Privacy Policy

What Operator Cockpit is

Operator Cockpit is a workforce operations app for food-service businesses. It covers scheduling, shift swaps, tasks with photo proof, training, and team chat. There is no self-service sign-up: your account exists because your employer added you to their team roster, and the app is used in that employment context. Your employer decides who is on the roster and what role each person has.

Our core commitments

• We never sell, rent, license, or trade personal data, and we never use it for third-party advertising or marketing.
• There are no third-party analytics, ad trackers, or tracking pixels in the app or on this site.
• Data is isolated per business at the database level (row-level security). One business cannot see another's data. Only BPN platform administrators can access data across businesses, and only for support and operations.

Data we collect

• Roster information: your name, email address, and phone number, provided by your employer or by you, plus your role and job position.
• Pay rate: if your employer enters one, it is used to show labor-cost estimates to owners and managers and pay estimates to you. It is not a payroll record.
• Scheduling: your work schedules, availability, time-off and shift-swap requests.
• Content you create: tasks and photo proof of completed tasks, team chat messages including images, and training video progress.
• Sign-in: one-time verification codes sent to you by email or text message. There are no passwords.
• Device: a push-notification token, only if you allow notifications.
• Crash reports: if the app crashes, we receive the error, app version, device model, operating system version, and an internal account identifier so we can fix it. Crash reports never include the content of your messages, and we use no session recording or screen capture.

How we use it

Your data is used solely to operate the service for you and your employer: showing schedules, delivering messages and notifications, tracking task completion, and keeping the app working. Nothing else.

Who can see it

People at your own workplace see your team data according to their role. Owners and managers see roster, scheduling, and task information for their business. Coworkers see what the app shows them, such as the published schedule and team chat.

Third-party services

A small set of service providers run the product on our behalf. Each receives only what its job requires, and none may use the data for its own purposes. This is the complete list; we will not add another service that touches user data without updating this policy first.

• Supabase — database, authentication, and file storage. Encrypted at rest and in transit.
• Resend — sends sign-in code emails. Receives only the email address and the message content.
• Twilio — sends sign-in code text messages. Receives only the phone number and the message content.
• Expo — delivers push notifications. Receives only device tokens and notification content.
• Sentry — receives crash and error reports as described above. Errors only: no session replay, no performance tracing.
• Vercel — hosts this website and the web app, and processes standard web traffic (IP addresses, request logs) to serve it.

Security

• All traffic is encrypted in transit (HTTPS/TLS); data is encrypted at rest.
• Access rules are enforced at the database level with row-level security, not just in the app.
• Sign-in uses short-lived one-time codes; there are no stored passwords to steal.
• If we confirm a breach affecting your personal data, we will notify affected users within 72 hours.

Retention, deletion, and your rights

• Your data is kept while your employer's account needs it. When your employer removes you from their roster, your sign-in access ends.
• You can request deletion of your account and personal data by emailing support@bpnsolutions.com. Deletion is completed within 30 days.
• You can request a machine-readable export of your personal data at the same address; we respond within 14 days.
• Push tokens are deactivated when you sign out and deleted with your account.

Children

Operator Cockpit is a workplace tool and is not directed at children under 13. We do not knowingly collect data from anyone under 13; if we learn we have, we delete it. Workers under 18 use the app only as part of their employment, with data entered by their employer.

Law enforcement

We do not voluntarily disclose user data. We disclose it only in response to valid legal process (court order, subpoena, or warrant), limited to the minimum required, and we notify the affected user unless legally prohibited from doing so.

Changes to this policy

If this policy changes, we update this page and the date at the top. Material changes, including any new third-party service, take effect only after the updated policy is published.

Contact

Questions about this policy or your data? Email support@bpnsolutions.com. See also our terms of service.