Privacy Policy

1. Information We Collect

We collect information that you provide directly to us, including:

• Account information (name, email, phone number, company details)
• Location data (GPS coordinates during work hours for guards)
• Biometric data (fingerprint/face ID for authentication, with consent)
• Reports and incident documentation (text, photos, timestamps)
• Communication data (messages within the platform)
• Time and attendance records
• Device information (device type, operating system, app version)

2. How We Use Your Information

We use the collected information for the following purposes:

• Providing and maintaining our security management services
• Processing time tracking and payroll calculations
• Enabling real-time GPS tracking for operational oversight
• Generating reports and analytics for clients and administrators
• Facilitating communication between team members
• Improving our services and developing new features
• Ensuring platform security and preventing fraud
• Complying with legal obligations

3. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your data based on:

• Contract performance: Processing necessary to fulfill our service agreement
• Legitimate interests: Improving services, security, and fraud prevention
• Legal obligation: Compliance with employment and tax regulations
• Consent: For optional features like biometric authentication

4. Data Sharing and Disclosure

We may share your information with:

• Your employer (security company) as the data controller
• Clients who have contracted security services at specific locations
• Service providers who assist in platform operations (hosting, analytics)
• Law enforcement when required by law or to protect rights and safety

We never sell your personal data to third parties.

5. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations:

• Active account data: Duration of employment plus 2 years
• Reports and incident logs: 7 years (legal requirement)
• GPS location history: 90 days rolling retention
• Communication logs: 1 year
• Backup data: 30 days after deletion from primary systems

6. Your Rights

Under GDPR, you have the following rights:

• Right to access: Request a copy of your personal data
• Right to rectification: Correct inaccurate or incomplete data
• Right to erasure: Request deletion of your data ("right to be forgotten")
• Right to restrict processing: Limit how we use your data
• Right to data portability: Receive your data in a structured format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time for consent-based processing

7. Data Security

We implement robust security measures to protect your data:

• TLS 1.3 encryption for all data in transit
• AES-256 encryption for data at rest
• Regular security audits and penetration testing
• ISO 27001 certified infrastructure
• Multi-factor authentication options
• Role-based access controls
• Continuous monitoring and threat detection

8. International Data Transfers

Your data is stored and processed within the European Union. If data transfer outside the EU is necessary, we ensure appropriate safeguards through Standard Contractual Clauses (SCCs) or adequacy decisions.

9. Cookies and Tracking

Our web platform uses essential cookies for authentication and session management. We use analytics cookies (with consent) to improve our services. You can manage cookie preferences in your browser settings.

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or platform notification. Continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related inquiries or to exercise your rights, contact our Data Protection Officer: