PRIVACY POLICY.

Who this covers

OpXCORE is business software for construction companies. Companies use it to run field work and the office: time and attendance, projects, estimating, payroll records and accounting. People use it because a company they work for, or with, gave them access: employees, subcontractors, customers and job applicants.

Your company decides what records it keeps about you in OpXCORE and who in the company can see them. For those company records, we process information on the company's behalf and under its instructions. This policy explains what OpXCORE itself collects and does. For questions about how your company uses your records, contact your company.

What we collect

• Account and contact details: your name, email address, phone number and the sign-in method you use (Microsoft, Google, Apple, email, or a code sent to your phone).
• Work records your company keeps: employee number, job title, time entries, crew and project assignments, pay rates and payroll records, and the company's accounting records.
• Location: your precise location, only while the app is open and only when you clock in or out, file a delay report or inspection, or check in to a work order. It is used to confirm you are at the job site. OpXCORE does not track your location in the background.
• Photos and files: pictures and documents you choose to attach, such as job paperwork, receipts and inspection photos. When you scan a QR code or barcode, the code is read on your phone and only its text is sent; the camera image is not kept.
• Messages and content: questions you ask Tex, our assistant, and its answers; notes, reports and other information you enter.
• Voice: when you speak to Tex, your phone's own speech service turns your words into text, and only the text is sent to us.
• Device information: a push notification token so we can send you notifications, and app and device details needed to keep the app working and secure.
• Diagnostics and usage: crash reports and information about which screens and features are used, so we can fix problems and improve OpXCORE.

Face ID and fingerprint sign-in are handled by your phone. Your face or fingerprint never leaves the device.

How we use it

• To provide OpXCORE: signing you in, showing you the screens your company role allows, and running the features you use.
• To send notifications and emails about your work, such as schedules, approvals and sign-in codes.
• To keep OpXCORE secure, prevent misuse, and confirm requests come from the real app.
• To fix problems and improve the product.
• To meet legal obligations.

We do not sell your information, use it for advertising, or track you across other companies' apps and websites.

AI features

Some features use artificial intelligence: Tex answering questions by text or voice, and reading documents and photos. Before the phone app first sends your information to an AI provider, it asks for your consent. What you send is processed by OpenAI, Google, Anthropic or xAI, reached through OpenRouter, and we ask that those requests go only to providers that do not keep them or use them to train their models. Search indexes of questions and documents are built with OpenAI. AI answers can be wrong; check anything important.

Who receives information

• Your company, according to the roles and permissions it sets in OpXCORE.
• Service providers that run OpXCORE for us, only to provide their service: Google Cloud (hosting, file storage, sign-in), Neon (databases), Microsoft (Microsoft 365 sign-in, email and file storage), Twilio (text-message codes), OpenRouter and the AI providers named above, Expo (notifications and app updates), Sentry (crash reports), PostHog (product analytics), and Apple and Google (Sign in with Apple, Google sign-in and on-phone speech recognition).
• Others when required: to comply with law or legal process, to protect people's safety or our rights, or as part of a merger or sale of the business, under this policy.

Keeping and deleting information

We keep your information while your account exists and your company uses OpXCORE. You can delete your OpXCORE account in the app or by following the steps on Delete your OpXCORE account. Deleting your account removes your sign-in and personal profile. Companies keep the work records the law requires them to keep, such as time and pay; ask your company about those.

Your choices and rights

• You can turn off location, camera, microphone and notification permissions in your phone's settings. Some features will not work without them, such as clocking in with a location check.
• You can decline AI consent and keep using features that do not need it.
• You can ask us for a copy of your information, or ask us to correct or delete it, by emailing privacy@palehorse.is. We confirm it is you before acting, and we may pass requests about company records to your company. You will not be treated differently for making a request.

Security

Information travels over encrypted connections. Access inside OpXCORE follows the roles your company sets, and sign-in requests are checked to confirm they come from the real app. No system is perfectly secure; tell us at privacy@palehorse.is if you see a problem.

Children

OpXCORE is for workplaces and is not meant for children under 13. We do not knowingly collect information from them.

Where information is stored

OpXCORE information is stored and processed in the United States.

Changes

We will update this page when our practices change and change the date at the top. For significant changes we will tell you in the app or by email.

Contact

Pale Horse Technologies LLC, Fort Worth, Texas. Email privacy@palehorse.is.