GDPR
Your data stays in the shop.
The app runs on a PC inside the shop and has no telemetry: by default, none of your customers' data leaves the shop. Only optional modules — including OficinaOS Cloud (Pro) — send data out, and each one is declared below.
Everything local by default
Customers, repairs, stock and till live on the shop's PC. With no Pro modules switched on, we receive no data from the shop.
The Cloud is optional
Pro modules, OficinaOS Cloud accounts and Diag log uploads use our servers. They are only used if the shop (or the customer, in the Diag) turns them on.
Declared extras
WhatsApp, remote access, AI and the Cloud are opt-in — documented item by item, ready for your records of processing (Art. 30).
When you switch an optional module on, this is what leaves:
- OficinaOS Cloud (Pro modules) OficinaOS servers — Account and pairing; each active module's data — portal pages (with the customer's name), incoming WhatsApp messages, storefront reservations, submitted diagnostics, daily totals (multi-shop) and shared prices. The shop's Meta token is stored encrypted on the Cloud to send WhatsApp on its behalf
- AI reports (Pro) The Cloud's AI provider — The diagnostic data and notes the report is generated from
- Diag log upload OficinaOS servers — Only when you press “Send log”: the tail of the diag.log file
- WhatsApp notifications & bot Meta, via the OficinaOS Cloud relay — Customer phone number + message text — they transit through the Cloud without being stored or logged (logs only carry id, status and masked phone)
- Remote access & customer links Cloudflare — The pages' traffic in transit
- AI analyst Whichever provider you configure — The questions you ask the AI
OficinaOS Cloud privacy policy See the full detail — including what never leaves — in the repository.