Privacy Policy

This policy explains to the Employer (customer) and the Employee (the end user) how data is handled.

1. Introduction & Scope

Who we are:
ProfitOps software services

The “Processor” Relationship:
ProfitOps acts as a Data Processor (service provider), and the Customer (employer) is the Data Controller.

ProfitOps stores and utilizes customer data to provide services useful to the customer. The customer is responsible for ensuring data collected is accurate and lawfully submitted.

2. Information We Collect

A. Account Information

Names, email addresses, phone numbers, employee IDs, and profile pictures provided by the Employer to set up accounts.

B. Geolocation Data

Precise Location: GPS coordinates collected while a device is connected to the service.

When a user logs in to the service
While the user is Clocked In
When data is uploaded, modified, or deleted

C. Work Order Data

Photos uploaded (proof of work)
Customer signatures
Notes, timestamps, and job status updates

D. Device & Telemetry Data

Device model, OS version, battery level, and signal strength
Connection duration and location, including IP address and VPN
All actions taken while connected to the service
Errors reported by the service related to device or browser

3. How We Use Your Information

Service Delivery: Dispatching, route optimization, and work order management
Proof of Work: Showing progress and completion of assigned work
Performance Tracking: Identifying work quality issues and improving efficiency
Proof of Service: Verifying location and time for payroll or billing
Safety & Compliance: Monitoring workforce safety (if applicable)
Improvements: Aggregated, anonymized data used to improve app performance

4. Data Sharing & Disclosure

Information provided to ProfitOps may be shared with third-party providers as needed to deliver the service.

The Employer: All data is accessible to the Employer or authorized agents at all times.

Authorized Third Parties: Integrations such as Salesforce and Paylocity may receive data when enabled by the customer.

Sub-processors: Infrastructure providers may process data to support service delivery.

Legal Requirements: ProfitOps complies with lawful requests from government or law enforcement agencies.

Exclusion for mobile messaging data: none of the sharing described in this section applies to mobile information, text messaging opt-in data, or messaging consent records. That data is excluded from disclosure to third-party providers, authorized third parties, integration partners, sub-processors, and the Employer’s authorized agents. See section 5.

5. Text Messaging (SMS/MMS)

ProfitOps, owned and operated by Holbrook Asphalt Co LLC, sends optional text message notifications to users who choose to enable them under Profile > Notifications.

We do not share, sell, or provide your mobile phone number, opt-in data, or messaging consent data to third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third party under any circumstances. Only the messaging carrier and our messaging service provider receive the mobile number, and only for the purpose of delivering the messages you requested.

Messages are transactional and operational only: project status changes, work order updates, operational alerts, and HR and time-off notifications. We do not send marketing or promotional text messages.

Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time. Reply HELP for help. You may also withdraw consent by disabling SMS notifications under Profile > Notifications.

Consent to receive text messages is not a condition of employment, purchase, or use of ProfitOps.

6. Data Retention

Retention Period: Data is retained according to applicable laws or deleted upon customer request.

Post-Termination: Data will be deleted or returned within 90 days, unless otherwise required by law.

7. Security Measures

Encryption: Industry-standard encryption for data in transit
Access Control: Backend access limited to authorized personnel
Offline Security: Local data protected by OS sandboxing

8. Rights of the End User (Employee)

Access & Deletion: Employees should contact their Employer directly for data access or deletion requests.

Location Permissions: GPS permissions may be revoked at the device level, which may limit functionality.

9. International Data Transfers

All data is stored on servers located in the United States and governed by U.S. law, Standard Contractual Clauses (SCCs), or the Data Privacy Framework.