Who this covers
This policy explains how EXEOHUB LTD, a company registered in England and Wales (company number 17482655) with its registered office at SIU Offices, 4 - 6 Greatorex Street, London, E1 5NF, United Kingdom ("Exeo", "we") handles personal data when you use the Exeo web dashboard, the workforce mobile app, and this website. It applies to workspace owners, invited team members, and visitors.
For account and website data, Exeo is the data controller. You can reach us about anything in this policy at support@exeocrm.com.
Client records your company stores in Exeo (names, addresses, phone numbers of your customers) are processed on your behalf: your company is the controller of that data and Exeo is the processor.
Data we collect
We collect only what the product needs to work:
- Account data: name, email, phone, role, and password hash for each team member.
- Workspace data: clients, sites, jobs, visits, quotes, invoices, payments, messages, photos, and signatures your team creates.
- Usage data: pages viewed, features used, and device/browser information, used in aggregate to improve the product.
- Support data: messages you send us and the context needed to answer them.
How we use it
We use data to run the service (schedules, invoices, notifications), to secure it (authentication, abuse prevention), to support you, and to improve the product. We do not sell personal data, and we do not use your workspace content for advertising.
Legal bases
Where the UK GDPR or EU GDPR applies, we process data to perform our contract with you (running the service), for legitimate interests (security, product analytics), to meet legal obligations (tax and accounting records), and with consent where required (marketing emails, which you can withdraw anytime).
Retention & deletion
Workspace data is retained while your subscription is active. If you cancel, data is retained for 60 days so you can export or reactivate, then permanently deleted. Backups roll off within a further 30 days. Invoices we issued to you are kept as long as tax law requires.
Security
All traffic is encrypted in transit (TLS 1.2+) and data is encrypted at rest. Access to production systems is limited to a small on-call group, protected by hardware keys, and logged. Passwords are stored only as salted hashes.
Your rights
Depending on where you live, you can ask us to:
- Access or export a copy of your personal data.
- Correct inaccurate data or complete incomplete data.
- Delete your data ("right to be forgotten").
- Restrict or object to certain processing.
- Complain to your local data-protection authority. In the UK, that is the Information Commissioner's Office (ico.org.uk).
Changes to this policy
If we make material changes we will notify workspace owners by email at least 14 days before they take effect and update the date at the top of this page.