Legal
Every privacy control in Graftix, where to find it, and exactly what it does. The practical companion to the privacy notice.
GRAFTIX gives you direct control over the personal data the platform captures. This page explains each privacy control, where to find it, and what it does.
When you upload a photograph taken on a GPS-enabled device, GRAFTIX can read the location coordinates embedded in the image's EXIF metadata and store them alongside the attachment so work can be geographically referenced on a plan. This toggle lets you opt out.
Where to find it: Profile Settings → Location on photos
Turning this off applies only to future uploads. Coordinates already stored against existing attachments are not removed automatically. To request removal of previously stored coordinates, contact support@graftix.io.
You can voluntarily share your current location inside an in-app conversation — either as a one-time static pin or a live-updating share that refreshes until it expires.
How to share: Open a conversation → tap the + attachment menu → Share location → choose Share once or a timed live share.
How to remove a static pin: tap and hold the location message you sent, then choose Delete message. The stored coordinate is removed immediately and is no longer visible to other participants.
Live shares: these expire automatically after the duration you selected. You can end a live share early by tapping the share card and choosing Stop sharing.
Location data in chat is only ever visible to participants in that specific conversation. It is never shared with your organisation's admins or used for any other purpose.
When you trigger an SOS alert, GRAFTIX captures your GPS coordinates and sends them to all admins and supervisors in your organisation so they can locate and assist you. This feature uses the location permission you have granted to GRAFTIX (or your browser) at the device or operating system level.
To prevent GRAFTIX from reading your location during an SOS:
Warning: revoking location permission means that if you trigger an SOS, no location will be captured or sent. Admins will receive the alert but will not know where you are. Only do this if you have considered the safety implications.
SOS location records are retained in the SOS Log for safety audit purposes. To request removal of a specific SOS location record, contact support@graftix.io.
Under your right to data portability (Article 20 UK GDPR), you can request a copy of the personal data GRAFTIX holds about you in a structured, machine-readable format.
How to request: email support@graftix.io with the subject line "Data export request" and include the email address associated with your GRAFTIX account.
We will respond within one calendar month. Your export will include the personal data processed on your behalf — account details, profile information, task contributions, and any stored location points associated with your account.
You have the right to request erasure of your personal data ("right to be forgotten") under Article 17 UK GDPR. You can delete your account directly from within GRAFTIX.
How to delete your account: go to your Profile page → Delete Account, and follow the on-screen steps. If you are unable to sign in, email support@graftix.io with the subject line "Account deletion request".
If your organisation's admin removes you from the organisation, your access is revoked immediately but your personal identifiers are not automatically erased. You must submit a separate deletion request if you wish your data to be removed.
For any privacy-related query not covered above, or to exercise any of your rights under UK GDPR, contact us at support@graftix.io. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at any time.
See also the full Privacy Notice, covering all personal data we process, our lawful bases, and your rights in detail.