Privacy Policy — IndustriFlow

IndustriFlow is a digital service for communication, workflows and the handling of help and service requests in industrial and production environments.

IndustriFlow is developed and provided by Dino Talic.

For privacy and personal data enquiries, contact: dino@industriflow.se

The data processed depends on how IndustriFlow is used and the user's role in the system.

IndustriFlow may process the following data:

• name
• email address
• user and account identifiers
• the factory or organisation the user belongs to
• role, permissions and organisational affiliations
• departments and receiver groups
• information about created, received, accepted, started, handed-over and completed requests
• comments and other information users enter in a request
• images voluntarily uploaded in connection with a request or handover
• timestamps and history linked to activities in the system
• device identifiers and technical information needed to connect and identify an approved device
• push notification tokens needed to deliver notifications
• NFC-related events, such as which registered location or machine an NFC tag represents
• technical logs and error information needed for security, troubleshooting and stability

IndustriFlow is not intended for storing sensitive personal data in free-text fields. Users should not enter medical information, national identification numbers or other sensitive data in comments or requests unless absolutely necessary and permitted under their organisation's rules.

Data is processed to:

• provide IndustriFlow's functions
• identify users and authorised devices
• manage access and permissions
• send requests and information to the right receiver
• show the current status of requests and workflows
• send push notifications
• create history, statistics and traceability
• prevent unauthorised access and misuse
• troubleshoot technical problems
• improve the service's security, stability and functionality

When IndustriFlow is used by an organisation, data is normally processed to provide the service used by that organisation and for the organisation's legitimate interest in administering and improving its operations.

In some situations, the organisation using IndustriFlow may be the data controller and IndustriFlow may process data on the organisation's behalf.

The applicable legal basis may therefore depend on how the organisation uses the service.

IndustriFlow does not sell personal data.

Data may be processed by technical service providers needed to operate the service, including providers of:

• databases and cloud infrastructure
• authentication
• web and application hosting
• push notifications
• technical security and operations

IndustriFlow uses Supabase for backend, database and authentication functions, and Google/Firebase services for certain Android and push-notification functions.

These providers may only process information to the extent required to provide their respective technical services.

IndustriFlow may use push notifications to inform receivers about new or changed requests.

A technical push token linked to the current installation may be processed for this purpose.

The token is used to deliver notifications to the correct device and is not intended for advertising.

IndustriFlow may use NFC tags to identify a registered location, machine or other physical position in a factory.

The NFC tag is intended to identify the location and does not contain the user's personal data, password or permissions.

The user's or device's authorisation is checked separately by IndustriFlow.

Personal data is not retained longer than needed for the service's operation, security, history and the organisation using IndustriFlow.

Historical requests may need to be retained for statistics, traceability and operational follow-up.

When a person is removed or deactivated, some historical information may need to be retained so earlier events remain understandable and accurate. Where appropriate, this information may be anonymised.

Technical data and device connections may be removed when no longer needed.

A user or organisation may request correction or deletion of personal data by contacting: dino@industriflow.se

If the user has a personal account, an account deletion request may be made through this address or through the account management available in IndustriFlow.

When an account is deleted, associated personal data is removed or anonymised where possible and permitted, except for information that must be retained for legal requirements, security or necessary historical traceability.

IndustriFlow uses technical and organisational safeguards to reduce the risk of unauthorised access, alteration, loss or disclosure of information.

Access to factory and organisation data is restricted through authentication, permissions and separation between organisations.

IndustriFlow is a business and industrial product and is not intended for children.

Some technical providers may process information within or outside the EU/EEA.

When personal data is transferred outside the EU/EEA, appropriate legal safeguards must be used where required by applicable data protection law.

Depending on applicable data protection law, you may have the right to:

• receive information about the personal data being processed
• request correction of inaccurate data
• request deletion
• request restriction of processing
• object to certain processing
• request access to your data

For questions or requests, contact: dino@industriflow.se

This privacy policy may be updated when IndustriFlow changes or when legal requirements change.

The latest version is always published on this page, and the date above shows when the policy was last updated.