ODIF is a closed, authenticated enterprise application engineered for engineering, execution, and plant maintenance teams[cite: 4]. It is not a consumer software product[cite: 4]. The application is developed, operated, and maintained by PBOPlus Consulting Services Pvt. Ltd. (“PBOPlus”, “we”) on behalf of licensee employer organisations[cite: 4, 5].
01Who we are & operational roles
This Privacy Policy governs the processing of personal and operational information inside the ODIF mobile application and its associated backend cloud infrastructure[cite: 5].
| Entity Role | Entity Identity | Responsibility & Authority |
|---|---|---|
| Data Fiduciary (Data Controller)[cite: 5] |
Your Employer Organisation (Customer Organisation)[cite: 5] | Determines user access scopes, operational assignments, data retention periods, and internal employment guidelines[cite: 5]. |
| Data Processor[cite: 5] | PBOPlus Consulting Services Pvt. Ltd.[cite: 4, 5] | Hosts, architects, and processes operational telemetry strictly pursuant to the master software license agreement[cite: 5]. |
02What we collect
ODIF collects only data necessary to authenticate plant personnel, maintain job-card auditability, and process operational approvals[cite: 4, 5].
| Category | Specific Data Fields | Source & Purpose |
|---|---|---|
| Identity & Account[cite: 4, 5] | Name, work email address, employee ID, department, designation, assigned plant site[cite: 4, 5] | Provisioned directly by your organisation’s ODIF administrator for authentication and role-based permissions[cite: 4, 5]. |
| Operational Job Cards[cite: 4, 5] | Work Breakdown Structure (WBS) entries, execution metrics, resource allocations, equipment delay logs[cite: 4, 5] | Entered by you on-shift to track progress against plant execution targets[cite: 4, 5]. |
| Approvals & Remarks[cite: 4, 5] | Approval logs, sign-offs, supervisor remarks, hold-up comments, timestamped audit trail[cite: 4, 5] | Submitted by designated supervisors to authorize job cards and WBS adjustments[cite: 4, 5]. |
| Workforce Requests[cite: 4, 5] | Leave applications, on-duty filings, week-off scheduling adjustments[cite: 4, 5] | Submitted by field personnel for administrative site scheduling[cite: 4, 5]. |
| Site Attachments[cite: 4, 5] | Site photos or equipment specification documents attached to specific job cards[cite: 4, 5] | Captured or selected by you on demand to evidence physical equipment or operational conditions[cite: 4, 5]. |
| Technical Diagnostics[cite: 4, 5] | Device model, OS build version, crash stack traces, IP address, push notification tokens[cite: 4, 5] | Automated system telemetry to ensure uninterrupted shift operations and app stability[cite: 4, 5]. |
03What we do not collect
To ensure total worker privacy and minimal compliance exposure across Google Play and Apple App Store, ODIF strictly excludes the following[cite: 4, 5]:
- Precise GPS location: The app does not request or track fine location, background GPS, or geolocation coordinates[cite: 4, 5].
- Advertising & tracking identifiers: The Android Advertising ID (
AD_ID) and Apple IDFA are completely removed from the manifest and runtime builds[cite: 4, 5]. - Personal device content: We never inspect your device contacts, SMS, call history, browser history, personal photo libraries, or other installed apps[cite: 4, 5].
- Financial data: There are zero in-app purchases, payment methods, or personal banking details captured[cite: 4, 5].
- Sensitive personal data: No biometric, religious, political, or personal health records are processed[cite: 4, 5].
04Device permissions
Device permissions are requested conditionally at runtime only when initiating a specific user action[cite: 5].
05Why we use data
- Authenticating Field Operators: Enforcing cryptographic access control and assigning role-specific plant authorities[cite: 5].
- Audit Trail Integrity: Maintaining tamper-evident chronological logs of who recorded, edited, or approved each plant operational event[cite: 4, 5].
- Operations Dashboard & Analytics: Providing plant managers and executive leadership with real-time visibility into equipment uptime and progress[cite: 4, 5].
- System Health: Monitoring API latency, diagnosing crash traces, and maintaining high availability across intermittent industrial network environments[cite: 4, 5].
We do not use your information for advertising, behavioural profiling, marketing, or automated machine decisions affecting your employment standing[cite: 4, 5].
06Credentials & account governance
Admin-Provisioned Architecture: ODIF contains zero public registration, self-service sign-up forms, or social login providers[cite: 4, 5]. Accounts are issued directly by licensed plant administrators[cite: 4, 5].
- Salted Hash Storage: User passwords are encrypted using modern salted hash algorithms[cite: 4, 5]. Credentials are never stored in plain text, are never reversible, and cannot be viewed by administrators or PBOPlus staff[cite: 4, 5].
- Forced First-Login Change: Initial administrator-provided passwords are strictly single-use and expire upon initial system access, requiring the employee to establish their personal confidential password[cite: 4, 5].
- Reset Security: Account recovery procedures issue ephemeral single-use tokens; previous passwords are never retrieved or transmitted in plain text[cite: 4, 5].
- Brute-Force Lockout: Repeated failed sign-in attempts trigger progressive rate-limiting and temporary account lockout[cite: 4].
08Storage & data retention
- Operational Plant Records: Retained for the duration of the customer organization's active enterprise contract to meet statutory engineering, plant compliance, and audit requirements[cite: 5].
- Deactivated Account Data: User account credentials and personal profile records are irreversibly anonymized or deleted within 90 days of account deactivation[cite: 4, 5].
- Security & Audit Logs: Access logs, authentication timestamps, and security audit records are maintained on a rolling lifecycle[cite: 5].
09Security safeguards
PBOPlus employs enterprise-grade technical and organisational measures to protect against unauthorized access, loss, or manipulation[cite: 4, 5]:
- Encryption in Transit: 100% of network traffic between the ODIF mobile app and production APIs enforces TLS 1.2 or higher encryption[cite: 4, 5].
- Encryption at Rest: Database tables, attached media, and system backups are secured using encryption at rest on production infrastructure[cite: 5].
- Role-Based Access Control (RBAC): Strict isolation between client tenant organizations; plant employees only access data within their assigned scope[cite: 5].
10Your choices & data deletion
Because ODIF is an enterprise work tool, personal data processing is governed by your employment relationship[cite: 4, 5]. Subject to the Digital Personal Data Protection Act, 2023 and international data privacy norms, you hold rights regarding your records[cite: 4, 5]:
- Review & Correction: You may request review or correction of inaccurate profile data by notifying your plant administrator or our support desk[cite: 5].
- Data Deletion Requests: Although public self-registration does not exist, employees may request account deactivation and associated record deletion via our dedicated portal: pboplus.com/odif/data-deletion[cite: 4, 5].
- Permission Revocation: You can independently revoke camera, file access, or push notifications at any time via your device OS settings[cite: 2, 5].
11Age limit & 18+ policy
ODIF is exclusively intended for adult industrial plant personnel, certified engineers, and licensed contractors[cite: 4, 5]. The application is rated 18+ only across all app stores[cite: 4]. We do not knowingly solicit or collect data from anyone under the age of 18[cite: 4, 5].
12Grievance redressal & legal contact
Pursuant to the provisions of the Digital Personal Data Protection Act, 2023, queries or grievances regarding data processing may be directed to our appointed Grievance Officer[cite: 4, 5]:
| Grievance Officer | Grievance Officer, PBOPlus Legal & Data Compliance |
| Compliance Email | grievance@pboplus.com |
| App Support | support@pboplus.com[cite: 4, 5] |
| Corporate Address | PBOPlus Consulting Services Pvt. Ltd. 206, 2nd Floor, Indure House, Greater Kailash-II, New Delhi – 110048, India[cite: 4, 5] |