Privacy Policy

Last updated: 1 July 2026

This Privacy Policy explains how OFO Tech Sdn Bhd (“OFO Tech”, “we”, “us”, or “our”), the operator of i-Supervision, collects, uses, shares, and protects information when you use the i-Supervision construction site monitoring platform, including our website, web application, and mobile application (together, the “Service”).

i-Supervision is a business-to-business platform. Access requires an account issued by the organization (such as your employer, project owner, or contractor) that has subscribed to the Service. If you have questions about how your organization uses the Service, please contact your organization’s administrator.

1. Information We Collect

Information you provide

• Account information — your name, email address, password (stored in encrypted/hashed form), assigned role, and the organization, districts, zones, or sites you are granted access to.
• Content you submit — inspection records, quality and defect reports, notes, comments, and photos or other files you upload, together with the site or project they relate to.
• Communications — information you provide when you contact us for support or enquiries.

Information collected automatically

• Device and technical information — device model, operating system version, app version, and similar identifiers used to operate and secure the Service.
• Log and usage information — IP address, access times, and actions taken within the Service, used for security, troubleshooting, and improving the Service.
• Push notification token — a device token (via Firebase Cloud Messaging) used to deliver notifications to your device. You can disable notifications at any time in your device or app settings.

Location information

With your permission, the mobile app may access your device’s location to support geospatial features (for example, centering maps and 3D views, and relating field activity to a site). Photos you capture or upload may also contain embedded location (GPS) metadata, which the Service may read to position imagery on the map. You can control location access through your device permissions.

Camera and photos

With your permission, the app uses your camera and photo library so you can capture and upload images for inspections and defect reporting. We process these images, and any embedded metadata, to provide the monitoring and reporting features of the Service.

2. Mobile App Permissions

The mobile app requests the following permissions. Each is used only for the stated purpose, and most are optional — the app asks at the point the feature is used.

3. How We Use Information

• Provide, operate, and maintain the Service and its features (maps, 3D and BIM views, live CCTV and drone streams, inspections, and reporting).
• Authenticate you and enforce role-based access so you only see information you are authorized to access.
• Send operational notifications about site events and activity relevant to your role.
• Secure the Service, prevent misuse, troubleshoot issues, and maintain reliability.
• Comply with applicable legal obligations and enforce our agreements.

We do not sell your personal information, and we do not use it for advertising.

4. How We Share Information

• Within your organization — content and activity are visible to other authorized users of your organization according to the permissions configured by your administrator.
• Service providers — we use trusted third parties that process data on our behalf to run the Service, including cloud hosting and storage (Amazon Web Services), push-notification delivery (Google Firebase Cloud Messaging), and mapping and 3D tile providers (such as Cesium ion, Stadia Maps, and Esri). Where the Service integrates drone hardware and live streaming, related data may be processed through the relevant provider (such as DJI) to deliver those features.
• Legal and safety — we may disclose information where required by law, to comply with legal process, or to protect the rights, property, or safety of users, the public, or i-Supervision.

5. Data Storage and Security

The Service is hosted on Amazon Web Services infrastructure (Asia Pacific / Singapore region). We apply technical and organizational measures appropriate to the nature of the data, including:

• Encryption of data in transit using HTTPS/TLS.
• Passwords stored using one-way hashing.
• Private file storage accessed through time-limited, signed links.
• Role-based access controls that limit access to authorized users.

No method of transmission or storage is completely secure, but we work to protect your information and continuously improve our safeguards.

6. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Service, and thereafter as required to meet legal, regulatory, contractual, or legitimate business obligations. When information is no longer needed, we delete or anonymize it. Your organization may also set its own retention requirements for content stored in the Service.

7. Your Rights

Subject to applicable law, you may request to access, correct, update, or delete your personal information, or withdraw consent for certain processing. Because your account is administered by your organization, the fastest route is usually to contact your organization’s administrator. You may also contact us using the details below, and we will respond in accordance with applicable data protection law, including the Malaysian Personal Data Protection Act 2010 (PDPA) where it applies.

8. Children’s Privacy

The Service is intended for business use by professionals and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

9. International Users and Governing Law

The Service is operated from, and data is processed in, the locations described above. By using the Service you understand that your information may be processed in those locations. This Privacy Policy is governed by the laws of Malaysia.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after an update means you accept the revised policy.

11. Contact Us

If you have questions or requests regarding this Privacy Policy or your personal information, contact us at: