Who is responsible
The data controller for personal data processed in connection with JobBase is Krata Systems (CVR 46473507), Bogfinkevej 4, 3650 Ølstykke, Denmark.
For customer or employee data you upload into JobBase, you are typically the controller and Krata Systems processes that data on your instructions as a processor.
What we collect
Account data: name, email, authentication identifiers, organisation membership, and preferences (including language).
Business data you enter: company profile, customers, jobs, inventory, invoices, messages, attachments, and audit or activity logs generated by use of the service.
Technical data: device/browser information, IP address, and operational logs needed for security, support, and reliability (including via hosting and email providers).
The JobBase phone app
The JobBase app for iPhone and Android uses the phone's features only for the work you do in the app.
Camera: used to scan barcodes and QR labels and to take photos for jobs, checklists, receipts, and chat. A photo is only uploaded when you choose to save or send it.
Photos on your phone: the app only receives the pictures you pick yourself. It does not read the rest of your photo library.
Location: used only while the app is open, and only if you turn on sharing your position in the app. The app does not use your location in the background. You can turn sharing off at any time, and turning it off deletes your recent positions.
Notifications: if you allow notifications, the app registers a push token for your phone, linked to your account, so JobBase can tell you about things like new jobs and messages. You can turn notifications off in your phone's settings.
Data kept on the phone: so you can work without signal, the app keeps an offline copy of your upcoming work (such as jobs, stock, and item codes) and a queue of changes waiting to sync. This data is removed from the phone when you sign out.
Face ID and fingerprint sign-in: the check happens on your phone. The app only learns whether it succeeded and never receives your fingerprint or face data.
Service providers for the app: data is stored and synced through our database and authentication provider (Supabase). Notifications are delivered through the Expo push service and Apple's and Google's push services. On Android, maps are shown with Google Maps. App updates are downloaded from Expo's update service.
Why we process data and legal bases
We process data to provide and secure JobBase, authenticate users, communicate about the service, improve reliability, and comply with law.
Typical GDPR bases include contract (Art. 6(1)(b)), legitimate interests such as security and product improvement (Art. 6(1)(f)), and consent where required (Art. 6(1)(a)), for example for optional marketing if offered.
Sharing and subprocessors
We use trusted infrastructure providers to run JobBase, including hosting (e.g. Vercel), database and authentication (e.g. Supabase), and transactional email (e.g. Resend). These providers process data under contractual safeguards.
We do not sell personal data. We may disclose data when required by law or to protect rights, safety, and security.
Retention
We retain account and business data while your organisation uses JobBase and for a reasonable period afterward to support export, billing, disputes, and legal obligations.
Logs and security records may be kept for shorter or longer periods depending on operational and legal needs.
Your rights
Under GDPR you may have rights of access, rectification, erasure, restriction, portability, and objection, subject to conditions in law.
You may lodge a complaint with the Danish Data Protection Agency (Datatilsynet) at datatilsynet.dk.
Contact us using the details below to exercise rights relating to data Krata Systems controls as controller.
Deleting your account
You can ask to have your JobBase account and data deleted at any time. Employees can ask their company's owner or admin to remove them, and owners can delete the whole workspace in Settings. Our account deletion page explains each option, what is deleted, and what your company may have to keep.
International transfers
Some subprocessors may process data outside the EU/EEA (for example in the United States). Where required, we rely on appropriate safeguards such as Standard Contractual Clauses and supplementary measures.
Contact
Krata Systems, Bogfinkevej 4, 3650 Ølstykke, Denmark.
Phone: +45 40 89 00 44 (17:00–19:00, Europe/Copenhagen).
Email: support@jobbase.app.