AptMode Orbit is a business asset, inventory, and maintenance management platform. Organizations ("workspaces" or "tenants") sign up for AptMode and invite their own users to track assets, inventory, and work orders. This policy covers the personal information we collect from people who create or use an AptMode account, and how we handle the business data a workspace enters into the Service.
Account information. When you create an AptMode workspace or are added to one, we collect your email address and mobile number. Both are verified via a one-time passcode (OTP) before your account is created. We also collect the password you set (stored only as a salted, irreversible hash — we never store or can retrieve your plaintext password), your name if you provide one, and your organization/workspace name.
Business data you enter. The Service is a system of record for your organization's physical assets, inventory items, and maintenance work orders. Any data your workspace enters — asset names, serial numbers, locations, assigned personnel, inventory quantities, vendor and supplier names, repair notes, and similar records — is stored to provide the Service. This data belongs to your workspace, not to AptMode.
Automatically collected information. We use a single session cookie, set as HTTP-only (not readable by page scripts) and transmitted only over HTTPS, to keep you signed in. We do not use third-party advertising or analytics SDKs, and we do not track you across other apps or websites. Our servers log standard technical request data (such as IP address and timestamps) for security and troubleshooting purposes.
Camera access. The mobile app requests camera permission solely to scan QR codes and barcodes for looking up or registering assets and inventory items. Camera images are processed on-device to read the code and are not uploaded, stored, or transmitted to our servers.
We do not sell personal information, and we do not use your data to serve you targeted advertising.
If you are located in the European Economic Area or the United Kingdom, we process your personal information under the following legal bases: performance of a contract (to provide the Service you or your organization signed up for), our legitimate interests (such as securing the Service and preventing abuse), and, where applicable, your consent.
We retain account and business data for as long as your workspace remains active, and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. OTP codes expire shortly after issuance and are stored only as irreversible hashes. You may request deletion of your account as described in Section 8 below.
We use industry-standard measures to protect your information, including encryption of data in transit (HTTPS/TLS), salted password hashing, HTTP-only session cookies, and role-based access controls that isolate each workspace's data from every other workspace. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
Depending on where you live, you may have rights to access, correct, export, or delete your personal information, or to object to or restrict certain processing — for example, under the GDPR (EEA/UK) or the CCPA/CPRA (California). To exercise any of these rights, contact us using the details in Section 12. If your account is part of an organization's workspace, some requests may need to be made or approved by your workspace's administrator, since the workspace controls its own business data.
To delete your AptMode account, use "Delete my account" in the Account menu inside the app, or submit a request at aptmode.com/delete-account. Your account is deactivated straight away and your personal data (name, email, mobile number and sign-in details) is deleted within 30 days. Records you added to a workspace, such as assets and inventory, belong to that workspace and are kept.
California residents: we do not sell or share personal information for cross-context behavioral advertising, so there is no sale/share opt-out to exercise.
The Service is intended for business use by working professionals and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.
AptMode may process and store information in countries other than the one where you or your organization are located. Where required, we take steps intended to ensure such transfers comply with applicable data protection law.
We may update this policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice (such as an in-app notification or email).
AptMode is a product of 2OCorp IT Services Private Limited, which is responsible for the personal information described in this policy.
If you have questions about this policy or wish to exercise your data rights, contact us at: contact@aptmode.com