OpHUBPrivacy Policy
Last updated: 21 August 2026
OpHUB is a site-management app for trade and specialist contractors, provided by RTB Roofing Ltd ("OpHUB", "we", "us"). This policy explains what information we collect through the OpHUB app and website, why we collect it, and how it's kept safe — for both the companies who subscribe to OpHUB ("customers") and the individual staff who use it day to day ("operatives", "project managers", "admins").
In short: we collect the account and site information needed to run your company's day-to-day operations — schedules, snagging, materials, drawings, messages, and GPS check-in/out logs — and we don't sell any of it, or use it for advertising.
1. Information we collect
Account information
- Name, email address, and role (operative, project manager, admin) when you're invited to join a company on OpHUB.
- Login credentials, handled securely by our authentication provider (Supabase Auth) — we never see or store your password in plain text.
Site and job data
- Sites, schedules of work, and task statuses your company creates.
- Health & Safety documents (RAMS), toolbox talk records, and signatures collected for sign-off.
- Snagging and variation records, including any photos attached to them.
- Site inspection reports completed from your company's report templates (e.g. pre-start, progress, and handover inspections), including any photos and signatures attached to them, and PDF copies emailed by project managers or admins.
- Material requests and the supplier details your project managers add.
- Drawings and other files uploaded to a site's Drawings library.
- Messages sent between team members within a site.
Location data
When you check in or check out of a site (on plans that include GPS check-in), we record your device's GPS coordinates at that moment, together with the timestamp. This is used only to confirm attendance at the site and, where a geofence is set, to check you're within range. We do not track your location at any other time, and we do not track location in the background.
Photos
Photos you upload — for schedule progress/completion, snags, variations, or drawings — are stored securely and are only visible to members of your own company. If your company connects OneDrive, copies of these photos are also synced to the OneDrive folder your admin selects.
Device information
We generate a random device identifier stored locally on your phone (not tied to your phone's hardware ID) to support the "one phone, one operative" device-lock feature some companies enable. We also collect basic technical information needed to keep the app working reliably, such as push notification tokens (if you enable notifications).
Payment information
Subscription payments are handled entirely by Stripe. We never see or store your card details — Stripe processes and stores that information under its own privacy policy.
2. How we use this information
- To provide the core features of OpHUB — schedules, check-ins, snagging, materials, drawings, and messaging — to your company.
- To let project managers and admins oversee site activity, staff attendance, and compliance records.
- To send transactional emails, such as team invites and material order emails.
- To process subscription payments and manage your company's plan.
- To keep the service secure and troubleshoot problems.
We do not use your data for advertising, and we do not sell personal data to third parties.
3. Who we share information with
We use a small number of trusted service providers to run OpHUB. Each only receives the data it needs to perform its specific job:
| Provider | What they do |
|---|---|
| Supabase | Hosts our database, file storage, authentication, and backend logic (EU-based hosting). |
| Vercel | Hosts the OpHUB website and app. |
| Stripe | Processes subscription payments. |
| Resend | Delivers transactional emails (invites, material orders). |
| Microsoft OneDrive | Optional — only if your company connects it, to sync photos/reports to your own OneDrive. |
We do not share your data with any other third parties except where required by law, or with your consent.
4. Data retention
We keep your company's data for as long as your subscription is active, so records like schedules, RAMS sign-offs, and snagging history remain available. If a subscription ends, data is retained for a reasonable period in case of reactivation, and can be deleted on request — see Section 6.
5. Data security
Data is encrypted in transit (HTTPS/TLS) and access to your company's data is restricted to members of that company through row-level security controls, so one company can never see another's data. Staff accounts are invite-only — there is no public sign-up.
6. Your rights
If you're based in the UK or EU, you have rights under UK GDPR / the EU GDPR, including the right to access, correct, or request deletion of your personal data, and to object to certain processing. To exercise any of these rights, contact your company's OpHUB admin (who controls your account) or email us directly at the address below.
7. Children
OpHUB is a workplace tool intended for use by employees and contractors aged 18 and over. We do not knowingly collect data from children.
8. Changes to this policy
We may update this policy from time to time as OpHUB's features change. We'll update the "Last updated" date above when we do. Continued use of OpHUB after a change means you accept the updated policy.
9. Contact us
Questions about this policy or your data can be sent to sales@operativehub.co.uk, or your company's OpHUB admin.