How Workflow Pilot handles personal data, device enrolment and licensing information. Your approval and business data stays between your device and your own SAP system.
This Privacy Policy explains how Bluerise Techlead Software Solutions LLC ("we", "us") handles information in the Workflow Pilot mobile application (the "App") and the website at workflowpilot.app (the "Site"). Together the App and Site are the "Services". Workflow Pilot is an independent software product. It is not affiliated with, sponsored by, or endorsed by SAP SE. It connects to SAP® systems that you or your organisation own and control.
a. Your SAP sign-in credentials. To connect to your SAP system, you enter your SAP user name, password, and client number in the App. These are stored locally on your device using the platform's secure credential store (Apple Keychain on iOS, the Android Keystore on Android) and are sent only to the SAP system your organisation has configured, over an encrypted connection. We do not transmit, receive, or store your SAP credentials on our servers.
b. Business and approval data. When you use the App, it retrieves approval tasks (such as purchase order releases and leave requests, with their amounts, requesters and line items) live from your organisation's SAP system and displays them on your device. This data passes directly between your device and your SAP system. We do not collect, store, or have access to your approval or business data. Approval decisions you make are sent directly to your SAP system and recorded there.
c. Organisation activation & account details. If your organisation subscribes, we process limited business information needed to set up and manage the subscription — for example your organisation name, the connection settings your administrator provides, the activation code issued to you, and a non-identifying device identifier generated on the device for licensing (device-limit enforcement).
d. Enquiry & contact information. If you contact us (for example to request a demo or quote), we collect the information you provide, such as your name, business email address, company, and the contents of your message.
e. Device & diagnostic information. The App may process basic technical information (such as app version, operating system, and device platform) needed to run correctly and to provide support. The App does not currently include third-party analytics, advertising, or tracking SDKs.
f. Website information. Our Site uses only the cookies or storage strictly necessary for it to function. It does not use analytics, advertising, or tracking cookies.
To provide, operate, secure, and support the Services; to authenticate you to your organisation's SAP system (using credentials held only on your device); to set up and administer organisation subscriptions, activation, and device licensing; to respond to your enquiries, demos, and support requests; and to comply with legal obligations. We do not use your information for advertising, and we do not sell or rent personal information.
Where the EU or UK GDPR applies, we rely on: performance of a contract (to provide the Services you or your organisation requested); legitimate interests (to secure and support the Services); and consent where required.
Credentials never leave your device except to authenticate to your SAP system; they are held in the OS secure keystore. Connections between the App and your SAP system use HTTPS/TLS, with certificate validation enforced. Each person signs in with their own SAP account — the App does not use shared technical accounts, and approvals execute as the real named user. We apply appropriate organisational and technical measures to the limited information we do hold. No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard safeguards.
We do not sell your personal information. We share information only: with service providers / sub-processors who help us run the Services, under contract and only as needed (our current sub-processor is our backend and database provider, Supabase, used solely for organisation activation and licensing, and our website hosting provider); with your SAP system, which you or your organisation control (this is the core function of the App); where required by law, or to protect our rights, users, or the public; and in connection with a business transfer, subject to this policy.
The App is a tool for acting on data that lives in your organisation's SAP system. For that approval and business data, your organisation is the data controller and is responsible for how it is used; we act only as a provider of software that displays and acts on that data at your direction.
Because approval and business data is not stored by us, there is nothing for us to retain on that front. Subscription, activation and enquiry data is retained only as long as needed for the purposes above or as required by law.
The Services are business tools not directed to children and are not intended for anyone under 16.
Subject to applicable law, you may request access to, correction of, or deletion of the limited personal information we hold about you, and may object to or restrict certain processing. Contact us using the details below.
We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.
Bluerise Techlead Software Solutions LLC
Email: support@workflowpilot.app