Privacy Policy for TBS

1. About the app

TalentBricks Seller ("TBS", "the app") is a mobile application for iOS and Android used by field sales reps who are employed by or contracted with companies that use the TalentBricks field-sales CRM. The app lets you sign in, start and end a work pass, and record your route via GPS while a pass is active. Data is stored in TalentBricks' cloud service and may be viewed by your employer in the CRM.

This policy applies only to TBS. For our marketing website, see the privacy policy for talentbricks.se (Swedish).

2. Data controller

Talentbricks AB, org. no. 559xxx-xxxx, Kungsgatan 12, 111 43 Stockholm, Sverige, is the data controller for personal data processed in TBS.

Your employer (the company you sell for via TalentBricks) may be a joint or independent data controller for certain data related to your employment and workforce management. Contact your employer if you have questions about how they use your location data.

3. What data we collect

We collect the following categories of data when you use TBS:

Account data

• — Email address and password (for sign-in via Supabase Auth)
• — First name, last name, and email from your seller profile in the CRM
• — Company and role association (sales rep, team leader, etc.)
• — Session information stored locally on your device to keep you signed in

Location data (only during an active work pass)

When you tap Start and a work pass is active, the app collects GPS position approximately every 30 seconds, including when the app runs in the background. This may include:

• — Latitude and longitude
• — Accuracy, altitude, speed, and heading (if provided by your device)
• — Timestamp of each position reading

Location data is not collected when no work pass is active. You start and stop recording yourself in the app.

Work passes

• — Start and end time of each work pass
• — Association between your account, your company, and recorded position points

Technical data

• — Authentication tokens and temporarily buffered position points stored locally on your device (AsyncStorage) until sent to the server
• — Server receipt time when a position point is saved

TBS does not include third-party advertising or analytics trackers (e.g. no Firebase Analytics, no Crashlytics). We do not sell your personal data.

4. Why we process your data

We process your data to:

• — Authenticate you and provide access to the app
• — Record and store your route during active work passes
• — Make route data available to your employer in TalentBricks CRM (e.g. for follow-up, planning, and workforce management)
• — Ensure data is isolated per company (multi-tenant) via access controls
• — Buffer data offline and sync when a network connection is available

5. Legal basis

Processing is based on:

• — Performance of a contract — to provide the app and CRM service to your employer and to you as a user
• — Legitimate interest — your employer's interest in monitoring field sales work and routes during working hours
• — Legal obligation — where we must retain certain information by law
• — Consent — for access to location data via your device's operating system (you may deny or revoke location permission in device settings)

6. Location permissions

TBS requests access to your device's location. For full background functionality you need to select "Always" (iOS) or the equivalent background location option (Android). Without location permission you cannot record your route. You may change or revoke permission at any time in device settings — note that recording will then pause or stop.

On iOS, an indicator is shown when location is shared in the background. On Android, a foreground service notification is shown while a pass is active.

7. Who we share data with

• — Your employer — admins and authorised users within the same company in the CRM can view your work passes and routes according to their access level
• — Supabase — our provider for authentication, database, and API (data processor). Data is stored in the EU/EEA or under applicable data processing agreements
• — Authorities — only where required by law

We do not share your data with advertisers or data brokers.

8. Retention

• — Location data and work passes — retained for as long as your employer's agreement with TalentBricks is active and according to their internal policy, unless a shorter period is agreed or you request deletion under section 9
• — Account data — retained while your seller account is active in the CRM; deleted or anonymised when the account is closed, except for data we must retain by law
• — Local buffer on device — temporary position points are removed from the device after successful upload to the server

9. Your rights

Under the GDPR you have the right to:

• — Request a copy of your personal data
• — Request correction of inaccurate data
• — Request erasure or restriction of processing (subject to your employer's and our legal basis)
• — Object to certain processing
• — Withdraw consent for location access via device settings
• — Lodge a complaint with the Swedish Authority for Privacy Protection (IMY)

Contact us at info@talentbricks.se or your employer to exercise your rights. We respond within one month.

10. Security

We protect your data using measures including:

• — Encrypted communication (HTTPS/TLS) between the app and our servers
• — Row-level security (RLS) in the database — a seller can only write their own rows
• — Company isolation so data from different customers is not mixed
• — Secure session handling with token refresh

11. International transfers

We aim to process personal data within the EU/EEA. If data is processed outside the EU/EEA, this is done only with appropriate safeguards, such as the EU Commission's Standard Contractual Clauses.

12. Children

TBS is intended for adult workers and is not directed at anyone under 16. We do not knowingly collect data from children.

13. Changes to this policy

We may update this policy as needed. Material changes will be communicated via the app or your employer. The date of the latest version is shown at the top of this page.

14. Contact

Questions about this policy or how TBS processes personal data? Contact us:

• — Email: info@talentbricks.se
• — Mail: Talentbricks AB, Kungsgatan 12, 111 43 Stockholm, Sverige