Privacy Policy

Version 1.0 — last updated 16 May 2026

1. Who we are

Airsense Mechanical Services Ltd ("we", "us") is the data controller for personal data processed through this application. Contact: info@airsense.example.

2. Data we collect

• Account data: name, email, phone, role.
• Employment data: commission %, bonus, employment status.
• Work data: jobs, timesheets, snags, materials, commissioning packs, signatures.
• Location & photos: GPS coordinates and photo taken at clock-in/out, equipment and site photos.
• Customer data: customer/site contact name, phone, address, signatures.
• Audit data: a log of create/update/delete actions you perform.

3. Why we process it (lawful basis)

• Contract — to operate the service and pay you.
• Legitimate interest — to verify on-site attendance (GPS + clock-in photo), to keep audit logs for accountability, and to produce commissioning records.
• Legal obligation — to retain records required by UK tax/employment law.
• Consent — for optional features where requested.

4. Sharing

We share data with: our backend infrastructure provider (Supabase / Lovable Cloud), and with clients only via documents you generate (e.g. job PDFs). We do not sell personal data.

5. Retention

• Clock-in GPS & photos: 12 months.
• Job records, commissioning packs, signatures: 7 years (legal/insurance).
• Audit log: 24 months.
• Account data: while your account is active, then 30 days after deletion request.

6. Your rights

You have the right to access, rectify, erase, restrict, port your data, and to object to processing. Use the Privacy & data page inside the app to download a copy of your data or request deletion. Complaints can be made to the UK ICO (ico.org.uk).

7. Security

Data is encrypted in transit (TLS) and at rest. Access is controlled by role and row-level security policies. Photos and signatures live in private storage with signed time-limited URLs.

8. Staff monitoring notice

If you are an engineer, when you clock in we capture your GPS location, the accuracy reading, a timestamp and a photo. This is used solely to verify attendance on site and to support payroll. You will be asked to acknowledge this notice on first use.

9. Changes

We will record the policy version you accepted. If we change this policy materially, we will ask you to accept again.