Privacy Policy

1. Introduction

Delisys Technologies Ltd and its Partners value your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use the OPS360 platform and related services, including mobile applications, AI assistant, e-signature, file management, communication, payment, audits, document summarization, and incident reporting tools.

We comply with applicable data protection laws including UK GDPR, EU GDPR, CCPA/CPRA (USA), and DPDPA (India).

Data Protection Officer: dpo@vops360.com

2. About Our Services

2.1 Business Context

OPS360 is a business-to-business (B2B) platform. When your organization provides you access:

• Your organization is the Data Controller for employment-related processing.
• Delisys Technologies Ltd and its Partners act as the Data Processor for service delivery.

Both this policy and your organization’s privacy policies may apply.

2.2 Our Services

OPS360 Services include (but are not limited to):

• Platform Services (projects, tasks, team collaboration, and other management tools)
• Mobile Applications (iOS/Android, with offline capabilities)
• AI Services (assistants, document summarization, analytics, and similar features)
• E-Signature Services (digital signing, compliance tracking)
• File Management (cloud storage, sharing, and version control)
• Communication (chat, WhatsApp integration, notifications)
• Payments & Billing (invoicing, transactions, subscription management)
• Audits & Compliance Tools (location-based audits, incident management, reporting)

OPS360 may add new services, modules, or integrations. All such services are subject to this Policy and Agreement.

2.3 Age Restrictions

OPS360 services are not intended for individuals under 17 years of age.

3. Information We Collect

• Personal Information: Name, email, phone, company, login credentials
• Platform Usage Data: Projects, tasks, forms, chat, AI interactions
• Financial Information: Payment details, invoices, tax IDs
• E-Signature Data: Signed docs, audit trails, IP/device details
• Mobile Data: Location, camera, device info, offline cache
• Technical Data: Analytics, performance logs, IP addresses, cookies
• Communication Data: Messages, files, WhatsApp records, notifications

4. How We Use Your Information

• Service Delivery (Contract Performance): Operate OPS360, process payments, support e-signatures, enable communication, deliver mobile features
• Business Operations (Legitimate Interests): Improve services, ensure security, prevent fraud, provide support
• With Consent: Marketing, location access, camera access, biometric verification, optional integrations
• Legal Compliance: Meet financial, audit, and regulatory requirements

5. Information Sharing

We do not sell your data. We share information with:

• Service Providers: Microsoft Azure, MongoDB Atlas, Stripe, PayPal, Razorpay, Azure OpenAI, Google APIs, Firebase, WhatsApp Business
• Legal/Regulatory Authorities: When required by law
• Business Transfers: If OPS360 is merged, acquired, or assets sold
• Emergency Situations: To protect safety and security

6. Data Security

• Encryption: AES-256 (at rest), TLS 1.3 (in transit)
• Access Controls: MFA, role-based permissions
• E-Signature Security: Audit trails, device fingerprinting, fraud prevention
• Organizational Safeguards: Staff training, access reviews, incident response

7. Data Retention & Deletion

See our Data Retention Policy for full details.

• Data retained while services are in use, plus required legal periods
• Business account admins manage user deletion/export requests
• Users submit requests in-app → admins review and may delete user data, files, or accounts
• OPS360 only handles deletion of entire business accounts (tenants) or when legally required
• Automatic deletion runs according to schedules

8. Data Residency

OPS360 enforces data residency:

• UK customers: Data stored in the UK
• EU customers: Data stored in the EU
• USA customers: Data stored in the USA
• India customers: Data stored in India

Data remains within the customer’s region/country and is not transferred abroad except where required for lawful processing with safeguards (e.g., payment networks).

9. Your Rights

Depending on your jurisdiction, you may:

• Access, correct, or export your data
• Request deletion (via your account admin)
• Withdraw consent for optional features
• Object to processing based on legitimate interests
• Request review of automated decisions

Requests should be made to your business account admin, who manages them on your behalf.

10. International Data Transfers

Where transfers are necessary (e.g., payments, cloud infrastructure), safeguards are applied:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions
• Encryption and security controls

11. Cookies and Tracking

OPS360 uses cookies and similar technologies for essential functions, analytics, and (with consent) marketing. See our Cookie Policy for details.

12. Mobile App Permissions

OPS360 apps may request permissions for:

• Location (site audits)
• Camera (scans, photos)
• Storage (offline caching)
• Notifications (alerts)
• Microphone (voice messages)

All permissions are optional and controlled by the user.

13. Data Breaches

• Authorities notified within 72 hours (where required)
• Users/business admins notified promptly if high risk
• Remediation and prevention steps taken immediately

14. Updates to This Policy

We may update this Privacy Policy for legal, operational, or feature reasons.

Significant changes will be communicated to business account admins and users.

15. Contact Information

Delisys Technologies Ltd and its Partners
Registered Address: Suite 5, 22–26 Nottingham Rd, Nottingham NG9 8AA, United Kingdom
Company Number: 11490073
General Email: info@vops360.com
Website: https://vops360.com

Privacy Contacts:

Data Protection Officer: dpo@vops360.com
Privacy Team: privacy@vops360.com

Regulatory Authorities:

UK: Information Commissioner’s Office (ICO) – https://ico.org.uk/
EU: Local Data Protection Authority
USA (California): California Attorney General’s Office
India: Data Protection Board of India (DPDPA)

16. Jurisdiction-Specific Provisions

16.1 UK & EU (GDPR)

• Legal basis for processing documented
• Rights: access, rectify, erase, restrict, port, object
• Right to lodge complaints with regulators

16.2 USA (CCPA/CPRA)

• Right to know what personal data is collected
• Right to delete personal data (subject to exceptions)
• Right to opt out of sale (we do not sell data)
• Right to non-discrimination

16.3 India (DPDPA)

• Consent required for processing
• Rights to access, correction, erasure, grievance redressal
• Mandatory breach notification to regulator
• Localized data residency enforced

17. Final Provisions

• Acceptance: Using OPS360 means you accept this policy.
• Right to Update: We may update without prior notice; continued use means acceptance.
• Governing Law: Governed by UK law, with additional compliance to local laws in regions served.
• Entire Agreement: This Privacy Policy + Terms of Service = complete privacy framework.

If you do not agree, discontinue use and uninstall OPS360 applications.