CFS Go privacy policy

Whose data this is

You sign in with an account created by your organisation. The business records you see and enter, such as approvals, claims, tasks, leave, attendance, payslips, documents and customer records, are held by your organisation’s Cloudfusions deployment. Your organisation decides what is stored there and who can see it.

The app talks only to the deployment address you enter when you first connect. It does not send your data to any other service operated by us.

What the app stores on your device

• Sign-in tokens, in the operating system’s secure storage.
• The organisation address you entered and your display and language preferences.
• A local cache of records you have opened, so that previously loaded screens work with a poor connection.
• Receipt files you captured or selected that are waiting to upload, in the app’s private storage.
• Temporary copies of documents, payslip PDFs or exports you choose to share or save. The app deletes these after the share or save finishes.

Removing the app from your device removes this local data.

Permissions the app asks for

• Camera: only when you choose to photograph a receipt or document to attach.
• Photo library or files: only to attach a file you select.
• Biometrics (Face ID, Touch ID or fingerprint): only if you turn on the optional app lock. The biometric data stays with the operating system and is never read by the app.
• Network: to reach your organisation’s deployment over HTTPS. Plain HTTP connections are refused.

What the app does not do

• It shows no advertising and does not track you across other apps or websites.
• It contains no third-party analytics or crash-reporting SDK.
• It does not sell or rent personal information.
• It does not send push notifications in this version.

Security

Connections use HTTPS. Access tokens are refreshed automatically and revoked when you sign out. You can require biometric or device authentication after the app has been in the background. Your organisation’s administrators control roles and can revoke access.

Access, export and deletion

Because your account and records belong to your organisation’s deployment, requests to access, correct, export or delete your personal data should go to your organisation’s administrator.

Administrators with the Admin or Partner role can request an export of the organisation’s data and start a confirmed erasure request from Settings in the app. Erasure is confirmed with a six-digit code sent to the administrator’s email and has a 90-day recovery period before it completes.

If you cannot reach your administrator, write to support@cloudfusions.com and we will help route your request.

Children

CFS Go is a business tool for working adults and is not directed at children.

Changes to this policy

We will publish any change on this page and update the date above.

Contact

Cloudfusions LLP, support@cloudfusions.com.