Privacy Policy
Effective Date: September 25, 2025
1. Introduction
This Privacy Policy describes how Appostrofy ("we," "us," or "our") collects, uses, and discloses your information in connection with your use of our mobile applications and web platforms (collectively, the "Service"). Our Service is a business-to-business (B2B) platform designed to help organizations create, manage, and execute digital checklists and inspections. This policy applies to the data processed within your organization's dedicated account ("Tenant").
2. Information We Collect
We collect information necessary to provide and improve our Service. This information is categorized as follows:
User-Provided Information:
- Account & Profile Data: Information required to create and manage user accounts, including name, email address, job title, and other credentials necessary for authentication and authorization within your organization's Tenant.
- Checklist & Inspection Data: All content you create, upload, or generate within the Service. This includes photos and media for evidence, PDF files like Standard Operating Procedures (SOPs) or manuals, equipment data, inspection results, comments, and signatures.
- Geolocation Data: We collect GPS location data when you use the mobile application to perform tasks like inspections or reports. This is used to tag activities with accurate site information for verification and auditing purposes.
Automatically Collected Information:
- Device and Usage Information: We collect data about the devices used to access our Service, which may include IP address, browser type, operating system, and unique device identifiers. We may use device fingerprinting techniques for security purposes, such as fraud prevention and ensuring the integrity of your organization's data.
- Log Data: Our servers automatically log activity, including access times, features used, and application performance metrics to diagnose problems and improve the Service.
3. How We Use Your Information
Your information is used strictly to provide and enhance the Service for your organization. Key uses include:
- Service Delivery: To enable the core functionality of the Service, such as conducting inspections, generating reports, and managing documentation.
- AI-Assisted Features: To power features that create AI-assisted checklists from your uploaded documents (SOPs, manuals, etc.). The AI models used for this purpose are internal to Apposkout and operate solely on the data within your Tenant.
- Service Improvement & Security: To monitor application performance, enhance security, prevent fraudulent access, and improve the overall operational efficiency of the Service.
- Support & Communication: To respond to your support requests and send administrative information regarding the Service.
Important Note on AI: We do not use your organization's data to train external, global, or third-party AI models. All AI processing is confined to your Tenant to enhance your organization's compliance and efficiency.
4. Disclosure of Your Information
We are committed to keeping your data confidential and do not sell it to third parties. We disclose your information only in the following limited circumstances:
- Within Your Organization (Tenant): All inspection data, reports, and results are accessible only to authorized users within your organization’s Tenant, based on the roles and permissions set by your administrator.
- Subcontractor Access: If your organization grants Service access to subcontractors, your organization remains responsible for their compliance with this policy.
- Third-Party Service Providers: We use trusted cloud infrastructure providers, such as Microsoft Azure and Amazon Web Services (AWS), for secure data storage, processing, and service delivery. These providers are bound by strict confidentiality and security obligations.
- Legal Compliance and Protection: We may disclose information if required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
5. Data Storage, Security, and Retention
Storage and Security:
Your data is securely stored on Azure and AWS servers, primarily located in the United States. We employ industry-standard security measures, including end-to-end encryption for data in transit (HTTPS/TLS) and encryption at rest. Access to data is strictly controlled through role-based access controls.
Retention Policy:
Data is retained for a default period of one year from the date of creation, after which it may be permanently deleted or archived. This retention period can be modified based on the terms of the service agreement with your organization.
6. Your Data Protection Rights
You have rights concerning your personal information, subject to your organization's policies:
- Right to Access: You can request access to the personal information we hold about you.
- Right to Rectification: You can request to correct any inaccurate or incomplete information.
- Right to Erasure: You can request the deletion of your personal data, subject to your organization's data retention policies and any legal obligations.
To exercise these rights, please first contact your organization’s designated administrator. You may also contact us directly for assistance.
7. International Data Transfers
By using Apposkout, you acknowledge that your data will be transferred to, stored, and processed in the United States where our cloud providers' servers are located. We take all necessary measures to ensure that your data is treated securely and in accordance with this Privacy Policy.
8. Children’s Privacy
The Service is intended for professional, business use and is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors.
9. Changes to this Privacy Policy
We may update this Privacy Policy periodically. We will notify you of any material changes by updating the "Effective Date" at the top and, where feasible, through a notice within the Service.
10. Contact Us
For any questions, concerns, or requests regarding this Privacy Policy, please contact us at:
