G-OPS privacy policy

Data we collect

• Account: name, work email, organization, role, language and, if you add one, a profile photo.
• Sign-in: a one-time code we email to you. Your session is stored in the device's secure storage.
• Work records: the work orders, tasks, notes, measurements, parts used, labor time and incident reports you create or update.
• Photos and files: photos you take with the camera or pick from your gallery to attach as evidence. We only access the photos you choose.
• Precise location: if your organization turned on tracking and you granted permission, the app sends your position (latitude, longitude, accuracy, speed, heading and time) during the working hours your organization sets, including when the app is closed or in the background. While this happens, Android shows a persistent notification. No location is sent outside those hours.
• Camera: to scan an asset's QR code and to take evidence photos. The camera is only used when you start one of those actions.
• Microphone: to dictate notes when you tap the dictation button. Your device's speech recognition service (Google's, on Android) processes the audio; G-OPS only receives the resulting text and does not store the audio.
• Technical data: the app version and a log of each request to our servers (IP address, date and time, the action requested, user and organization identifiers, and errors), used for security and troubleshooting.

Data stored on your device

So you can work offline, the app keeps a copy of your work orders, tasks and asset records on the phone, plus a queue of changes waiting to be sent. You can delete that copy in Settings → Clear local cache, and it is removed when you sign out.

How we use data

• To provide the service: assigning you work, showing your work orders and tasks, and recording what you do in the field.
• Dispatch: showing your position to the people in your organization who coordinate work, so they can assign the nearest job and keep customers informed.
• Service communications: sending sign-in codes and work-related email notices.
• Assistance features: some features, such as work order recommendations, send work order data to an artificial intelligence provider to generate the response.
• Security, support and product improvement, using aggregated data where possible.

We do not sell your data, use it for advertising, or build advertising profiles.

Who we share data with

• Your organization: supervisors, dispatchers and administrators can see, depending on their permissions, your work, your photos and notes, and your location during your shift.
• Your organization's customers: if your organization uses the customer portal, its customers can see the status of their service orders and whatever information your organization chooses to share.
• Service providers, under contract and only to run G-OPS: application hosting (Vercel), database (Neon), file storage (Cloudflare R2), background processing (Fly.io), email (Resend), logging and monitoring (Axiom), data analytics (MotherDuck), maps (Google Maps Platform), artificial intelligence (OpenAI, through Vercel AI Gateway), and app build and distribution (Expo).
• Authorities, when the law requires it or to protect our rights and people's safety.
• A buyer or successor, if Grivara is involved in a merger, acquisition or sale of assets; this policy would continue to apply to your data.

Where data is stored

Our servers and main providers are in the United States. If you use G-OPS from another country, your data is transferred to and processed there with the protections described in this policy.

How long we keep data

We keep your account and work data for as long as your organization uses G-OPS, or until your organization or you ask us to delete it.

Location history is removed from the operational database once it reaches the period your organization sets (45 days by default) and is kept in an archive for reporting and analysis. You can ask for it to be deleted by writing to the contact address.

When an organization leaves G-OPS, we delete its data at the organization's request, except what we must keep by law.

Security

Data travels encrypted (HTTPS) between the app and our servers, and our providers encrypt it at rest. Access within each organization is controlled by roles and permissions, and the session on your phone is kept in the system's secure storage. No system is infallible, but we review these measures continuously.

Your choices and rights

• Location: you can stop sharing it in Settings → Share location, or revoke the permission in your phone's settings. Your organization can also turn it off for everyone.
• Camera, photos and microphone: you can revoke these permissions in your phone's settings; the features that use them will stop working.
• Access, correction, deletion and portability: you can ask for a copy of your data, correct it or delete it. Your organization manages your account, so you can ask them or write to us at the contact address; we respond within 30 days.
• Account deletion: email the contact address from your work email and name your organization. We delete the account and the personal data tied to it, except work records your organization must keep, which are dissociated from your name where possible.

Children

G-OPS is a workplace tool for businesses and is not directed at anyone under 18. We do not knowingly collect data from minors.

Changes to this policy

If we change this policy, we will update the date above and, for significant changes, notify you in the app or by email before they take effect.

Contact

For privacy questions or requests, write to privacy@grivara.com. Grivara, Inc.