Privacy notice
What this site and the BPT service collect about you, why, how long it is kept, and what you can ask for. There are no analytics, advertising or tracking tools on either.
Last updated
Who is responsible
For this public site and for requests to use BPT, the controller of your personal data is the operator of this site. You can reach them about privacy through the Contact page.
Inside BPT, each customer organisation decides what it records about its own people, customers and suppliers. For that data the organisation is the controller, and the operator of this site processes it on the organisation’s behalf. If you are an employee, customer or supplier of an organisation that uses BPT, ask that organisation first; it holds the records and answers for them.
Visiting this site
Reading these pages sets no cookie except your theme choice, if you make one. The site’s server and the network in front of it (see Subprocessors) see your network address and browser as any website does, to deliver the page and to defend it; BPT keeps no log of page views.
Asking for access
When you request access we keep your name, work email, organisation and what you write, to answer you and for nothing else. The request is deleted 90 days after you send it. If you are invited, the invitation is sent to that email address.
To limit how often requests can be sent, a keyed one-way digest of your network address is kept for one day; the address itself is never stored. The audit trail (below) records only that a request arrived, and when: nothing you sent, nothing about your browser, and no network address.
Using BPT
If you are invited to an organisation in BPT, it holds:
- your account: name, email address, password (stored only as a salted hash), and any authenticator or passkey you add;
- your sessions: when they started, and the network address and browser they came from;
- what you do: each record you create, change, approve or sign is written with your name, the time, your network address and browser;
- whatever the organisation records about you in its modules, such as an employee record, training, time on projects or deliveries.
We use this to provide the service, to keep it secure, and to give the organisation the evidence its auditors and regulators require. We do not sell it, use it for advertising, or profile you.
The audit trail
BPT keeps a tamper-evident record of every change: who made it, when, from which network address and browser, and what changed, with personal values kept as one-way digests where the record allows. This record is append-only by design, because its purpose is to prove what happened, and it is kept for as long as the organisation it belongs to uses BPT. It is not deleted when the record it describes is.
AI
Where BPT drafts with AI, it uses a model the deployment runs itself; your data is not sent to an outside AI provider unless the organisation declares one and allows it. Each AI run, with what was asked and what came back, is recorded in the organisation’s register of AI runs, and nothing a model writes takes effect until a person accepts it.
How long it is kept
| Data | Kept for |
|---|---|
| Requests for access | 90 days from sending |
| Digest of a requester’s network address | One day |
| Sessions | They expire after eight hours without use, or when you sign out |
| Delivery drivers’ positions | 30 days by default; the organisation may set 1 to 365 |
| Time recorded on projects | Six years from the end of the week |
| The audit trail | As long as the organisation uses BPT |
| Everything else | As long as the organisation keeps it, or until deleted on request |
Records under a legal hold are kept until the hold is released, even where they would otherwise be deleted.
Where it is kept
Data is stored where the operator’s servers are; BPT does not copy it elsewhere. Traffic to this site passes through the network provider named on the Subprocessors page, which may handle it in other countries while delivering it.
Your rights
Depending on where you live, you may ask to see the personal data held about you, to have it corrected or deleted, to receive a copy, to object to or restrict its use, and to complain to your data protection authority. Ask the operator of this site through the Contact page, or the organisation that invited you for the records it keeps. We answer within one month.
Some data cannot be deleted while it must be kept: the audit trail, records under a legal hold, and records an organisation must keep by law, such as financial ones. Where that applies we tell you, and delete or anonymise the rest.
Children
BPT is a business service for adults acting for their organisations. It is not meant for children, and we do not knowingly collect their data.
Changes to this notice
When this notice changes, the date at the top changes with it. Significant changes are also told to the people who use BPT.