Privacy Policy for Workly

Introduction

Welcome to Workly ("we," "our," or "us"). This Privacy Policy explains how Opsora Systems ("Company," "we," "us," or "our") collects, uses, discloses, and safeguards your information when you use our mobile application Workly (the "App").

Workly is designed specifically for Canadian construction professionals to track time, manage projects, and coordinate with teams. We are committed to protecting your privacy and complying with applicable privacy laws, including:

• PIPEDA (Personal Information Protection and Electronic Documents Act, Canada)
• GDPR (General Data Protection Regulation, EU)
• CCPA (California Consumer Privacy Act, USA)

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access or use the App.

1. Information We Collect

We collect information that you provide directly to us, information we obtain automatically when you use the App, and information from third-party sources.

1.1 Personal Information You Provide

Account Registration Information:

• Full name
• Email address
• Phone number (mobile)
• Home/mailing address
• Password (encrypted)
• Employee identification documents (SIN card, government-issued ID) - for verification purposes only
• Profile photo (optional)

Employment Information:

• Company name and ID
• Employee code
• Department/trade
• Job title/role
• Hourly rate (if applicable)
• Skills and certifications

Project & Work Information:

• Work hours and attendance records
• Clock-in/clock-out timestamps
• Break times
• Project assignments
• Task completion status
• Notes and comments
• Work-related photos uploaded to projects

Invoice & Order Information:

• Purchase orders created
• Material orders
• Supplier information
• Service items
• Client information
• Billing details

Communication Data:

• Support tickets and help requests
• Feedback and survey responses
• In-app messages and notifications

1.2 Information Collected Automatically

Location Information:

• GPS coordinates when clocking in/out
• Approximate location based on IP address
• Job site locations and addresses
• Route and travel data (if enabled)

Device Information:

• Device type, model, and manufacturer
• Operating system and version
• Unique device identifiers (UDID, IMEI, MAC address)
• Mobile network information
• Screen resolution and device settings

Usage Information:

• App features used and frequency
• Pages/screens viewed
• Time spent in the App
• Actions taken (buttons clicked, forms submitted)
• Crash reports and error logs
• Performance metrics

Camera & Storage Access:

• Photos taken for project documentation
• Files uploaded to the App
• Access timestamps

1.3 Information from Third Parties

From Your Employer:

• Employment status and approval
• Company policies and settings
• Project assignments
• Schedule information
• Team member details

From Third-Party Services:

• Firebase Cloud Messaging (push notifications)
• Google Maps Platform (location services)
• Cloud storage providers (data backup)

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Service Provision

• Create and manage your account
• Authenticate your identity
• Process time tracking and attendance
• Assign you to projects and tasks
• Display your work schedule
• Generate timesheets and reports
• Process purchase orders and invoices
• Facilitate communication with your team

2.2 GPS Location Verification

• Verify you are at the correct job site when clocking in/out
• Prevent time fraud and buddy punching
• Ensure compliance with company policies
• Track project-specific attendance
• Generate location-based reports for employers

2.3 Communication

• Send you important notifications about:
  • Schedule changes
  • Project updates
  • Task assignments
  • Material delivery status
  • Company announcements
• Respond to your support requests
• Send clock-in reminders (if enabled)
• Provide app updates and new feature announcements

2.4 Improvement & Analytics

• Analyze app usage patterns
• Identify and fix bugs and errors
• Improve app performance and features
• Conduct research and development
• Test new features

2.5 Legal & Security

• Comply with legal obligations and regulations
• Enforce our Terms of Service
• Protect against fraud, abuse, and illegal activity
• Resolve disputes
• Ensure data security and integrity

2.6 With Your Consent

• Any other purpose for which you provide explicit consent

3. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

3.1 With Your Employer

Your employer (the company you work for) has access to:

• Your attendance and time tracking records
• Work hours, clock-in/out times, and locations
• Projects assigned and tasks completed
• Photos and notes you upload to projects
• Purchase orders and invoices you create
• Your profile information (name, contact, role)

3.2 With Service Providers

We share information with third-party service providers who perform services on our behalf:

• Cloud Hosting: Amazon Web Services (AWS) or similar
• Push Notifications: Firebase Cloud Messaging (Google)
• Maps & Location: Google Maps Platform
• Analytics: Firebase Analytics, Google Analytics
• Customer Support: Help desk software providers
• Payment Processing: (if applicable for premium features)

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

3.3 For Legal Reasons

We may disclose your information if required by law or in response to:

• Court orders, subpoenas, or legal process
• Requests from government authorities or law enforcement
• Protection of our legal rights
• Investigation of fraud or security issues
• Protection of the safety of users or the public

3.4 Business Transfers

If Opsora Systems is involved in a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. You will be notified via email and/or prominent notice in the App.

3.5 With Your Consent

We may share your information for any other purpose with your explicit consent.

4. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention Periods:

• Active Accounts: Data retained while your account is active
• Inactive Accounts: Data deleted 2 years after account inactivity (unless required by employer or law)
• Attendance Records: Retained for 7 years (as required by Canadian employment law)
• Financial Records: Retained for 7 years (as required by CRA regulations)
• Support Tickets: Retained for 3 years
• Crash Logs: Retained for 90 days
• Account Deletion: Within 30 days of deletion request (except legally required records)

After the retention period, we will delete or anonymize your information in a secure manner.

5. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

5.1 Rights Under PIPEDA (Canada)

• Right to Access: Request a copy of your personal information
• Right to Correction: Request correction of inaccurate information
• Right to Know: Understand how your information is used
• Right to Withdraw Consent: Withdraw consent for certain uses
• Right to File a Complaint: File a complaint with the Privacy Commissioner of Canada

5.2 Rights Under GDPR (EU)

• Right to Access: Obtain a copy of your personal data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to certain data processing activities
• Right to Withdraw Consent: Withdraw consent at any time

5.3 Rights Under CCPA (California)

• Right to Know: Know what personal information is collected
• Right to Delete: Request deletion of your information
• Right to Opt-Out: Opt-out of data sales (we do not sell data)
• Right to Non-Discrimination: Not be discriminated against for exercising your rights

5.4 How to Exercise Your Rights

To exercise any of these rights, contact us at:

• Email: rajbarot@opsorasystems.com
• Phone: +1 (672) 855-2117

We will respond to your request within 30 days for PIPEDA and GDPR requests, or 45 days for CCPA requests. You may be required to verify your identity before we fulfill your request.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Security Measures Include:

• Encryption: Data encrypted in transit (TLS/SSL) and at rest (AES-256)
• Authentication: Secure login with password hashing (bcrypt)
• Access Controls: Role-based access and least privilege principle
• Monitoring: Continuous monitoring for security threats
• Regular Audits: Security audits and vulnerability assessments
• Secure Servers: Data stored on secure cloud servers with redundancy
• Employee Training: Staff trained on data protection practices

However, please note: No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Location Data & GPS Tracking

7.1 Why We Collect Location Data

Workly uses GPS location data to:

• Verify you are at the correct job site when clocking in/out
• Prevent time fraud and ensure accurate payroll
• Track site-specific attendance for project management
• Comply with employer policies and labor regulations

7.2 When Location is Collected

• Only when you clock in or clock out (not continuously tracked)
• When viewing job site locations on maps
• When uploading photos with location tags (if enabled)

7.3 Location Permissions

You must grant location permissions for the App to function properly. You can control location settings through your device settings. Denying location access will prevent you from clocking in/out.

7.4 Background Location (Optional)

We do NOT track your location in the background or when the App is not in use, unless you explicitly enable this feature for specific purposes (e.g., geofencing alerts).

8. Children's Privacy

Workly is intended for use by adults aged 18 and over. We do not knowingly collect personal information from children under 13 (or 16 in the EU). If we become aware that we have collected information from a child, we will delete it immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including Canada, the United States, and the European Union. We use Standard Contractual Clauses (SCCs) approved by the EU Commission to ensure data protection.

10. Third-Party Links and Services

The App may contain links to third-party websites, services, or integrations (e.g., supplier websites, Google Maps). We are not responsible for the privacy practices of these third parties.

11. Push Notifications

We may send you push notifications for clock-in reminders, schedule updates, task assignments, project notifications, material delivery alerts, and general announcements. You can control notifications through your device settings.

12. Cookies and Tracking Technologies

The App uses local storage, session tokens, analytics SDKs (Firebase Analytics), and crash reporting. We do not use cookies for advertising or sell your data to third parties.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date and notify you via email or in-app notification for material changes.

14. Contact Us

15. Consent

By using the Workly App, you acknowledge that you have read, understood, and agree to this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.