1. Who We Are

FieldTech is a field service management software platform. Our registered address is [Your Company Address, City, Country]. For privacy-related inquiries, contact us at privacy@fieldtech.app.

2. Data We Collect

Account Information

• Name and email address (required for account creation)
• Password (stored as a secure hash, never in plain text)
• Phone number (optional)
• Company name and role

Work & Operational Data

• Work orders, job descriptions, locations, and notes
• Customer names, contact details, and addresses
• Inventory items, parts, and stock levels
• Invoice and billing information
• Photos uploaded to work orders

Location Data

• GPS coordinates when technicians share their location (only when actively using the app)
• Location history for job check-ins and check-outs
• Location sharing is voluntary and can be disabled at any time

Technical Data

• IP address and browser/device information
• Login timestamps and session data
• Application usage logs for debugging purposes

3. How We Use Your Data

We use your data to:

• Provide and operate the FieldTech platform
• Enable work order management and team coordination
• Show technician locations on the live map (to authorized administrators only)
• Generate invoices and financial reports
• Send service notifications and alerts
• Improve and debug our platform
• Comply with legal obligations

We do not sell your data to third parties. We do not use your data for advertising purposes.

4. Legal Basis for Processing (GDPR)

• Contract performance — processing necessary to provide the service you signed up for
• Legitimate interests — security, fraud prevention, service improvement
• Legal obligation — compliance with applicable laws
• Consent — for location tracking (which you can withdraw at any time)

5. Data Storage & Security

Your data is stored on secure servers hosted by Railway (United States) with PostgreSQL databases. Data is encrypted in transit using TLS/SSL. Passwords are hashed using bcrypt. Access is restricted to authenticated users only.

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or destruction.

6. Data Retention

• Account data: retained while your account is active and for 90 days after deletion
• Work order data: retained for 7 years (legal requirement for business records)
• Location history: retained for 90 days, then automatically deleted
• Invoice data: retained for 10 years (tax compliance requirement)

7. Your Rights (GDPR)

As an EU/EEA resident, you have the following rights:

• Right to access — request a copy of all data we hold about you
• Right to rectification — correct inaccurate personal data
• Right to erasure — request deletion of your data ("right to be forgotten")
• Right to data portability — receive your data in a machine-readable format (CSV/JSON)
• Right to object — object to processing based on legitimate interests
• Right to restrict processing — request limited processing of your data
• Right to withdraw consent — withdraw consent for location tracking at any time

To exercise any of these rights, contact us at privacy@fieldtech.app. We will respond within 30 days.

8. Cookies

We use the following cookies:

• Authentication token — keeps you logged in (stored in localStorage, not a cookie)
• Session data — essential for the app to function

We do not use advertising, tracking, or analytics cookies. See our Cookie Policy for full details.

9. Third-Party Services

• Railway (railway.app) — hosting and database infrastructure
• OpenStreetMap — map tiles for the Live Map feature (no personal data shared)
• Cloudflare — CDN and DDoS protection (may process IP addresses)

10. Children's Privacy

FieldTech is a B2B platform intended for business use only. We do not knowingly collect data from anyone under the age of 16. If you believe a minor has provided us with personal data, contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you by email and/or a prominent notice in the app at least 30 days before significant changes take effect. Continued use after the effective date constitutes acceptance.

12. Contact & Complaints

For privacy questions or to exercise your rights: privacy@fieldtech.app

If you are unhappy with our response, you have the right to lodge a complaint with your national data protection authority. In Romania, this is the ANSPDCP (www.dataprotection.ro).