Privacy Policy
Last updated: 17 July 2026
1. Who we are
Ocube ("Ocube", "we", "us") is a UK-based construction operations platform. This page tells you how we handle personal data when you use our website and app. Ocube is the controller of your personal data for the purposes of the UK GDPR.
You can reach us by email at privacy@ocube.app.
2. What we collect
- Account data — name, email, role, organisation.
- Operational data you enter — projects, tasks, resources, budgets, site reports, photos, and compliance documents.
- Technical data — IP address, device/browser type, log data required to keep the service secure and reliable.
- Communications — messages you send us via the contact form or support email.
3. How we use your data
- To provide and operate the Ocube platform (contract).
- To keep the service secure and prevent abuse (legitimate interests).
- To comply with our legal obligations (legal obligation).
- To send service updates, and — only with your consent — marketing emails.
4. Legal bases (UK GDPR)
We rely on contract to deliver the platform, legitimate interests for security and product improvement, legal obligation for tax and records, and consent for optional analytics, marketing cookies and marketing emails.
5. Sharing your data
We share data only with the processors needed to run Ocube:
- Cloud hosting and database (UK/EEA region).
- Email delivery for transactional messages.
- Optional integrations you enable (e.g. Xero, QuickBooks, Sage, SharePoint, Google Drive, Dropbox).
We do not sell your personal data.
6. International transfers
Your data is primarily stored in the UK/EEA. Where a processor is outside the UK/EEA, we rely on adequacy decisions or the UK International Data Transfer Addendum with the EU Standard Contractual Clauses.
7. How long we keep it
We keep account and operational data for as long as your organisation has an active Ocube subscription, plus a reasonable retention period afterwards for backups, disputes and legal obligations. You can request deletion at any time.
8. Your rights
Under UK GDPR you have the right to:
- Access, correct, or delete your personal data.
- Restrict or object to processing.
- Data portability.
- Withdraw consent at any time.
- Complain to the Information Commissioner's Office (ICO).
To exercise any right, email privacy@ocube.app.
9. Security
We use encryption in transit, role-based access controls, row-level security in our database, and audit logging for privileged actions. No system is perfectly secure — please choose a strong password and enable multi-factor authentication when it is offered.
10. Cookies
See our Cookie Policy for details on the cookies we use and how to manage your preferences.
11. Changes to this policy
We may update this policy from time to time. Material changes will be highlighted in the app and by email where appropriate.