Privacy Policy

1. Introduction

Welcome to cOS (Construction Operations System). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our mobile application and web services. By using cOS, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account or are invited to join cOS, we collect:

• Full name (first and last name)
• Email address
• Phone number (optional)
• Profile photograph (optional)
• Organization membership and role information

2.2 Usage Data

We automatically collect information about how you interact with our services:

• Tasks created, updated, and completed
• Messages sent within the platform
• Files and attachments uploaded
• Device type and operating system
• App usage patterns and feature interactions

2.3 Content Data

We store content you create within the platform, including task descriptions, comments, photographs, and documents uploaded as task attachments or completion proofs.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the cOS platform
• Authenticate your identity and manage your account
• Send you email verification and account-related notifications
• Enable communication between team members within your organization
• Generate reports and analytics for organization administrators
• Ensure the security and integrity of the platform
• Comply with legal obligations

4. Email Verification

cOS requires email verification before allowing access to the platform. When your account is created by an administrator, you will receive an email verification link. You must confirm your email address to activate your account and log in. This process ensures the security of your account and the integrity of our platform.

5. Data Sharing and Disclosure

5.1 Within Your Organization

Your profile information, tasks, and work activity are visible to other members of your organization according to your assigned role and permissions.

5.2 Service Providers

We use third-party service providers to support our platform:

• Supabase – Database, authentication, and file storage
• Email providers – Transactional emails and notifications

5.3 Legal Requirements

We may disclose your information if required by law, legal process, or governmental authority, or when we believe disclosure is necessary to protect the rights, property, or safety of cOS, our users, or the public.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. All data is encrypted in transit using TLS and at rest. Access to user data is controlled through role-based permissions, and administrative operations require additional authentication.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. If your account is deactivated, your data may be retained for up to 90 days before deletion, unless a longer retention period is required by law or requested by your organization administrator.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of your personal information
• Correction: Update inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to certain types of data processing

To exercise these rights, contact your organization administrator or reach out to us directly.

9. Children's Privacy

cOS is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the “Last updated” date. Your continued use of the service after any changes constitutes your acceptance of the new policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us through your organization administrator or via the contact information provided in the app.