Privacy Policy

1. Scope of this policy

This policy explains how Alarsio ("Alarsio", "we", "us") handles personal data when you visit our website, use the Alarsio web app or the Alarsio Android app (together, the "Service").

Alarsio is used by construction businesses ("Customers") to keep records about their sites and the people who work on them. For those records, the Customer decides what is collected and why, and we process the data on the Customer's behalf and on its instructions. If you are a worker whose details are kept in Alarsio by your employer, please contact your employer first about your data.

2. Information we collect

Information you give us

• Account details: name, email address and password (stored only in hashed form) of each person who uses the Service.
• Company details: company name, sites, team members and their roles.
• Worker records: names, phone numbers, wage rates, attendance, and corrections entered by the Customer.
• Site records: daily reports, notes, materials received and used, and photos attached to reports.
• Messages you send us, for example a support request.

Information collected when you use the Service

• Location at check-in: the Android app reads the phone's location once, when a supervisor taps to check in, to confirm they are at the site. It does not track location in the background.
• Photos: photos are re-encoded when uploaded, which removes embedded camera metadata.
• Crash and error reports from the Android app, so we can find and fix faults.
• Technical logs such as IP address, browser or device type and request times, kept to operate and secure the Service.

3. How we use information

We use personal data only to:

• provide the Service: record attendance, reports and materials, and calculate wages from approved attendance;
• create and secure accounts, sign users in, and send verification and invitation emails;
• respond to support requests and tell you about changes to the Service;
• detect, investigate and prevent errors, misuse and security incidents;
• comply with legal obligations.

We do not sell personal data, and we do not use it for advertising or to build marketing profiles.

4. Cookies

We use only the cookies needed to keep you signed in and to keep your session secure. We do not use advertising or third-party tracking cookies on our website.

5. How information is shared

Within a Customer's account. What a person can see depends on their role (owner, project manager, supervisor or accountant). A supervisor sees only the sites assigned to them. Each Customer's records are kept separate from every other Customer's by access rules enforced in the database.

Service providers. We use trusted providers to host the Service and to store data (Vercel and Supabase), to send emails, and to receive app crash reports. They process data only on our instructions and only to provide their service to us.

Legal reasons. We may disclose information if required by law, or to protect the rights, property or safety of Alarsio, our Customers or others.

6. How long we keep information

We keep Customer records for as long as the Customer's account is active. When a Customer closes its account, we delete its records within a reasonable period, except where we must keep information to meet a legal obligation or resolve a dispute. Technical logs are kept for a limited time.

7. Security

Data is encrypted in transit, access is restricted by role, and passwords are stored only in hashed form. No system is completely secure, but if a breach affects your personal data we will notify the affected Customers and the authorities as the law requires.

8. Your rights and choices

Subject to applicable law, including India's Digital Personal Data Protection Act, 2023, you may:

• ask for a summary of the personal data we process about you;
• ask us to correct, complete or update it;
• ask us to erase it, where we no longer need it or you withdraw consent;
• withdraw consent you have given, without affecting processing already done;
• nominate another person to exercise your rights in case of death or incapacity;
• raise a grievance with us, and then with the Data Protection Board of India.

A Customer's owner can also download all of the Customer's data as CSV files at any time. Where we hold data on behalf of a Customer, we will pass your request to that Customer.

9. Children

The Service is meant for businesses and is not directed at children. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this policy as the Service changes. We will change the "Last updated" date above and, for significant changes, notify account owners by email or in the app.

11. Contact and grievances

For questions, requests or complaints about your personal data, write to us at our Contact page. We will acknowledge your request and respond within the time the law requires. See also our Terms of Service.