Privacy Policy

1. Scope & Overview

This Privacy Policy describes how SwiftMaze Tech collects, processes, stores, and protects information when mobile distributors (“Company Admins”) and authorized stores (“Retailers”) use the Retailer Inventory Android/iOS application and connected web services (https://mobileerp.swiftmazetech.com).

2. Information We Collect

• Account & Organization Information: Display name, registered email address, role assignment (`COMPANY_ADMIN` or `RETAILER`), company/store identifier, and Argon2id-hashed authentication credentials.
• Inventory, IMEI & Transaction Records: Product catalog details, 15-digit IMEI / manufacturer serial numbers, stock intake batches, store allocations, retail sale timestamps, optional customer contact details recorded on store invoices, and warranty activation records.
• Profile Media (Optional): Profile avatar images uploaded explicitly by a Company Admin via camera or photo library selection.
• Device Push Tokens & Security Logs: When notification permission is granted, we process platform push tokens (Expo/FCM/APNs) strictly to deliver stock allocation and operational alerts. Session timestamps and security audit trails are logged to prevent unauthorized access.

3. Device Permissions Used by the Mobile App

• Camera & Photo Library: Used only when a Company Admin chooses to take or select a profile avatar photo. No background capture or silent media scanning is performed.
• Notifications: Used to alert authenticated retailers when new mobile inventory is allocated to their shop and to surface important account notices.
• No Background Location or Ad Tracking: The app does not collect continuous GPS location or embed third-party advertising SDKs.

4. How We Use & Share Data

Data is used strictly to operate multi-tenant inventory tracking, verify stock authenticity, manage warranties, enforce active company subscriptions, and safeguard account integrity. We do not sell or rent user personal data to third parties.

Each tenant’s operational records are strictly scoped by company and retailer boundaries on our servers. Within a licensed distributor tenant, authorized Company Admins can view inventory, transfers, and warranty records for their linked retailers.

5. Data Security Controls

• All API communication uses encrypted HTTPS/TLS (`https://mobileerp-api.swiftmazetech.com`).
• Passwords are stored exclusively using salted Argon2id hashing.
• Short-lived bearer tokens remain in memory while rotating refresh tokens are stored using Android Keystore / iOS Keychain hardware-backed storage.

6. Data Retention & Account Deletion

Authorized users may deactivate their account at any time through our Account Deletion Portal. Upon verification, your account login is immediately marked INACTIVE, all active refresh sessions are revoked, and uploaded profile avatars are deleted. Immutable serialized stock movements, sales invoices, warranty certificates, and security audit records remain retained as required for commercial audit and statutory warranty compliance.

7. Contact for Privacy Inquiries

For questions, data access inquiries, or privacy support, contact SwiftMaze Tech at swiftmazetech@gmail.com or visit our Contact Us page.