XOSCOM — Privacy Policy

Effective date: October 18, 2026

XOSCOM LLC ("XOSCOM", "we", "us") operates the XOSCOM web application at app.xoscom.com and the XOSCOM mobile app for iPhone (together, the "Service"). The Service is a work-management tool for field technicians and office staff who work for XOSCOM or with XOSCOM. This policy explains what information we collect, why, who receives it, how long we keep it, and the choices you have.

1. Who can use the Service

The Service is not open to the public. Accounts are created by a XOSCOM administrator for employees, contractors and authorized partners. There is no public sign-up. The Service is not intended for anyone under 18.

2. Information we collect

Account information. Your name, work email, role, and the projects you are assigned to. If you sign in with Google, we receive your name, email address and profile photo from Google. If you sign in with email and password, your password is stored only in hashed form.

Time records. Each clock in, break, resume and clock out, with its date and time, the project, any comment you write, and the location where the punch was made.

Location.

• When you clock in or clock out, we record your location to confirm you are at the job site and to set the project you are working on.
• While you are on the clock, the app reports your location about once a minute so dispatch can see where the crew is.
• When you tap On my way, the app shares your location with dispatch until you clock in, cancel, or six hours pass. This time is not paid time.
• We do not collect your location when you are off the clock and have not tapped On my way. You can turn location access off at any time in your phone settings; some features (clock-in confirmation, automatic project selection, dispatch map) will then not work.

Photos and documents. Job photos you take or upload, including the GPS position and time stamped on them, and receipts or invoices you upload for expenses.

Work records. Job and project information you enter or update (status, notes, production, materials, expenses).

Device and technical information. App version, browser or device type, and a notification token if you allow notifications. A single session cookie keeps you signed in; we do not use advertising cookies.

3. How we use information

• To run the Service: sign-in, time records, payroll, expenses, job tracking and dispatch.
• To confirm on-site work and to assign time and production to the right project.
• To prepare job completion packages and billing for the customers we do the work for.
• To send work notifications you have allowed.
• To keep the Service secure and to fix problems.

We do not sell your information, we do not use it for advertising, and we do not track you across other companies' apps or websites.

4. Who receives information

• Customers we perform work for receive the job records and job photos needed to document and bill that work.
• Service providers that run parts of the Service for us, only for that purpose:
  • DigitalOcean — server hosting and storage.
  • Google — maps shown in the app, and Google sign-in if you use it.
  • OpenRouter and the AI model providers it routes to — to read the text on receipt and job photos you upload. We ask these providers not to retain or train on that data.
  • Apple — delivery of push notifications to iPhone.
• Legal reasons — when required by law, or to protect the rights and safety of people or of XOSCOM.

5. How long we keep information

• The minute-by-minute location trail (on the clock or On my way) is deleted automatically after 7 days.
• Time records, payroll, expenses and job records, including the location attached to each punch and photo, are kept for as long as needed for payroll, billing, tax and legal purposes.
• When an account is closed, we delete or anonymize its personal information, except records we are required to keep.

6. Your choices and rights

• You can see your own time records and photos in the app.
• You can ask us to correct your information, to send you a copy, or to delete your account by writing to admin@xoscom.com. Because accounts are created by XOSCOM, account deletion is handled by our administrators; we will confirm when it is done.
• You can turn off location, camera, photo and notification permissions at any time in your phone settings.

7. Security

Information travels over encrypted connections (HTTPS). Access inside the Service is limited by role. No system is perfectly secure, but we work to protect your information and will notify affected users of a breach as required by law.

8. Changes to this policy

If we change this policy, we will post the new version here with a new effective date, and tell users in the app when the change is significant.

9. Contact

XOSCOM LLC - Privacy, accounts and legal matters: admin@xoscom.com - Technical support and job assignments: tech@xoscom.com