COP31 Mobile Privacy Policy
1 Overview & Scope
This Privacy Policy explains how INOSAS collects, processes, and protects information gathered through the COP31 Mobile application on Apple iOS and Google Android platforms. COP31 Mobile serves as a field command companion for IT Service Management (ITSM) and IT Asset Management (ITAM).
2 Categories of Data We Process
COP31 Mobile processes only the minimum data required to facilitate operational service desk workflows:
| Data Category | Specific Items | Purpose of Processing | Legal Basis |
|---|---|---|---|
| Account & Identity | Name, Surname, Username, Corporate Email Address | User authentication, service desk auditing, and assigning field tickets | Contractual Performance & Legitimate Interest |
| User Attachments & Evidence | Photos and attachments explicitly selected by the user | Attaching operational hardware damage or physical proof to incident records and updating profile avatars | User Consent |
| Device & Installation Identifiers | Random installation UUID, Device Model, OS Version | Session security binding, fraud prevention, and device-specific push delivery | Legitimate Interest & Security |
| Push Notification Tokens | OneSignal Push Subscription Token | Delivering critical ticket assignments, escalation alerts, and workflow approvals | User Consent (Opt-in) |
3 Device Permissions & Hardware Access
Photo Library / Media
Requested only when you initiate an attachment action to add field photos to an incident ticket or update your profile. COP31 Mobile utilizes the native system photo picker and does not scan your personal media gallery.
Push Notifications
Requested in context after you sign in. You can disable push notifications at any time via your device operating system settings without affecting core ticketing capabilities.
Camera & Location
The mobile app does not require background location tracking or active camera hardware permissions.
4 Data Security & Encryption Practices
- Encryption in Transit: All network communication between COP31 Mobile and backend servers is encrypted using industry-standard TLS 1.2/1.3 (HTTPS) encryption.
- Secure Local Storage: Authentication session tokens are stored exclusively in hardware-backed secure storage (iOS Keychain and Android Keystore via Expo SecureStore). Plaintext passwords are never saved on the device.
- Third-Party Advertising & Tracking: COP31 Mobile contains zero advertising SDKs, tracking libraries, or commercial data broker integrations.
5 Data Retention & Account Deletion Rights
We retain account information for as long as your organizational access remains active. Pursuant to Apple App Store Guideline 5.1.1(v) and Google Play User Data policies, users have the absolute right to request account and associated personal data deletion at any time.
Note: Formal operational records (such as completed system changes, closed incident logs, and SLA audit trails) may be retained in anonymized/archived form to satisfy institutional compliance and statutory audit obligations.
6 Data Controller & Contact Information
For any inquiries regarding this Privacy Policy, personal data access, or exercising your rights under KVKK and GDPR, please contact our Data Protection Officer:
INOSAS Bilgi Teknolojileri A.Ş.
Address: Ostim OSB Mah. 100. Yıl Blv. No:55E/14, 06374 Yenimahalle / Ankara, Türkiye
Phone: +90 (312) 266 66 50
Email: info@inosas.com.tr • support@inosas.com.tr
Corporate Website: https://www.inosas.com.tr