Trust & Data Pack

What we store: work orders and routings, job activity and timers, quality inspections and rework, inventory and stock movements, purchasing, customers and suppliers, maintenance and equipment, barcodes, documents and uploaded files such as drawings, cutlists and inspection photos, and training records.

People records: name, contact details, role, departments, certifications and production activity. A pay rate field exists so jobs can be costed. We do not collect banking details, tax or government IDs, payroll data, or health information.

We do not sell your data, use it for advertising, or mine one customer’s data to build features for another.

Our team can reach app data through the platform's administration layer when we are supporting or maintaining your workspace. That access is limited to the people working on your app and is not used for anything else.

Deleted records go to the trash and are permanently removed after 30 days.

Everyone signs in with their own account, using an email and password or a linked Google or Microsoft sign-in.

Roles: Owner and Admin hold full access including billing and setup. Manager covers scheduling, staffing and analytics across every line. Lead covers their line or shift, including assignments and quality checks. Operator works from the kiosk with their own queue and jobs. Maintenance covers equipment, planned maintenance and work orders.

Record-level rules are declared on each data table and enforced by the data layer, so a browser cannot reach records the rules do not allow, including a signed-in user in the same company but a different shop.

On the shop floor, a station can require a PIN to leave the kiosk, and an operator only sees jobs for the departments and processes they are cleared for.

Removing someone is immediate: deactivate the employee or revoke the user and their sign-in no longer reaches your records. Invited users stay pending until you approve them.

Activity is recorded on the job itself: who ran it, when they started and finished, how long it took, and any help, pauses or rework. Change history also exists for work orders, inventory, quality checks and material movements.

Checkout is hosted by Base44 Payments, built on Wix Payments. Card details are entered there and never stored in ShopFloorOS.

Access is granted when a payment is approved, and removed when a subscription is cancelled or a trial ends. There is no version of the app where a cancelled plan keeps working.

Plans are monthly or annual, priced per shop workspace. Cancel any time: no cancellation fee and no notice period.

Your account shows what you bought: plan or module, amount, date and status.

Ask us for a copy of any invoice or receipt you need.

ShopFloorOS is a hosted web application running on Base44’s managed infrastructure and delivered over HTTPS to a current browser such as Chrome, Edge or Safari.

It installs on phones and tablets from the browser (add to home screen) and runs full-screen on shop TVs, kiosks and touch screens.

The optional local report runner is the only thing that ever runs on a shop PC. You generate its key for each report source and can rotate or remove it at any time. It reads your report and pushes it out; it never opens a path back into your network.

The app runs on Base44’s managed infrastructure. Neither ShopFloorOS nor Base44 offers a contractual uptime SLA today, and platform incidents are published on Base44’s public status page (status.base44.com). We monitor the app and fix problems as they come up. If your contract needs an uptime commitment, tell us and we will work out exactly what we can stand behind.

If your internet drops, the optional offline MES Express module runs the floor in a single file in the browser and syncs back when you are online again.

In the app: work orders and the operations report export to CSV or PDF, reports publish to Google Sheets, job packets and barcodes print, and workflows, processes and departments export for reuse in another shop.

On exit: tell us in writing and we hand over a complete copy of your workspace as spreadsheets, covering jobs and job history, employees, inventory, purchasing, customers and suppliers, quality and maintenance records. No fee, no negotiation, and it is a hand-over we run for you rather than a button you have to hunt for.

We then delete your shop’s records on that same written request and confirm in writing when it is done. Allow up to 30 days.

Deleted records sit in the platform’s trash for 30 days first, so a mistake can be undone rather than lost.

Nothing about your access to your own data depends on staying a customer.

“Prove Shop A cannot see Shop B.” We will show you live, in two workspaces, on a call.

“Show me what happens when I remove a user.” We will do it in your trial workspace while you watch.

“What does cancelling do?” We will show you exactly how access changes the moment a plan ends.

“What data leaves the app?” Only what a specific feature needs, for example a report page you have asked us to read, or a part description used to auto-generate a picture. We can list every place that happens.

“Do you hold security certifications?” Not today: no SOC 2 and no ISO 27001. If your contract requires one, tell us and we will talk about what is realistic and what we can document instead.

“Can we pilot with non-sensitive data?” Yes. Most pilots run on sample or non-sensitive orders first, then load production data once you are satisfied.