This document has not been reviewed by a lawyer. [COMPANY NAME] must have a qualified lawyer review and adapt it before relying on it. Provided as-is.
Privacy Policy
Ringkasan singkat (ID): Kebijakan ini menjelaskan data apa yang kami kumpulkan, bagaimana kami menggunakannya, dan hak Anda. Dokumen resmi dalam bahasa Inggris di bawah ini.
This Privacy Policy explains how [COMPANY NAME] ("we", "us") collects and uses information when a venue and its team members use HOSP OPS (the "Service"). This is a starter draft — it has not been reviewed by a lawyer and must not be relied on as-is.
1. Data we collect
- Account & profile data: email, display name, preferred language, role assignment.
- Venue operational data: shifts, attendance, tasks, checklists, notes, invoices, suppliers, day reports, KPIs, and other records your venue chooses to keep in the Service.
- Uploads: photos, invoice files, contract files, and other attachments you upload.
- Device & usage: browser type, IP address (for security), timestamps of key actions, and error logs.
2. How we use it
- To operate the Service for the venue that employs or engages you.
- To secure the Service (fraud, abuse, and access control).
- To improve reliability (aggregate error tracking, uptime monitoring).
- To contact you about the Service.
We do not sell your personal data.
3. Where it's processed
HOSP OPS is built on managed infrastructure (Supabase and Cloudflare). Data is stored in the regions offered by those providers. [COMPANY / LAWYER TO FILL: specific regions, sub-processors, transfer safeguards.]
4. Who we share it with
Only with processors strictly needed to run the Service (hosting, error tracking, email) and only with your venue's administrators for data they are entitled to see. We disclose data if legally required.
5. Your rights
- Access a copy of your personal data.
- Ask for corrections.
- Ask for deletion of your personal profile (venue operational records may be retained by the venue).
- Withdraw consent where processing is based on consent.
To exercise a right, email [CONTACT EMAIL].
6. Retention
We retain account data while your account is active and for a reasonable period after closure for backups, legal obligations, and dispute resolution. [LAWYER TO SET SPECIFIC PERIODS.]
7. Cookies & local storage
We use local storage and cookies strictly necessary to keep you signed in, remember your language and UI preferences, and keep the Service working offline. We do not use tracking cookies for advertising.
8. Children
HOSP OPS is a workplace tool for adult staff and managers. It is not directed at children. Do not use the Service if you are under the minimum working age in your jurisdiction.
9. Changes to this policy
When we materially change this policy we bump the version. Signed-in users will be asked to accept the new version before continuing to use the Service.
10. Contact
Questions about this policy: [CONTACT EMAIL].