Privacy Policy

About This Policy

This Privacy Policy describes how SPD Technology ("we", "us", or "our") collects, uses, and protects information when you use the SPD Technology mobile application ("the App") available on Android and iOS platforms.

We are committed to protecting the privacy and security of our employees' data. This policy is designed to be transparent about our practices and to comply with applicable data protection laws.

Who Can Use This App

Access to the App is strictly limited to current employees of SPD Technology. Authentication is enforced via corporate Google accounts using the following domains:

• @spd.tech — SPD Technology core team
• @spd-ukraine.com — SPD Ukraine team

Any attempt to log in with a non-corporate account will be automatically rejected. By using the App, you confirm that you are an authorized SPD Technology employee.

Information We Collect

When you use the App, we may process the following categories of information:

• Account information — your corporate email address and display name, obtained via Google Sign-In.
• Device information — device type, operating system version, and unique device identifiers used for push notifications and session management.
• Usage data — interactions with app features such as charger bookings, access control events, and news read history, used solely to provide and improve the service.
• Photos — images captured or selected by you when using the Face Registration or Printing features. Photos are processed only for their stated purpose and are not stored beyond what is required.
• Voice data — audio captured when using the voice assistant feature. Audio is processed in real time for speech-to-text conversion and is not stored.

Why We Request These Permissions

The App requests only the permissions necessary to deliver its features.

Purpose of Data Processing

We use the information collected exclusively to:

• Authenticate your identity and grant access to corporate services
• Operate and deliver the features of the App (access control, charger booking, news, printing, etc.)
• Send push notifications relevant to your bookings and corporate announcements
• Register your biometric data for office physical access (face recognition), with your explicit consent
• Maintain security and detect unauthorized access attempts
• Improve app performance and fix technical issues

We do not use your data for advertising, profiling, or any purposes unrelated to your employment and use of SPD Technology internal services.

Who We Share Data With

We do not sell, rent, or trade your personal data to any third party. Data may only be shared in the following limited circumstances:

• Internal systems — your data is shared with SPD Technology's own infrastructure (access control systems, print servers, booking services) solely to provide the requested feature.
• Google Sign-In — authentication is handled by Google. Google's Privacy Policy applies to the authentication process.
• Legal requirements — we may disclose data if required by law or in response to a valid legal process.

How We Protect Your Data

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse:

• All communications between the App and our servers are encrypted using TLS 1.2 or higher
• Authentication tokens are stored in the device's secure storage and are never exposed to third parties
• Access to internal APIs is restricted to authenticated corporate accounts only
• Our servers are hosted within SPD Technology's private network infrastructure
• App access is enforced at the domain level — only verified corporate email domains are permitted

How Long We Keep Your Data

We retain personal data only as long as necessary to fulfill the purposes described in this policy or as required by applicable law:

• Authentication tokens are stored on-device and expire automatically. They are removed upon sign-out.
• Booking and usage data is retained for the duration of its relevance (e.g., active reservations) and deleted thereafter.
• Face registration data is retained in the access control system for as long as you are an employee. It is deleted upon termination of employment.
• Push notification history is not retained beyond delivery.

Your Data Rights

As an employee, you have the following rights regarding your personal data:

• Right to access — you may request a copy of the personal data we hold about you.
• Right to correction — you may request that inaccurate data be corrected.
• Right to deletion — you may request that your data be deleted, subject to legal and operational requirements.
• Right to withdraw consent — where processing is based on consent (e.g., face registration), you may withdraw it at any time by contacting IT.
• Right to object — you may object to certain types of processing where permitted by law.

To exercise any of these rights, please contact our IT team using the details below. We will respond to all requests within 30 days.