Privacy

What the app is for

Staff sign in so they can see customers, quotes, jobs, inbox items, a venue desk or till, and (if switched on) the LeadRadar call sheet. Sample records on the device are fictional and never leave the phone.

What we collect

The app itself does not run a BizInABox user database. Sign-in tokens stay in this device's Keychain. Notes, inbox chips and site photos stay in this device's Application Support folder unless you save a note that the connected CRM accepts.

When you connect EspoCRM, BookMyVenue or the office API, those systems already hold the customer names, emails, phone numbers, bookings and notes you see. The app reads them to show your day, and can post a note or a booking change that you ask it to post. It does not dump your whole client list on launch. Search needs two characters.

EspoCRM is the server your business chose. What the app reads from EspoCRM and posts to it goes only to that server. The app does not send it anywhere else.

BookMyVenue is run by us. When staff use the BookMyVenue desk, the app sends BookMyVenue what they enter or change there: guest and client names, email addresses and phone numbers; booking, client and job notes; clinic treatment (SOAP) notes and intake status; till tickets and payments; staff clock-in, clock-out and timesheet approvals; and the staff account it belongs to. BookMyVenue keeps these records for the venue.

The call sheet is off by default. If you switch it on, the app signs in to the office API address on the sign-in screen (by default os.justangus.net, run by us) with the same username and password as EspoCRM, and reads the call-sheet list from it. The office API does not offer the call sheet yet, so the app shows it as not available.

Photos

Camera and photo-library access are only for attaching a site photo to a job on this device. Those files are not uploaded to a BizInABox server. They do not leave the device unless you later choose to share them yourself.

Tracking

The iOS app does not track you across other companies' apps or websites. It does not use the App Tracking Transparency prompt because it does not track.

Who else sees it

Your EspoCRM host sees the traffic you send it, under whatever agreement you already have with it. BookMyVenue and the office API are run by us, as described above. We do not sell any of this data. Email send, SMS, Xero and advertising are not connected in this version of the app.

How long it stays

Sign out to drop the Keychain session. Deleting the app removes the on-device notes, photos and local till cache. Records that already live in your CRM stay there until you change them in that CRM. Records in BookMyVenue stay with the venue's account until the venue changes or removes them. To ask us to remove BookMyVenue records, contact us below.

Ask us

Questions about this app: the contact form or 02 8355 5455. That is also the App Store support path.