Privacy policy
This notice describes the processing planned for the PassFlex pilot and what must still be finalised before commercial production.
Data and purposes
- Account, professional identity and organisation data for employer and worker workspaces.
- Shift, availability, contract, schedule and hours data for the requested workflow.
- Contact details and messages for demo, support and privacy requests.
- Email address and consent evidence for newsletters, only after a voluntary sign-up.
Legal grounds and recipients
Depending on the purpose, processing relies on pre-contractual measures, service performance, legal obligations, legitimate interests in security and product improvement, or consent for newsletters.
A demo request is stored in the Supabase infrastructure so PassFlex can respond. When commercial notifications are configured, Resend sends a copy to contact@passflex.be. Marketing contact consent remains optional and separate from the request.
Only authorised organisation users and necessary service providers receive access. Data is not sold. OpenAI receives only the data required for an explicitly enabled AI feature.
Retention and security
Data is kept as long as needed for the account, service, evidence and applicable duties, then deleted or anonymised. The detailed retention schedule must be approved before commercial production.
PassFlex uses organisation separation, access controls and logging for sensitive operations. No system can guarantee absolute security.
Your rights
Where applicable, you may request access, correction, deletion, restriction, objection or portability, and withdraw consent without retroactive effect.
Write to contact@passflex.be. You may also complain to the Belgian Data Protection Authority.