0. Who we are
Salesman Tracker is a field-sales CRM operated by Kedaya Tech LLP, Rajkot, Gujarat, India ("Salesman Tracker", "we", "us"). This policy explains what personal data we handle, why, how we protect it, and your rights. Contact: legal@salesmantracker.com.
1. Our roles — controller and processor
We are the data controller for the data used to run your account and our business — owner/user names, emails, WhatsApp numbers, billing details and product/website usage. We are a data processor for the business data a customer workspace (the "tenant") records about its own leads, customers and employees; the tenant is the controller of that data and we process it only on the tenant's instructions under our Data Processing Agreement.
2. Data we collect
Account data (name, email, WhatsApp number, hashed password, role, employee code); billing data (plan, seats, invoices, payment-gateway reference — we do not store card numbers); tenant business data (leads, customers, orders, payments, products, notes, call logs); location (salesman GPS at check-in/out and on customer visits, and the live team map during working sessions); media (in-app visit photos, product images, catalog PDFs); and technical data (app version, device model, IP, push token, diagnostic logs). The service is for business use only; we do not knowingly collect data from anyone under 18.
3. How and why we use data
Solely to provide and run the service: routing and navigation, visit verification, order and quotation generation, commission calculation, billing, security and the WhatsApp/email notifications you trigger (OTP, order shares, payment alerts). Legal bases include performance of our contract with you, your or your employer's consent (for location and marketing), our legitimate interests (security, diagnostics), and legal obligations (tax, billing). We never sell personal data, never show third-party ads, and never use tenant business data to train AI models or share it across tenants.
4. Location and employee monitoring
Location is used three ways: at daily check-in/out, when recording a customer visit (to GPS-stamp it), and to show the live team map to the owner and the salesman's manager during an active working session only. It is not captured outside field sessions. Where an employer (tenant) enables location, obtaining any employee consent required by local employment law is the tenant's responsibility; we show in-app notices whenever a session is active, salesmen can turn location off on their device at any time, and owners cannot start tracking remotely.
5. Sharing and sub-processors
We share the minimum data needed with vetted providers bound by data-protection terms: payment gateways (Razorpay, Cashfree, Stripe, PayPal) for billing; the WhatsApp Business API (Meta) for messages you trigger; Google Maps for routing and geocoding; our cloud hosting and object storage; Firebase Cloud Messaging for push; and our email provider. A current list is maintained on our Sub-processors page. We also disclose data where legally required, and to a successor in a merger or acquisition (with notice).
6. Security and international transfers
Data is transmitted over TLS, passwords are stored hashed, access within our team is role-restricted and administrative actions are audit-logged, and media/PDFs are served via signed, expiring URLs. Data is hosted on secure servers currently located in India; if you are outside India your data may be transferred to and stored in India, and where required such transfers rely on an approved safeguard (standard contractual clauses, adequacy or your consent).
7. Retention
Account and tenant business data are retained while your account/workspace is active and for 30 days after closure or cancellation, then permanently deleted (owners can export or delete sooner from Settings). Raw location points are kept only as long as needed to provide the feature and are then deleted. Invoices and tax records are retained for the period required by applicable tax law.
8. Your rights
Subject to your local law you may access, correct, export (portability), delete, restrict or object to processing, and withdraw consent. Email legal@salesmantracker.com from your registered email and we will respond within the period your law requires. You may also complain to your supervisory authority — the Data Protection Board of India (DPDP Act 2023), your EU/UK data protection authority or the ICO (GDPR), the OPC in Canada (PIPEDA), the OAIC in Australia (Privacy Act), or the UAE Data Office (PDPL).
9. US state privacy (CCPA/CPRA)
We do not "sell" or "share" personal information as defined under California law. California residents may exercise the rights to know, delete and correct, and to opt out, without discrimination. To make a "Do Not Sell or Share My Personal Information" or other request, contact legal@salesmantracker.com.
10. Automated decisions and breach notice
We do not use solely-automated decision-making that produces legal or similarly significant effects about you. If a personal-data breach is likely to create a risk to you, we will notify the relevant authority and affected users without undue delay, as required by applicable law.
11. Changes and contact
We may update this policy; material changes will be notified in-app or by email and the version and effective date will change. Questions or requests: legal@salesmantracker.com. Grievance/Data-protection officer: reachable at legal@salesmantracker.com. Kedaya Tech LLP, Rajkot, Gujarat, India · WhatsApp +91 97259 25909.