent messages from the same conversation or ticket, relevant LMT knowledge content, details of the machines you are authorized to see (such as model, serial number, warranty and firmware), attachment names and types, and up to four of your image attachments, along with a one-way-hashed user identifier. The assistant may search the public web for background information. To help LMT staff, LMT also uses OpenAI to summarize resolved support tickets (including staff-only internal notes) into troubleshooting cards, and to suggest answers to technicians; names, emails and phone numbers are removed from customer-facing results. LMT uses OpenAI’s API with data storage turned off for these requests, and OpenAI does not use API data to train its models. AI output can be wrong; see the Terms of Service.

6. How we share information

Within your organization and LMT. Authorized users in your organization can see organization information according to their role. LMT staff can access information needed to provide support, warranty, billing, sales and operations.

Service providers. We use the following providers to operate LMT Connect. They process information on our behalf under contract:

• Supabase – authentication, database, realtime updates and file storage (United States);
• Railway – hosting for LMT Connect’s servers and their logs;
• Vercel – hosting for the LMT Connect website;
• Google Firebase Cloud Messaging and Apple Push Notification service – delivering push notifications (notification text and push tokens);
• Resend – sending account, invitation, notification, support and export emails;
• OpenAI – the AI support features described in Section 5;
• Stripe – payment processing and the billing portal (Stripe also acts as an independent controller of payment information under its own privacy policy);
• Pipedrive – LMT’s customer-relationship-management system, which supplies customer, deal and sample information to LMT Connect;
• Amazon Web Services – storage of some chat attachments, when configured;
• Photon (komoot) – turning the facility address you type into a location for power-cost estimates; and NREL / OpenEI (U.S. Department of Energy services) – looking up utility rates using an approximate location derived from your ZIP code, not your exact address.

Sign-in providers and platforms. If you use Sign in with Apple or Google, those companies process your sign-in under their own policies. Apple and Google distribute the apps. Videos in Resources are embedded from YouTube in privacy-enhanced mode, and carrier tracking links open the carrier’s own website; those services apply their own privacy policies when you use them.

Legal and business transfers. We may disclose information if required by law or legal process, to protect the rights, safety or property of LMT, our customers or others, to investigate fraud or security issues, or as part of a merger, acquisition, financing or sale of all or part of our business.

7. No sale, no targeted advertising, no tracking

LMT does not sell personal information collected through LMT Connect, does not “share” it for cross-context behavioral advertising, does not use it for targeted advertising, and does not track you across other companies’ apps or websites. We have not done so in the past 12 months.

8. How long we keep information

• Account and profile: while your account is active and until it is deleted.
• Machine records, telemetry, warranty, service, shipping and sample records: for the life of the machine and the customer relationship and a reasonable period after, because they form your organization’s machine history. They are not deleted when an individual user’s account is deleted.
• Support tickets, chats and attachments: for the customer relationship and a reasonable period after, to support the machine and warranty.
• AutoAlign uploads and trained models: while your organization uses AutoAlign, so models can be re-downloaded and retrained. Drafts that are never submitted are deleted automatically after one day. Your organization’s administrator can ask LMT to delete AutoAlign files at any time.
• Billing records: up to seven years, for tax and accounting.
• Security and audit logs: up to seven years. Push tokens are removed when you sign out, the token stops working, or your account is deleted.
• Backups are kept for a limited period and then overwritten.

9. Deleting your account

You can request deletion in the app (Account → Privacy & Security → Request Account Deletion) or on the LMT Connect Account Deletion page. LMT verifies the request and completes it within 30 days. Completing it deletes your sign-in identity, profile (name, email, phone, address and photo), push tokens, notification preferences, personal machine-access grants, organization memberships and terms-acceptance records. Tickets, messages and machine records you contributed remain part of your organization’s history with your name removed from them. Records we must keep for tax, accounting, security or legal reasons are retained as described in Section 8. You can also ask us to delete specific information without deleting your account by contacting us.

10. Security

We use encryption in transit (HTTPS/TLS), authentication with optional multi-factor authentication, role- and organization-based access controls, database row-level security, private file storage with short-lived links, rate limiting, audit logging and restricted staff access. No system is perfectly secure; please use a strong password and tell us promptly about any suspected unauthorized access.

11. Your choices and rights

You can update your profile in the app, change notification categories, turn device permissions on or off, sign out, and request account deletion. Depending on where you live, including California, Colorado, Connecticut, Virginia, the European Economic Area, the United Kingdom and other places with privacy laws, you may have the right to know what personal information we collect, use and disclose; to access, correct, delete or receive a portable copy of it; to object to or restrict certain processing; and to withdraw consent. Because we do not sell or share personal information for targeted advertising, or use it for profiling that produces legal or similarly significant effects, there is nothing to opt out of for those purposes. We do not use sensitive personal information to infer characteristics about you.

To make a request, email sales@lmtgrp.com with the subject “LMT Connect privacy request” or call (866) 799-0199. We will verify your identity (usually by confirming your account email) and respond within the time required by law. An authorized agent may submit a request with proof of authorization. If we deny your request, you may appeal by replying to our decision; if you remain unsatisfied you may contact your state attorney general or data-protection authority. We will not discriminate against you for exercising these rights. Requests about information your employer or organization controls may be referred to that organization.

12. International users

LMT is based in the United States, and LMT Connect information is stored and processed in the United States and other countries where our service providers operate. Where required, we use appropriate safeguards such as standard contractual clauses for transfers.

13. Children

LMT Connect is for business use by adults and is not directed to children. You must be at least 18 to create an account. We do not knowingly collect personal information from children under 18; if you believe a child has provided information, contact us and we will delete it.

14. Changes to this policy

We may update this Privacy Policy. We will post the new version here with a new “Last updated” date and, for material changes, notify you in LMT Connect or by email and ask you to review the updated policy before continuing to use the Service.

15. Contact us