Privacy Policy

Who we are and our role

FieldTaskora is a field operations management platform used by utilities, construction, and infrastructure organisations. When our customers use the platform to manage their own crews, the customer is the data controller (the business that decides why and how data is processed) and FieldTaskora is the data processor / service provider acting on their instructions. For our own account holders, prospects, and website visitors, FieldTaskora is the controller.

Privacy enquiries: privacy@fieldtaskora.com.

What information we collect

We do not deliberately collect special-category / sensitive information unless it is necessary and lawful, and we have an appropriate basis or consent.

How we use your information

• Assigning and managing field jobs
• Recording safety compliance and evidence for regulatory purposes
• Generating operational and compliance reports for the customer organisation
• Notifying workers of job assignments via email and SMS
• Securing the platform and responding to incidents and support requests
• Training, evaluating, and improving our AI models and product, using aggregated and de-identified data (see the next two sections and our Terms & Conditions)

Data ownership, AI training, and our no-sale commitment

FieldTaskora owns the platform, our AI models, and the aggregated, de-identified, and derived data the platform produces. We use the data submitted to and generated within the platform to operate the service and to train and improve our own AI models — and for no other purpose beyond delivering the service.

We do not sell, rent, trade, or share your personal information with third parties for their own purposes, and we do not use it for third-party advertising. Data is processed only by us and by infrastructure sub-processors acting on our instructions under contract. Where we use data for training or product improvement, we aggregate and de-identify it first.

These commercial arrangements do not override your statutory privacy rights: where the law of your country gives you rights over your personal data (access, correction, erasure, objection, and others described below), those rights continue to apply and we will honour them.

International data transfers

Production data is stored in Microsoft Azure data centres. Where data is transferred across borders (for example, to a sub-processor in another country), we put appropriate safeguards in place — including the European Commission's Standard Contractual Clauses for transfers out of the EU/EEA, and equivalent mechanisms elsewhere — and we take reasonable steps to ensure a comparable level of protection. Current sub-processors:

• Microsoft Azure — Table Storage and Blob Storage (hosting)
• SendGrid (Twilio) — transactional email delivery
• Azure Application Insights — operational telemetry (anonymised where possible)

Data retention

Job records, safety checklists, evidence, and event logs are retained for 7 years from job completion to satisfy regulatory and contractual obligations common in the utilities and construction industries. Identity records are retained for the duration of the relationship plus 7 years. De-identified data used to train our AI models is retained for as long as needed for those purposes. Customers may request earlier deletion for departed individuals, subject to applicable law.

How we protect your information

• All data transmitted over HTTPS with TLS 1.2+
• Authentication cookies are HttpOnly, Secure, and scoped per application
• Tenant isolation enforced at the storage layer — each organisation's data is partitioned by OrgId
• Role-based access control — workers see only their assigned jobs; supervisors see only their organisation's data
• Security response headers, correlation IDs, and audit logs for significant actions

When personal information is no longer required, it is securely deleted in accordance with our retention schedule.

Cookies & analytics

We use only the cookies necessary to run the platform — authentication/session, your language preference, and your light/dark theme — plus product-usage analytics that help us improve FieldTaskora. We do not use advertising or third-party tracking cookies. You can change your analytics choice at any time:

Children

FieldTaskora is a workplace tool not directed at children, and we do not knowingly collect personal information from anyone under 16.

Your rights — everywhere

Wherever you are, you can ask us to access, correct, or delete your personal information, and you can raise a privacy concern with us at privacy@fieldtaskora.com. In a workplace deployment, the quickest route is usually your employer's administrator, who can update your record directly; if that cannot resolve it, contact us. We respond within 30 days (sooner where the law requires).

🇦🇺 Australia

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). You may request access to and correction of your personal information (APPs 12–13). If you believe we have breached the APPs, contact us first; if you are not satisfied with our response you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. We will acknowledge a complaint within 5 business days and aim to resolve it within 30 days.

🇪🇺 European Union & 🇩🇪 Germany (GDPR)

For individuals in the EU/EEA, we process personal data under the General Data Protection Regulation (GDPR) and, in Germany, the Bundesdatenschutzgesetz (BDSG). Our legal bases (Art. 6 GDPR) are: performance of a contract, our legitimate interests in operating and improving the service (balanced against your rights), compliance with legal obligations, and consent where required.

You have the right to: access your data (Art. 15); rectification (Art. 16); erasure / "right to be forgotten" (Art. 17); restriction of processing (Art. 18); data portability (Art. 20); object to processing based on legitimate interests (Art. 21); and to withdraw consent at any time. Automated decisions with legal/significant effects are not made about you without a lawful basis (Art. 22).

Cross-border transfers out of the EU/EEA rely on Standard Contractual Clauses or an adequacy decision. You may lodge a complaint with your local supervisory authority — in Germany, your state Data Protection Authority (Landesdatenschutzbehörde) or the Federal Commissioner (BfDI). Our EU representative and Data Protection Officer can be reached at privacy@fieldtaskora.com.

🇺🇸 United States

We do not sell or "share" personal information as those terms are defined under US state privacy laws, and we do not process it for cross-context behavioural advertising. Residents of California (under the CCPA/CPRA) and of other states with comparable laws have the right to know what we collect, to access and delete it, to correct it, and to be free from discrimination for exercising these rights. Because we do not sell or share personal information, there is nothing to opt out of, but you may still exercise your access, deletion, and correction rights at privacy@fieldtaskora.com. We will not discriminate against you for doing so.

Changes to this policy

We may update this policy from time to time. Material changes will be notified via the platform and, where appropriate, by email. Continued use after notification constitutes acceptance of the updated policy.