Legal

Privacy Policy

Last updated: 17 July 2026

1. Who we are

Ocube ("Ocube", "we", "us") is a UK-based construction operations platform. This page tells you how we handle personal data when you use our website and app. Ocube is the controller of your personal data for the purposes of the UK GDPR.

You can reach us by email at privacy@ocube.app.

2. What we collect

  • Account data — name, email, role, organisation.
  • Operational data you enter — projects, tasks, resources, budgets, site reports, photos, and compliance documents.
  • Technical data — IP address, device/browser type, log data required to keep the service secure and reliable.
  • Communications — messages you send us via the contact form or support email.

3. How we use your data

  • To provide and operate the Ocube platform (contract).
  • To keep the service secure and prevent abuse (legitimate interests).
  • To comply with our legal obligations (legal obligation).
  • To send service updates, and — only with your consent — marketing emails.

4. Legal bases (UK GDPR)

We rely on contract to deliver the platform, legitimate interests for security and product improvement, legal obligation for tax and records, and consent for optional analytics, marketing cookies and marketing emails.

5. Sharing your data

We share data only with the processors needed to run Ocube:

  • Cloud hosting and database (UK/EEA region).
  • Email delivery for transactional messages.
  • Optional integrations you enable (e.g. Xero, QuickBooks, Sage, SharePoint, Google Drive, Dropbox).

We do not sell your personal data.

6. International transfers

Your data is primarily stored in the UK/EEA. Where a processor is outside the UK/EEA, we rely on adequacy decisions or the UK International Data Transfer Addendum with the EU Standard Contractual Clauses.

7. How long we keep it

We keep account and operational data for as long as your organisation has an active Ocube subscription, plus a reasonable retention period afterwards for backups, disputes and legal obligations. You can request deletion at any time.

8. Your rights

Under UK GDPR you have the right to:

To exercise any right, email privacy@ocube.app.

9. Security

We use encryption in transit, role-based access controls, row-level security in our database, and audit logging for privileged actions. No system is perfectly secure — please choose a strong password and enable multi-factor authentication when it is offered.

10. Cookies

See our Cookie Policy for details on the cookies we use and how to manage your preferences.

11. Changes to this policy

We may update this policy from time to time. Material changes will be highlighted in the app and by email where appropriate.