SuvaCorp SFA

SuvaCorp ("we", "our", or "us") operates the SuvaCorp SFA mobile application (the "App") — a Sales Force Automation platform designed for field sales teams and their managers. This Privacy Policy explains how we collect, use, store, and protect your information when you use our App.

By using the App you agree to the practices described in this policy. If you do not agree, please discontinue use of the App.

Account & Identity Information

• •Name, email address, phone number, and profile photo
• •Employee ID and organisational role (sales representative, manager, admin)
• •Login credentials (passwords are hashed and never stored in plain text)

Location Data

• •Foreground location — precise GPS coordinates recorded when you actively use the App (e.g. while logging a visit or checking in).
• •Background location — continuous GPS coordinates collected throughout your active work shift, even when the App is minimised or the screen is off. This is the core mechanism that powers Live Location Tracking for field team management. Background location is only active during assigned shifts and stops when you check out.

Activity & Business Data

• •Attendance check-in / check-out times and GPS coordinates
• •Distributor and outlet visit logs, including timestamps and location
• •Sales orders, invoices, collections, and stock entries you create
• •Form submissions and custom survey responses

Device & Technical Data

• •Device model, operating system version, and unique device identifiers
• •Push notification token (for sending alerts)
• •App version and crash/error logs

• •Authenticate and authorise access to the App
• •Display real-time and historical field rep locations on the manager's Live Location map
• •Record and verify attendance, field visits, and distributor calls
• •Process sales orders, invoices, collections, and stock movements
• •Generate daily/monthly sales and activity reports for your organisation
• •Send push notifications about tasks, approvals, and alerts
• •Diagnose technical issues and improve App performance

We do not sell, rent, or share your personal data with advertisers or unaffiliated third parties for marketing purposes.

The App requires background location access because field sales representatives must have their GPS position tracked continuously during their work shift. This serves two business-critical purposes:

• •Live Location Tracking — Managers can view the real-time position of every field rep on an interactive map, enabling route optimisation, safety monitoring, and coverage verification.
• •Verified Visit Logging — Each distributor or outlet visit is geo-stamped at the moment it is recorded, even if the user has switched to another app. This prevents fraudulent check-ins and ensures accurate field activity reports.

Background location tracking is only active when the employee has checked in for their shift and is automatically suspended upon check-out. The App displays a persistent notification while background tracking is active so the user is always aware.

Your data is shared only in the following limited circumstances:

• •Within your organisation— Managers and admins of your company can see location, attendance, and activity data for the field reps under their scope of access, as determined by your organisation's role & permission settings.
• •Service providers — We use third-party infrastructure providers (cloud hosting, database, maps) solely to operate the App. They process data on our behalf under strict confidentiality obligations.
• •Legal requirements — We may disclose information if required by law, court order, or to protect the rights and safety of users or the public.

We retain your personal data for as long as your account is active and as required to fulfil the business purposes described in this policy. Location history and activity logs are retained in accordance with your organisation's configuration. When your account is deactivated, personal identifiers are anonymised or deleted within 90 days, except where retention is required by law.

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest for sensitive fields, hashed password storage, and role-based access controls. Access to production data is restricted to authorised personnel only.

No method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to promptly notifying affected users in the event of a breach.

Depending on your jurisdiction, you may have the right to:

• •Access the personal data we hold about you
• •Request correction of inaccurate data
• •Request deletion of your personal data (subject to legal retention obligations)
• •Withdraw consent for background location tracking (by checking out of your shift in the App, or by revoking the permission in your device settings — note this will disable location-dependent features)

To exercise these rights, contact your organisation's administrator or reach us at support@suvacorp.com.

The App is intended solely for use by employed adults within a business organisation. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided us with personal information, please contact us immediately.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, where appropriate, notify users via a push notification or an in-app banner. Your continued use of the App after any changes constitutes acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: