Privacy Policy

1. Scope and responsibility

This policy applies to BOS (Business Operating System), including its Android app, connected web service, the public support page and bos-srbija.com. The publisher and privacy contact is BOS Solutions d.o.o. Novi Sad, Rada Končara 1, Petrovaradin, Serbia (company registration number 22342231, Serbian tax identification number 116049496). BOS is used by organizations to manage their work. The organization controls which staff receive access and what business information they enter. Where BOS processes data for an organization, the respective responsibilities may also be set out in its agreement with BOS.

2. Information handled in BOS

Depending on the features your organization uses and the information you choose to provide, BOS may handle:

• Account and organization data: name, work email, role, organization, authentication and access information.
• Operational data: customers and contacts, locations, work orders, tasks, time records, materials, vehicles, quotes, invoices, documents, notes, photos, signatures and scanned fiscal receipt details.
• Device and service data: technical identifiers, activity and error logs needed for security, troubleshooting and operation of the service.
• Support data: messages and contact details you submit through the public support form.
• Website inquiry data: name, company, email, phone and message submitted through the website or directly by email.

Camera and photo-library features are relevant only when you use them and grant the applicable device permission. BOS does not access the phone’s location; vehicle locations, where available, come from the GPS integration used by your organization. A receipt QR scan or a photo can contain information about other people; submit only information needed for your organization's work.

3. Why information is used

Information is used to provide and secure BOS, authenticate users, carry out the workflows selected by your organization, maintain records, provide support, respond to inquiries, investigate errors and meet legal obligations. Website analytics may be used to understand visits and improve the site.

4. Access and sharing

Authorized users and administrators in your organization can access information according to their roles. BOS may use service providers for hosting, email delivery, support and technical operation. Data may be exchanged with integrations enabled by your organization, such as electronic invoicing or vehicle services, as needed for that workflow. Information may be disclosed to authorities when legally required. BOS does not sell personal data.

5. Security

BOS uses access controls and technical and organizational safeguards appropriate to the service. No internet service can guarantee absolute security. Do not include passwords or one-time codes in support requests.

6. Retention and deletion

Account and operational information is kept while needed to provide BOS to your organization and to meet applicable legal or contractual obligations. Support and website inquiries are kept as needed to resolve the request and maintain appropriate records. Some business records may have to be retained for legal, accounting, security or fraud-prevention reasons after an account deletion request. If that applies, we will explain the categories retained and the reason. After an account is closed without a separate request, associated data is automatically deleted within 90 days, except data we must retain. We respond to deletion requests within 24 hours. We complete deletion within 30 days of submission, including the necessary identity check and action by relevant service providers.

You can request deletion of a BOS account and associated personal data from outside the app through the public account and data deletion form. Include the account email and organization name; do not send a password. Support will verify the request, explain its scope and communicate the outcome. Deactivation is not the same as deletion.

7. Your choices and requests

Use the support form to ask about access, correction, deletion or restriction of personal information. Your organization may also manage work accounts and business records. We may need to verify the request and consider legal obligations before acting.

8. Website cookies and analytics

The website may use essential technical storage and analytics to measure visits and maintain reliability. The app and website may have different technical storage needs; this policy will be updated if data practices change.

9. Changes and contact

We will update this page when BOS data practices change. For privacy questions, use the support form. For other support options, visit the BOS Support Center.