Privacy Policy

1. Data controller

OperSite acts as a data processor on behalf of client companies (data controllers). The processing of personal data is carried out in accordance with the General Data Protection Regulation (GDPR).

2. Data collected

In the context of using the platform, the following data is collected:

• Identity: last name, first name, email address
• Authentication: login identifier, password (encrypted)
• Intervention data: clock-in/out timestamps, check-in/check-out geolocation
• Visual evidence: before/after photos of cleaning interventions
• Usage data: role, company, account status

3. Purposes of processing

• User account management and authentication
• Planning and tracking of cleaning interventions
• Documentation and proof of services performed
• Cleaning product inventory management
• Statistics and dashboards for managers and administrators

4. Legal basis

Data processing is based on the performance of the service contract between OperSite and the client company, as well as the legitimate interest of the employer in organizing and monitoring cleaning services.

5. Hosting and security

Data is hosted within the European Union:

• Database and authentication: Supabase (EU region)
• Web application: Firebase App Hosting (europe-west4 region)
• File storage: Supabase Storage (EU region)

Data is encrypted in transit (TLS) and at rest. Passwords are irreversibly hashed.

6. Retention period

Personal data is retained for the duration of the service contract. The retention period for intervention data is configurable by the company administrator. At the end of the contract, data is deleted or anonymized within 90 days, unless there is a legal obligation to retain it.

7. Data sharing

Data is not sold or shared with third parties for commercial purposes. It is accessible only to:

• Authorized users of the client company (according to their role)
• Technical sub-processors (Supabase, Firebase) for the operation of the service

8. Your rights (GDPR)

In accordance with the GDPR, you have the following rights:

• Right of access: obtain a copy of your personal data
• Right to rectification: correct inaccurate data
• Right to erasure: request the deletion of your data
• Right to data portability: receive your data in a structured format
• Right to object: object to the processing of your data
• Right to restriction: restrict the processing of your data

To exercise these rights, contact your company administrator or send an email to: BellafSoftware@gmail.com

9. Cookies

OperSite uses only technical cookies necessary for the operation of the service (authentication session). No tracking or advertising cookies are used.

10. Contact

For any questions regarding the protection of your data, you may contact: BellafSoftware@gmail.com

You also have the right to file a complaint with the competent supervisory authority (DPA in Belgium).