Privacy policy

At a glance

• The Artilink Tech mobile app collects your precise location, including in the background, only while a job assigned to you is running.
• Sharing starts when you set a job to « En route » (on the way), or 30 minutes before a scheduled appointment, and stops when the job is closed. Never outside those windows.
• It requires your explicit consent, given inside the app before any system permission prompt, and you can withdraw it at any time in Settings.
• Only your last known position is stored: it is overwritten by every new reading, and no location history or trip trail is built.
• No data, location or otherwise, is sold, rented, brokered, or used for advertising or ad tracking.

1. Who processes your data

The data controller is:

Artilink Group LLC
8 The Green, Suite B, Dover, DE 19901, United States
contact@artilink-group.com

2. What this policy covers

It covers the artilink-group.com website, the app.artilink-group.com web app and the Artilink Tech mobile app (package com.artilinkgroup.technicien), published on Google Play and the App Store, for technicians carrying out jobs on behalf of a company using Artilink.

The website sets no advertising or tracking cookies and uses no ad network.

3. Account and company data

When you create your account, and then when you register your company, we collect:

• Identity: first name, last name.
• Contact details: email address, phone number.
• Sign-in credentials: password (stored hashed, never in clear text) and session tokens.
• Professional profile: trades, coverage areas, profile picture.
• Company data, when you register your own company: legal name, company registration number (SIRET), address, bank details (IBAN) used to pay for your jobs.
• Supporting documents you upload: company registration extract, social security clearance certificate, insurance certificate, and any document requested by the company assigning the job.

4. Location data

The Artilink Tech mobile app collects your precise location, including when the app is closed or not in use. This section describes exactly what is collected, when, why, who it is shared with, and how you stay in control.

4.1 What is collected

• The latitude and longitude of your device (precise location).
• Your instantaneous speed, as reported by the GPS sensor.
• The timestamp of each reading.

4.2 When collection happens

• Tracking only starts for a job assigned to you, and only in one of these cases: you set the job to « En route » (on the way); the job has no scheduled time and has just been assigned to you; the job has a scheduled time and fewer than 30 minutes remain before it.
• Tracking stops as soon as the job is closed, cancelled or postponed, and as soon as you withdraw your consent.
• No location is collected outside those windows: not in the evening, not at weekends, not between jobs.
• While a window is active, a reading is taken at most every 30 seconds or every 25 metres travelled, depending on the accuracy level in use (up to 2 minutes or 100 metres in battery saving mode).

4.3 Background collection

• Collection continues in the background, even when the app is closed or not in use: this is what lets the customer follow your approach while you are driving with the screen off.
• On Android, the app uses the ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION, ACCESS_BACKGROUND_LOCATION and FOREGROUND_SERVICE_LOCATION permissions. A foreground service shows a persistent « Suivi Artilink actif » (Artilink tracking active) notification for as long as your location is shared.
• On iOS, the app uses the « Always » location authorisation and the system location indicator stays visible while sharing is on.
• If you decline the background permission, the app remains usable: sharing then works only while the app is open on screen.

4.4 Why we collect it

• Let the end customer follow your progress on a map, through a tracking link you send them, with no account and no app required on their side.
• Let the company that assigned the job know where the intervention stands and coordinate its teams.
• Automatically timestamp your arrival at and departure from the job site: the service compares your position with the job address and, when you are within 100 metres, records the start time, the end time and the on-site duration. Those timestamps feed the job report and the invoice.

4.5 Who it is shared with

• The company that assigned the job, through its Artilink administration workspace.
• The end customer of that job, only if you send them the tracking link from the job screen. That link shows a live map, is limited to the job concerned, and gives access to no other data about you.
• Our technical hosting subprocessors, listed below, strictly as needed to operate the service.

4.6 How long it is kept

• Only your last known position is stored on your technician record (latitude, longitude, reading date). Every new position overwrites the previous one: we do not build or keep any location history or trip trail.
• On-site presence timestamps (arrival time, departure time, duration) are kept with the job record, because they are part of the job report and serve as invoicing evidence.
• When your phone is offline, pending readings are queued locally on the device, capped at the 100 most recent, then sent once connectivity returns and cleared from the device.
• Your last known position is erased along with your account, following the deletion procedure described below.

4.7 Your control

• Before any system permission prompt, the app shows a screen stating what is collected, when, that it happens in the background, and who receives it. Until you accept it, no permission is requested and no tracking starts.
• You can turn sharing off at any time in the app's Settings, without losing access to your jobs or to any other feature.
• You can revoke location permissions from your phone settings, at any time, without going through us.
• Location is never used for advertising, profiling, scoring, or any monitoring outside the job windows described above.

5. Other data collected by the app

• Photos and camera: the before and after photos of a job, and parts receipts, that you take with the camera or pick from your gallery. Permission is requested at the moment of the action, never at app launch. Only the images you select are uploaded; we do not browse your gallery.
• Handwritten signature: the image of your signature, drawn on screen when signing your contract or a quote, kept with the signed document as evidence.
• Notifications: a push token issued by Apple (APNs) or Google (Firebase Cloud Messaging), along with the device type, used to alert you about a new job. It is deleted if you turn notifications off.
• Payments: when you collect a card payment from a customer, the transaction is processed by Stripe. Card details are entered into and handled by Stripe, never transit through our servers, and are not stored by us. We only keep the amount, date and status of the payment.
• Operational data: device model, operating system, app version and technical logs, used to diagnose failures.

6. Purposes and legal bases

• Operate the service and perform our contract with you: account, jobs, reports, quotes, invoices. Legal basis: performance of a contract.
• Share your location during jobs. Legal basis: your consent, collected in the app and revocable at any time.
• Send you push notifications about your jobs. Legal basis: your consent.
• Validate company registrations and prevent fraud. Legal basis: legitimate interest.
• Provide support, security and reliable operation of the service. Legal basis: legitimate interest.
• Comply with our accounting and tax obligations. Legal basis: legal obligation.

7. Data sharing

Your data is accessible to the company that assigns you jobs, limited to what it needs, and to our technical subprocessors. It may also be disclosed to an administrative or judicial authority where the law requires it.

We do not sell, rent or broker any personal data, including location data. No data is shared with advertising networks or data brokers, and none is used for ad targeting.

8. Subprocessors

• Supabase: hosting of the database, files and authentication, in Europe (Paris region).
• Vercel: hosting of the artilink-group.com website.
• Google Firebase Cloud Messaging and Apple Push Notification service: delivery of push notifications.
• Resend: delivery of transactional emails (address verification, password reset, notifications).
• Stripe: card payment processing, where the company has enabled that feature.
• Expo (EAS): building and distributing the mobile app releases.

9. Retention periods

• Account and profile: for as long as you use the service, then 30 days after a deletion request.
• Last known position: overwritten by every new reading, erased with the account.
• On-site presence timestamps, job reports, job photos: kept with the job record, for the legal and contractual needs of the company that assigned the job.
• Quotes, invoices and accounting records: 10 years, as required by law.
• Anonymised statistics that can no longer identify you: kept without time limit.

10. Security

Application data is hosted in Europe (Supabase, Paris region). Traffic is encrypted in transit (TLS), access is partitioned by company and by role at the database level, and session tokens are kept in your phone operating system secure storage.

11. Transfers outside the European Union

Artilink Group LLC is established in the United States. Application data remains hosted in the European Union, but our teams and some of our subprocessors may access it from the United States. Those transfers rely on the European Commission standard contractual clauses, backed by technical measures (encryption in transit, named and logged access).

12. Your rights

Under the GDPR you have the following rights:

• Right of access to your data and to obtain a copy.
• Right to rectification of inaccurate data.
• Right to erasure of your data.
• Right to restriction of, and right to object to, processing.
• Right to data portability.
• Right to withdraw your consent at any time, in particular for location and notifications, without affecting the lawfulness of processing already carried out.
• Right to lodge a complaint with a supervisory authority, in France the CNIL.

To exercise them, write to contact@artilink-group.com. We answer within one month.

13. Deleting your account

You can delete your account and personal data directly from the app, under Profile then Settings then Delete my account, or from the artilink-group.com/delete-account page. The account is disabled immediately and the data is permanently purged within 30 days, except for the records the law requires us to keep, listed in section 9.

14. Minors

The service is aimed at professionals. It is not intended for people under 18 and we do not knowingly collect data about them.

15. Changes

Any change to this policy is published on this page with an updated last-modified date. If a change materially affects the collection of your data, in particular location data, you are informed in the app before it takes effect.

16. Contact

For any question about this policy or your data: contact@artilink-group.com.