Privacy Policy

This policy explains to the Employer (customer) and the Employee (the end user) how data is handled.

Who we are: ProfitOps software services
The "Processor" Relationship: ProfitOps acts as a Data Processor (service provider), and the Customer (employer) is the Data Controller.
- ProfitOps stores and utilizes customer data to provide services useful to the customer.
- The customer is responsible to ensure data collected is accurate and lawfully submitted.

A. Account Information: Names, email addresses, phone numbers, employee IDs, and profile pictures, provided by the Employer to set up accounts.
B. Geolocation Data:
- Precise Location: GPS coordinates collected while a device is connected to the service.
- Collection Triggers
  - When a user logs in to the service
  - While the user is 'Clocked In' or
  - When data is uploaded, modified, or deleted by a user.
C. Work Order Data:
- Photos uploaded (proof of work).
- Customer signatures.
- Notes, timestamps, and job status updates.
D. Device & Telemetry Data:
- Device model, OS version, battery level, and signal strength
- Duration and location of connection, including IP address and VPN.
- All actions taken in the service while connected to the service.
- Errors reported by the service related to device or browser.

Service Delivery: To enable dispatching, route optimization, and work order management.
Proof of Work: To show progress on and completion of work orders assigned.
Performance Tracking: To analyze and identify work quality issues or otherwise improve efficiency.
Proof of Service: To verify location and time for payroll or client billing.
Safety & Compliance: To monitor workforce safety (if applicable).
Improvements: Aggregated, anonymized data used to improve app performance (e.g., "We analyzed 10,000 work orders to make syncing faster").

Information provided to ProfitOps may be shared or stored with 3rd party providers as needed to provide the service.

The Employer: All data provided to this service by an employer or authorized agent is accessible to the Employer or authorized agent at all times.
Authorized 3rd Parties: ProfitOps offers integration with external services like Salesforce and Paylocity. When these services are enabled by the customer, ProfitOps will share information requested by these services to perform requested tasks.
Sub-processors: Data may be transmitted through infrastructure providers as required to deliver our service to the customer.
Legal Requirements: ProfitOps will comply with all official and legal requests from law enforcement or government agencies for customer information they are entitled to receive under local, state, and national law.

Retention Period: Data provided by the customer is retained according to applicable laws and will be retained as required by those laws. All other data is deleted when requested by the customer, or automatically after the post-termination period expires.
Post-Termination: "Upon contract termination, data will be deleted or returned to the Customer within [90] days, unless a longer retention period is required by law."

Encryption: Industry standard encryption is used for connection between the service and customer devices.
Access Control: "Only authorized personnel have access to the backend infrastructure."
Offline Security: "Data stored locally on the device is protected by the device's OS sandbox."

Access & Deletion: "Because ProfitOps is a Data Processor, if you are an employee wishing to access, correct, or delete your data, please contact your Employer directly."
Location Permissions: "Users can revoke GPS permissions at the device level at any time, though this may prevent the App from functioning correctly."

All data stored by ProfitOps is held on servers physically located in the United States, and governed by US law, Standard Contractual Clauses (SCCs) or the Data Privacy Framework.