Privacy.

Bolvido provides a field operations platform to companies. Those companies decide what data to collect and why — they are the data controller. Bolvido processes that data on their instructions, which makes us a data processor.

For data we collect directly — an enquiry through our contact form, for example — we are the controller.

To be specified: registered entity, address, and supervisory authority.

On behalf of our customers (as processor)

• Worker identity — name, and optionally an email address and phone number. Needed to assign work and attribute evidence.
• Photographs and video captured during a job, which may show workers. Needed because they are the evidence.
• Location, captured once, at the site, when a workflow requires proof of presence. Never in the background, never between jobs.
• Signatures of a worker or a customer at hand-off.
• Timestamps and device context attached to each piece of evidence, which is what makes it evidence rather than a file.

Directly, from visitors to this website (as controller)

• What you type into our contact form, so that we can reply to you.

We do not track workers. Bolvido has no continuous location capture, no route history, no idle-time detection, no productivity scoring, and no fleet view. These are not settings we leave switched off; they are capabilities the product does not have.

Where we act as processor, the controller determines the lawful basis, and our processing is governed by our agreement with them. Where we act as controller — an enquiry you send us — our basis is our legitimate interest in replying to you.

To be specified: the full legal-basis table, per processing activity.

Evidence is immutable by design and is retained for as long as the controlling customer requires it, because deleting a job's proof destroys the customer's audit trail. Deletion and return of data at the end of a contract are governed by the Data Processing Agreement.

To be specified: default retention periods, and the deletion process at contract end.

Bolvido engages no sub-processors today. Before any customer deployment we will publish the full list here, together with the transfer mechanism for any processing outside the EEA.

To be specified: hosting provider, object storage, email delivery, and the transfer mechanism.

If your data is held in Bolvido by an employer or a service provider, that company is the controller and your request goes to them first; we assist them in answering it. Under GDPR you may request access, rectification, erasure, restriction, portability, and object to processing.

For data we hold as controller, write to us and we will answer within one month.

How we isolate customers, hash evidence, and control access is described in detail on our security page, including the controls we do not claim.

This website sets no analytics or advertising cookies, and embeds no third-party trackers. Fonts are self-hosted, so no request leaves your browser for anyone but us.

Questions about this policy: our contact page. Data protection matters can be sent to the security address listed on our security page.