Privacy Notice
How ProOps collects and uses information from demo requests and inside the ProOps application.
Who we are
ProOps is an operations platform for teams that run physical sites — tasks, checklists, audits, sensors, maintenance and teams in one console.
M.C. Cypria Ltd (VAT <<MC-CYPRIA-VAT>>), Panagias Faneromenis 30, Panmari Iordanou Complex, 2nd floor, office 205, 4187 Ypsonas, Limassol, Cyprus
What we collect
When you submit our demo request form, we collect exactly the information you enter in that form:
- Name
- Company
- Work email
- Phone
- Number of sites
- Message
We also receive standard technical data that mail systems generate when a message is sent — for example the sending IP address and timestamp recorded by our form-relay and email providers.
Why we use it
We use this information only to respond to your demo request and to follow up with you about ProOps. We do not add you to a marketing list, and we do not use this information for profiling or automated decision-making.
How your submission flows
The demo request form on our site is relayed by FormSubmit.co, a third-party form-relay service. FormSubmit.co processes your submission in order to deliver it to us by email. That email is delivered to a mailbox we host on Microsoft 365.
Retention
We keep your information only for as long as needed to handle your request and any resulting conversation.
Demo-request emails are kept for 12 months from our last contact with you, and then deleted.
Your rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you
- Correct (rectify) inaccurate data
- Ask us to erase your data
- Object to our processing
- Receive your data in a portable format
To exercise any of these rights, contact us using the details below.
You also have the right to lodge a complaint with the supervisory authority in Cyprus:
Office of the Commissioner for Personal Data Protection (Cyprus)
Contact
For any question about this notice, or to exercise your rights, contact us at:
Cookies
This site does not use cookies and does not run analytics or tracking scripts.
The only browser storage this site uses is a single functional entry (proops:lang) that remembers whether you last chose English or Greek. It is not a cookie, and it is not used for tracking.
The ProOps application
This part of the notice covers the ProOps application itself — the console, mobile app and related notifications used by our customers' staff to run day-to-day operations: tasks, checklists, audits, patrols, sensors and maintenance. It is separate from the demo-request form described above, which covers this marketing website only.
Who controls this data
Two organisations are responsible for your data in ProOps. Your employer — the business operating the property or properties (μονάδα/μονάδες) where you work — is the data controller for the operational records you create: tasks, checklists, audit answers, patrol and checkpoint scans, photos, and similar work records. Your employer decides what is checked, how long records are kept, and who can see them.
M.C. Cypria Ltd, the operator identified above, acts as data processor for that operational data — processing it only on your employer's instructions, to run the platform. We are controller in our own right for a smaller set of data we hold to operate and secure the service: your account credentials, sign-in activity, and any support correspondence with us directly.
Getting an account
There is no public sign-up: your employer's administrator creates your account, invites you, and sets your role and property/μονάδα. We hold your name, work email or mobile number (used to sign in), your role and property/μονάδα, and — optionally — a profile photo.
What else the app collects
Photos. When a task, checklist, audit or incident report calls for photo evidence, we store the photo you attach against that record. Photos may show premises, equipment, products or documentation, or, where relevant, people.
Checkpoint and asset scans. Scanning an NFC tag or QR code — on a patrol round, or against a piece of equipment — records that scan against your account, with the checkpoint or asset identified and the time. This is a timestamped log of checkpoint activity, not a location trail: it confirms you were at that specific tag, not where you were in between.
Push notifications. We store a device push token so the app can deliver task and alert notifications to your device.
Location. The native mobile app does not request or collect GPS or other location data — it has no location permission at all. The separate web console, used for staff clock-in, reads a one-off, transient browser location reading to judge on-site, nearby, or off-site; the raw reading is never stored, only that result. This applies only to the web console, not the mobile app.
Permissions the app requests
On a phone, ProOps asks for:
- Camera, to take photos for tasks, checklists, audits and incident reports.
- Photos or media library, to attach an existing photo instead of taking a new one.
- NFC, to read checkpoint and asset tags during patrols and equipment checks.
- Notifications, to deliver task reminders and alerts.
We do not request contacts, calendar, microphone, or background location access.
Who we share it with
We share data with the processors below, strictly to run the platform. None are advertising or analytics partners, and we do not sell your data.
- Supabase, our database, authentication and file-storage provider, hosted in the EU (Ireland).
- Twilio and Meta (WhatsApp Business), deliver SMS and WhatsApp alerts to your mobile number, where your employer has turned these on.
- Resend, sends scheduled report and reminder emails, such as sensor readings and calibration reminders, to recipients your employer configures.
- Expo, delivers push notifications to your device.
- Render, hosts the web application.
- GitHub, hosts our source code; it does not ordinarily store your personal data.
Retention and deleting your account
Your employer keeps operational records — tasks, checklists, audits, patrols and similar entries — for as long as its own legal and compliance obligations require, such as HACCP and health & safety record-keeping.
You can delete your account at any time, from inside the app or at runproops.com/delete-account. Your name, email, mobile number, profile photo and push token are removed within 30 days. The operational records you created stay in the system, attributed to "Deleted user" instead of you, because your employer still needs them as compliance evidence — but nothing in them identifies you any more.
[Confirm runproops.com/delete-account is live, and that the in-app "Delete my account" screen has shipped, before publishing this section.]
Your rights
Under the GDPR you have the right to access, correct, restrict or object to the use of your data, and to receive it in a portable format. Because your employer controls your operational records, requests about that data should go to your employer first; we assist them in responding. For account and security data we hold as controller ourselves, contact us directly at support@runproops.com. You also have the right to complain to the Office of the Commissioner for Personal Data Protection (Cyprus).
Data location and security
Your data is stored in the EU (Ireland). Connections to the app are encrypted in transit, and stored files are encrypted by our storage provider. Access is restricted by account role and enforced at the database level, so staff only see data for their own property/μονάδα.
Children
ProOps is a workplace tool provided to staff invited by their employer. It is not directed at children, and we do not knowingly collect data from anyone under 16 outside that employment context.
Changes to this section
We may update this section as the app changes. We will change the date below when we do; for significant changes, we will also notify your employer.
Last updated: 6 September 2026