Privacy Policy
Privacy Policy
Last updated: [DATE]
This policy explains what information the Factora application collects, why it is collected, and how it is handled. Factora is operated by [COMPANY NAME], [REGISTERED ADDRESS] (“we”, “us”). It applies to the Factora Android application and the Factora web application.
1. Who this policy is for
Factora is a private business tool for manufacturing operations. It is not a consumer app. Accounts are created by an administrator at the factory that licenses Factora — there is no public sign-up, and no one can register themselves.
Your employer, or the factory that gave you your account, decides what is recorded in Factora and for how long. We hold and process that information on their instructions. If you want data corrected or removed, ask that factory's administrator first; we act on their request.
2. Information we collect
Your account. Your name, your mobile number, your role, and the plant you are assigned to. Your mobile number is how you sign in. Your passcode is stored only as a cryptographic hash — we cannot read it, and we cannot tell you what it is.
Information you enter about other people. Factora records details of workers (name, department, role, phone number, skills, availability) and of parties you buy from or dispatch to (name, phone number, address, notes). If you enter someone else's details, you confirm you are entitled to do so.
Your work in the app. Job cards, processes, machine and worker assignments, stock movements, purchases and schedules — each recorded against the account that entered it, so a factory can see who did what.
Security records. An audit log of significant actions, including the account responsible, the time, and the IP address the request came from. This exists to investigate misuse and mistakes.
On your device. The Android app stores your session so you stay signed in between launches, and saves files you export (for example a CSV) into the app's own folder. If you attach a photo, the app asks for camera or photo access at that moment; the photo goes only where you attach it.
3. What we do not collect
We do not collect your location. The app contains no location code and requests no location permission.
We do not use advertising, and there are no advertising or analytics SDKs in the application.
We do not track you across other apps or websites, and we set no advertising cookies.
We do not sell, rent or trade any information to anyone, for any purpose.
We do not read your contacts, messages, call history or files outside what you explicitly attach.
4. Why we use it
To run the service — signing you in, showing your factory's data, recording the work you do.
To keep accounts separate — each factory's data is isolated, and your account only reaches the factories you belong to.
To keep the service secure — detecting and investigating misuse through the audit log.
To support you — diagnosing a problem you report.
We do not use your information for profiling, automated decision-making or marketing.
5. Who we share it with
We share information only with the infrastructure providers required to run the service — our hosting and database provider, [HOSTING PROVIDER, e.g. Render, Singapore region] — and only to the extent they must process it to host the application.
We will disclose information if required by law, and we will tell the affected factory unless we are legally prohibited from doing so. We share nothing with advertisers or data brokers.
6. Where it is stored and how it is protected
Data is held in a managed PostgreSQL database in [REGION].
All traffic between the app and our servers is encrypted with HTTPS.
Passcodes are stored hashed, never in plain text or reversible form.
Access inside the application is limited by role, so a member of staff sees only what their role permits.
Each factory's records are separated, so one factory cannot read another's.
No system is perfectly secure. If a breach affects your information, we will notify the factory that holds your account without undue delay.
7. How long we keep it
Operational records — job cards, stock movements, audit entries — are kept for as long as the factory's account is active, because they are that business's working history. When a factory ends its use of Factora, its data is deleted within [NUMBER] days of a written request from that factory, except where we must retain something by law.
A deactivated user account is retained rather than erased, so that past records still show who performed an action. Its sign-in access is revoked immediately.
8. Your rights
You may ask to see the personal information we hold about you, to have it corrected, or to have it deleted. Contact your factory's administrator, or write to us at [CONTACT EMAIL]. We answer within [NUMBER] days.
You cannot delete your own account from inside the app — an administrator does that, because the records you created belong to the business, not to the individual account.
9. Children
Factora is a workplace tool intended for people aged 18 and over. It is not directed at children, and we do not knowingly collect information from anyone under 18.
10. Changes to this policy
If we change this policy we will update the date at the top and publish the new version at this address. Material changes will also be communicated to the factories using Factora.
11. Contact
[COMPANY NAME]
[REGISTERED ADDRESS]
[CONTACT EMAIL]
[PHONE — optional]