Privacy Policy

Effective date: September 9, 2026
Last updated: September 9, 2026

1. Who we are and what this policy covers

McNish Parts (the “Application”) is a private, invitation-only web application operated by McNish, LLC (“McNish,” “we,” “us”). It is used by McNish employees and by authorized sales representatives of McNish’s channel partner firms (“you”) to view McNish equipment installations and publicly available wastewater treatment facility records within an assigned sales territory.

This policy explains what personal information we collect when you sign in to and use McNish Parts, why we collect it, who we share it with, and the choices you have.

McNish Parts is not a consumer product and is not available to the general public. Access is granted by McNish and can be withdrawn by McNish at any time.

This policy covers mcnishparts.com: both the public landing page, where anyone can arrive and see a sign-in button, and everything behind sign-in. It does not cover McNish’s other websites or systems, or the separate privacy practices of your own employer or firm.

2. The short version

We collect very little. McNish Parts needs to know who you are so it can show you the right territory and keep everyone else out of it. That is essentially the whole story.

• We collect your name, work email address, and sign-in activity.
• We use product analytics and session recording, provided by PostHog, to understand how McNish Parts is used and to improve it. This is linked to your account and firm. We do not use advertising trackers or third-party cookies.
• We do not sell or share your personal information, and we never have.
• The equipment and facility data in McNish Parts is business and public-record data, not information about individuals.

This describes how McNish Parts works today. If it changes, we will update this policy and give notice before the change takes effect. See section 13.

3. Information we collect

3.1 Account and authentication information

McNish Parts uses a third-party authentication provider to manage sign-in. Depending on how you sign in, we collect:

• Single sign-on (Google or Microsoft). Your name, work email address, and the unique account identifier your identity provider returns to us. We receive your basic profile information from that provider. We do not receive or store your Google or Microsoft password.
• Email and one-time passcode. Your work email address, and the delivery and verification status of the one-time passcode sent to it.

McNish Parts does not use passwords and does not collect a phone number, because we do not offer SMS-based verification.

3.2 Access and security logs

To keep the application secure and to enforce territory boundaries, we log:

• Sign-in and sign-out events, with timestamps
• The IP address and browser user agent associated with a session
• Session activity sufficient to detect unusual or unauthorized access

3.3 Authorization information

McNish administrators assign each user a role and a sales territory. We store that assignment and the associated employer or partner firm, so that the application can enforce which records you are permitted to see.

3.4 Technical and error information

If the application encounters an error, diagnostic information about that error is sent to our error monitoring provider. McNish Parts is configured not to attach user identifiers to error reports. Error data may incidentally include technical details such as a URL path or browser version.

3.5 Product usage and session recording

To understand how McNish Parts is used and to improve it, we use a product analytics service to record how you interact with the application: the pages and views you open, the controls you click or tap, the filters you apply, and the records you look at. We also record sessions, which are replays of how the application’s interface was used during a visit. Anything you type into a form is masked in recordings and is not captured. This information is linked to your McNish Parts account identifier, your role, and the firm you represent, so that McNish can understand adoption and usage by firm and by feature. Your IP address is not sent to the analytics service. Analytics requests are routed through mcnishparts.com and use browser storage on our own domain rather than third-party cookies.

3.6 Visitors who do not sign in

The landing page at mcnishparts.com is publicly reachable and offers nothing but a sign-in button and links to this policy and our Terms of Use. If you visit without signing in, we do not create an account for you, do not set any cookie beyond what is technically required to serve the page, and do not track you. Our hosting and network provider records standard server request information, such as IP address, timestamp, and requested URL, for security and reliability purposes.

3.7 What we do not collect

To be explicit about the things people usually assume are in a tool like this:

• No location tracking. The map in McNish Parts plots facility addresses. It does not request or use your device’s location.
• No personal information in the installation data. The McNish installation records shown in McNish Parts describe equipment, facilities, and the companies and public entities that own them. They do not contain names, email addresses, or phone numbers of individual contacts.
• No sensitive personal information. We do not collect government identifiers, financial account information, health information, precise geolocation, biometric data, or information about race, religion, union membership, sexual orientation, or the contents of your private communications.
• No advertising or cross-site tracking. We do not use advertising trackers, cross-site tracking pixels, or third-party marketing tags. See sections 6 and 13.

4. Where the data in McNish Parts comes from

Alongside your account information, McNish Parts displays business data from two sources: McNish’s own records of its equipment installations, read from McNish’s internal system of record, and publicly available facility and compliance records published by the United States Environmental Protection Agency. Public records are refreshed on a scheduled basis. See the Terms of Use for important limitations on how that information may be interpreted and used.

Neither source is personal information about you. The installation records describe equipment, facilities, and the organizations that own them, and as noted above they contain no personal contact information.

5. How we use information

We use the information described above only to:

• Authenticate you and maintain your signed-in session
• Determine which territory and records you are authorized to view, and enforce that on every request
• Send you transactional email required to operate the account, such as sign-in codes and account invitations, delivered through our authentication provider
• Secure the application, investigate suspected unauthorized access or misuse, and maintain audit records
• Diagnose errors, monitor availability, and improve reliability
• Understand how McNish Parts is used, including which features are used and where users encounter difficulty, so that we can improve the application
• Comply with legal obligations and enforce our Terms of Use

We do not use your information for marketing, advertising, profiling, or automated decision-making that produces legal or similarly significant effects.

6. Cookies and similar technologies

McNish Parts uses strictly necessary cookies set by our authentication provider to establish and maintain your signed-in session and to protect against cross-site request forgery. They are required for the application to function.

McNish Parts also uses browser storage on our own domain (mcnishparts.com) for product analytics and session recording, as described in section 3.5. This is used to recognise your browser across visits so that your usage is attributed to your account. It is first-party storage on our domain; we do not use third-party analytics cookies.

Because this is a private, invitation-only workplace application, there is no cookie consent banner. The only opt-out is not using McNish Parts. We do not use advertising cookies, cross-site tracking pixels, or third-party marketing tags. Because we do not track users across sites for advertising, McNish Parts does not respond differently to Global Privacy Control or Do Not Track browser signals, and there is no cross-context behavioral advertising to opt out of.

7. Who we share information with

We do not sell your personal information and we do not share it for cross-context behavioral advertising.

We disclose information to the following categories of recipients:

7.1 Service providers

We use a small number of vendors to operate McNish Parts. Each processes information only on our instructions, only for the purposes described in this policy, and under contractual confidentiality and security obligations. None of them is permitted to use your information for its own purposes.

We maintain a current list of the specific vendors in each category. Authorized users, and the firms they represent, may request it using the contact details in section 14.

7.2 McNish and your employer

McNish administrators can see your account record, your territory assignment, and your access history. Where you are a representative of a channel partner firm rather than a McNish employee, McNish may share information about your account status and use of McNish Parts with that firm under its agreement with McNish.

7.3 Legal and corporate

We may disclose information if required by law, subpoena, or other legal process, or where we believe disclosure is reasonably necessary to protect the rights, property, or safety of McNish, our users, or the public. If McNish is involved in a merger, acquisition, financing, or sale of assets, account information may be transferred as part of that transaction, subject to this policy.

8. Where information is stored

McNish Parts and its supporting services are operated in the United States. Some of our service providers maintain global infrastructure and may process limited technical data, such as network requests, outside the United States in the course of delivering their services.

9. How long we keep information

10. Security

We use administrative, technical, and physical safeguards appropriate to the limited information McNish Parts holds, including:

• Encryption in transit using TLS, and encryption at rest for stored data
• Single sign-on and multi-factor authentication, with no stored passwords
• Server-side authorization on every request, so territory boundaries cannot be bypassed from the browser
• Least-privilege access to production systems, limited to named administrators
• Continuous error, security, and dependency monitoring, with regular patching
• Logging and review of authentication and access events

No system is perfectly secure, and we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you and any applicable regulator as required by law.

11. Your choices and rights

You may:

• Access and correct your account information. Most fields, such as your name, come from your identity provider and are corrected there. Contact us for anything else.
• Request deletion of your account. Note that because McNish Parts access is granted through your employment or your firm’s agreement with McNish, deleting your account ends your access, and McNish may retain access logs where it has an independent legal or business reason to do so.
• Ask questions about how your information is handled, using the contact details in section 14.

We will not retaliate against you for exercising these rights.

11.1 California residents

California’s Consumer Privacy Act applies to information about California residents acting in a business capacity, including employees and business contacts. The exemptions that previously covered employment-related and business-to-business data expired on January 1, 2023, so this section applies to California-based users of McNish Parts even though McNish Parts is a business tool.

Categories of personal information we have collected in the past 12 months. Identifiers (name, work email address, IP address, unique account identifier) and internet or network activity information (sign-in events, session activity, error diagnostics, and product usage information including page views, interactions, and session recordings). We collect these directly from you, from your identity provider when you sign in, and automatically from your browser.

Purpose. As described in section 5.

Disclosure. We disclose these categories to the service providers listed in section 7.1 for the business purposes described there.

Sale or sharing. We have not sold personal information and have not shared it for cross-context behavioral advertising in the past 12 months, and we do not do so today. We do not sell or share the personal information of minors under 16.

Sensitive personal information. We do not collect it.

Your rights. You may request to know the categories and specific pieces of personal information we have collected, request correction of inaccurate information, request deletion, and limit the use of sensitive personal information (not applicable, since we collect none). To exercise a right, contact us using section 14. We will verify your request through your authenticated McNish Parts account or by confirming control of your registered work email address. You may use an authorized agent, with proof of authorization. We respond within the time required by law, generally 45 days, and will tell you if we need an extension.

11.2 Other states

If you reside in a state with a comprehensive consumer privacy law that applies to this information, you may have comparable rights to access, correct, delete, or obtain a copy of your personal information, and to appeal a denied request. Contact us and we will honor rights available to you under applicable law.

12. Children

McNish Parts is a workplace tool intended solely for authorized adult users. It is not directed to children, and we do not knowingly collect personal information from anyone under 18.

13. Changes to this policy

We may update this policy. If we make a material change, we will update the “last updated” date above and, where the change materially affects how we handle your personal information, provide notice through the application or by email before it takes effect. Continued use of McNish Parts after the effective date means the updated policy applies.

Adding a new category of collection would be a material change. We will not begin collecting in a new way before updating this policy and giving notice.

14. Contact us

McNish, LLC
840 North Russell Drive
Aurora, IL 60506

Privacy questions and rights requests: privacy@mcnishparts.com