Draft, not yet reviewed by a solicitor. This page is placeholder text written to unblock building the acceptance flow, not final legal copy, and not a GDPR compliance assessment. Replace it (and the bracketed [...] details below) before any real signup relies on it.
Last updated: [date] · Version 2026-09-draft · Data controller: Navy Octopus Solutions
Account details you give us directly (name, email, workspace name); usage data needed to operate the Service (job records, schedules, timesheets you create); and, through your own CRM connection, customer and lead data you've authorised us to read from your CRM on your behalf. We don't collect more from your CRM than the features you use need.
To provide and operate the Service, to bill you for it, to respond when you contact support, and to keep the Service secure (error monitoring on failures, not routine activity). We don't sell your data or your customers' data, and we don't use it for advertising.
CRM access tokens and connection details are encrypted at rest and decrypted only in memory for the specific outbound call that needs them. They are never logged, never sent to your browser, and never visible to us in plain text through normal operation.
Sub-processors that run parts of the Service on our behalf: [hosting provider], [CRM provider(s) you connect], [payment processor for billing], [error-monitoring provider]. Each only receives what it needs to do its job, under its own agreement with us. We don't sell data to anyone else.
Data is stored in [region/hosting details]. [Cross-border transfer basis, if applicable.]
For as long as your workspace is active, plus [retention period] after closure, unless you ask us to delete it sooner or the law requires us to keep it longer.
Depending on where you're based, you may have the right to access, correct, export, or delete your data, and to object to certain processing. Contact us at [contact email] to exercise any of these.
We use one essential, sealed session cookie to keep you signed in. No advertising or third-party tracking cookies.
We may update this policy from time to time. Material changes will be announced in the app before they take effect.
Questions about this policy, or to exercise a data right: [contact email].