Privacy Policy

This Privacy Policy describes how PS Laser ("we," "us," "our") collects, uses, and protects information through the PS Laser mobile application (the "App"), an internal operations tool used by PS Laser staff to manage manufacturing orders, clients, and production workflow. The App is used by authorized PS Laser personnel — it is not a consumer-facing product, and account creation is not open to the general public.

1. Information We Collect

Personnel (staff) accounts

To operate the App, we collect information about employees who use it:

• Name, assigned role, department, and shift
• A PIN used to sign in — this is never stored in plain, readable form. It is transformed with a one-way cryptographic hash (scrypt) before storage, so PS Laser itself cannot see or recover a staff member's actual PIN.
• An optional security question used for PIN recovery — the question text is stored, but the answer is hashed the same way the PIN is, and is never stored or transmitted in readable form.

Client and order information

Staff use the App to record information about PS Laser's business clients and the orders placed with us. This includes:

• Client company name, contact person, phone number, email, business address, and GST number
• Order details: description, material, quantity, priority, status, due dates, delivery address and delivery notes, and internal production notes
• Any files or documents a staff member chooses to attach to an order (e.g. a reference drawing)

Device and notification data

• A push-notification token tied to the device, so the App can deliver alerts (e.g. delivery reminders, order updates) directly to a staff member's phone
• Basic platform information (Android, iOS, or web) needed to format that notification correctly

Camera

The App requests camera access solely to scan QR codes on inventory items and machines for quick lookup. The camera is only active while a staff member is actively scanning; no photos are captured or stored — only the decoded QR code content is used.

Microphone and AI features

The App requests microphone access for its voice-order feature, which lets staff dictate an order instead of typing it. Voice input is converted to text and, along with any text-based questions asked of the in-app AI assistant, is processed through OpenRouter, a third-party AI service, to interpret the request and return a response. We do not use this data to build advertising profiles, and it is not sold to any third party.

2. How We Use This Information

• To authenticate staff and control access based on their assigned role
• To create, track, and manage manufacturing orders and client records
• To send push notifications for alerts, order updates, and delivery reminders
• To power the in-app AI assistant and voice-order features
• To maintain a security audit log of sign-ins, PIN resets, and account changes, for fraud and abuse prevention

3. Who We Share Information With

We do not sell personal information, and we do not use it for advertising. Information is shared only with the infrastructure providers that operate the App:

Provider	Purpose
Google Firebase	Database (Cloud Firestore), authentication, and crash reporting
Cloudflare	Backend server logic and push-notification delivery
OpenRouter	Processes AI assistant and voice-order requests (see above)

We may also disclose information where required by law, or to protect the rights, property, or safety of PS Laser, our staff, or others.

4. Data Security

• PINs and security-question answers are stored only as one-way cryptographic hashes, isolated in a restricted part of the database that ordinary app access cannot read.
• Access to client, order, and personnel data is governed by server-enforced security rules based on each staff member's assigned role.
• All communication between the App and our servers is encrypted in transit (HTTPS).
• Repeated failed sign-in attempts are automatically rate-limited to slow down guessing attacks.

5. Data Retention

We retain personnel, client, and order records for as long as an account or business relationship is active, and afterward for as long as reasonably necessary for business record-keeping and legal compliance (for example, records connected to GST invoicing). Push-notification tokens are removed automatically when a staff member signs out.

6. Your Rights

Staff members may request access to, correction of, or deletion of their personal information held in the App by contacting an administrator or using the contact details below. An administrator can deactivate or remove a staff account directly within the App's User Management screen.

7. Children's Privacy

The App is an internal business tool for PS Laser staff and is not directed at, or intended for use by, children.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the App or in applicable law. The "Last updated" date at the top of this page will reflect the most recent revision.

9. Contact Us