Privacy
notice.
What this system stores about you, why, and for how long.
PG Service Plus+ processes only what it needs to sign you in, keep your
account secure, and record what was done in the system. It is an internal
tool for Papergraphics engineers — there is no advertising, no tracking
for marketing, and nothing is shared with third parties for their own
purposes.
What is stored
- Your email address, and the means of proving it is you: a password
hash (never the password itself), the public half of any
passkey you register, and your two-factor secret.
- Short-lived sign-in tokens for the QR code, stored hashed and expiring
within minutes.
- Security and audit logs — IP address and browser, plus a record of
sign-ins and significant actions — so a problem can be traced back.
- The work you record in the modules: job sheets, help desk tickets,
site surveys, car stock, mileage, expenses and the rest, along with
who created or changed them.
- What customers send in. A support call opened by email keeps the
message, the sender's name and address, and any photographs or
attached emails that came with it, on the ticket they relate to.
Cookies
One strictly necessary session cookie, which is what keeps you signed in
as you move between pages. Your theme and pinned modules are saved against
your account and mirrored into this browser's local storage so the page
does not flash the wrong colour while it loads. No advertising cookies are
used, here or anywhere in the system.
Biometrics
Face ID, Touch ID and fingerprint unlock never leave your device. What the
system stores is a public key your phone or laptop hands over when you
register a passkey — it can be used to check a signature, and for nothing
else. Your actual face or fingerprint is not transmitted and is not
something this system could hold even if it wanted to.
How long it is kept
QR sign-in tokens expire in minutes and should be purged regularly.
Password reset links last two hours and are marked used the moment they
are used. Job records and the audit trail are kept for as long as the
business needs them, which is generally the life of the service contract
they relate to.
Your rights
You can ask for a copy of what is held about you, ask for it to be
corrected, or ask for it to be deleted — subject to what has to be kept
for legal or contractual reasons, which for service records is usually the
limiting factor. Speak to an administrator to start any of that.
