Privacy Policy

1. Information We Collect

1.1 Personal Information

When you register for and use our app, we collect the following personal information:

• Account Information

  Name, email address, password, department/role, contact number, country, city, and designation

• Profile Information

  User status, language preferences, and related salesperson information

• Authentication Data

  Email verification tokens, password reset tokens, and JWT authentication tokens

1.2 Business and Order Information

For business operations, we collect:

• Order Details

  Order dates, due dates, company information, order status, and approval workflow data

• Location Data

  Source and destination addresses with precise GPS coordinates for deliveries and field visits. We collect both fine location (exact coordinates) and coarse location (approximate area) data.

• Order Items

  Product specifications, quantities, prices, and related business documents

• Payment Information

  Payment records and transaction details (financial data is handled securely)

• Digital Signatures

  Electronic signatures and attachment images for order confirmations

1.3 Communication Data

• Inquiries

  Business inquiries, notes, attachments, and correspondence

• Chat Messages

  In-app messaging and conversation history

• Customer Feedback

  Reviews, ratings, and feedback on orders and services

• Complaints

  Order complaints, resolutions, and related documentation

1.4 Technical Information

• Device Information

  Firebase Cloud Messaging (FCM) tokens for push notifications

• App Usage Data

  Activity logs, user interactions, and app performance data

• Location Data

  Precise GPS coordinates (fine location) and approximate location (coarse location) for field visits, deliveries, route tracking, and location-based business services. Background location access is used to track delivery routes and field visit progress even when the app is not actively in use.

• File Downloads

  CSV exports and PDF documents generated within the app

1.5 Location Permissions and Usage

Our app requests the following location permissions for specific business purposes:

• Fine Location (ACCESS_FINE_LOCATION)

  We collect precise GPS coordinates to accurately track field visit locations, delivery addresses, and route optimization for our business operations.

• Coarse Location (ACCESS_COARSE_LOCATION)

  We use approximate location data for general area identification and to provide location-based services when precise coordinates are not required.

• Background Location (ACCESS_BACKGROUND_LOCATION)

  We access location data in the background to continuously track delivery routes, monitor field visit progress, and ensure accurate business operations even when the app is not actively displayed on screen. This is essential for real-time order tracking and field service management.

Why we need these permissions:

• Track real-time delivery progress and routes
• Monitor field visit locations and completion status
• Provide accurate ETAs for deliveries and service calls
• Generate location-based reports and analytics
• Ensure driver and field staff safety through location monitoring
• Optimize routes for efficiency and cost reduction

You can control location permissions through your device settings. However, disabling location access may limit certain app functionalities related to deliveries and field services.

2. How We Use Your Information

2.1 Primary Business Functions

• Process and manage orders, inquiries, and business transactions
• Facilitate communication between customers, sales representatives, and internal teams
• Manage user accounts, authentication, and access control
• Track order status, deliveries, and field visit activities
• Generate business reports and analytics

2.2 Communication and Notifications

• Send push notifications about order updates, messages, and important announcements
• Provide email notifications for account verification, password resets, and business updates
• Enable real-time chat functionality between users

2.3 Service Improvement

• Analyze app usage to improve functionality and user experience
• Troubleshoot technical issues and provide customer support
• Maintain security and prevent unauthorized access

3. Information Sharing and Disclosure

3.1 Internal Sharing

Your information may be shared internally within Mid East Metal for:

• Order processing and fulfillment
• Customer service and support
• Business operations and management
• Sales and relationship management

3.2 Third-Party Services

We use the following third-party services that may process your data:

• Firebase (Google)

  For push notifications and app analytics

• Cloud Storage Services

  For secure document and image storage

• Email Services

  For sending notifications and communications

3.3 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or to protect our rights and safety.

4. Data Security

4.1 Security Measures

• Passwords are encrypted using industry-standard bcrypt hashing
• Secure JWT token-based authentication
• HTTPS encryption for all data transmission
• Regular security audits and updates
• Access controls and permission-based data access

4.2 Data Storage

Your data is stored on secure servers with appropriate physical and technical safeguards. We implement regular backups and disaster recovery procedures to protect against data loss.

5. Your Rights and Choices

5.1 Account Management

• Update your profile information through the app settings
• Change your password and email preferences
• Request account deactivation or deletion

5.2 Communication Preferences

• Manage push notification settings in your device settings
• Opt out of non-essential email communications
• Control location sharing permissions

5.3 Data Access and Portability

• Request a copy of your personal data
• Export your order history and business data
• Request correction of inaccurate information

6. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Specifically:

• Account Information

  Retained while your account is active and for 7 years after closure for business records

• Order Data

  Retained for 7 years for business and tax compliance purposes

• Communication Data

  Retained for 3 years or as required for business purposes

• Technical Logs

  Retained for 1 year for security and troubleshooting purposes

7. Children's Privacy

Our app is designed for business use and is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

8. International Data Transfers

Your information may be processed and stored in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with applicable privacy laws.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy in the app
• Sending push notifications about significant changes
• Updating the 'Last Updated' date at the top of this policy

Your continued use of the app after any changes constitutes acceptance of the updated Privacy Policy.

10. Contact Information

Data Protection Officer / Privacy Contact

For Privacy-Related Inquiries:

• Data access requests
• Data correction or deletion requests
• Privacy concerns or complaints
• Questions about this Privacy Policy

Response Time: We will respond to your privacy-related inquiries within 30 days of receipt.

11. Governing Law

This Privacy Policy is governed by the laws of the jurisdiction where Mid East Metal operates. Any disputes related to this policy will be resolved in accordance with applicable local laws and regulations.