1. Overview & Scope
Welcome to Deo Etomotive CRM (the "Application", Package: com.deocrm), developed and operated by Deo Etomotive Pvt Ltd ("we", "us", or "our").
This Application is an enterprise-grade dealership management, sales pipeline, inventory control, and Human Resource Management System (HRMS) built exclusively for authorized dealership employees, sales managers, delivery executives, and branch administrators of Deo Etomotive.
We are committed to safeguarding user privacy and complying with global data protection standards, including Google Play Developer Program Policies, Information Technology Act standards, and enterprise data security regulations.
2. Information We Collect
To provide core dealership functions, HRMS attendance, and lead management, we collect the following categories of information:
3. App Permissions & Justification
The Application requests only runtime permissions essential to fulfill business operations:
- ACCESS_FINE_LOCATION & ACCESS_COARSE_LOCATION: Used strictly during attendance punch to confirm physical presence within the dealership branch perimeter (150-meter geofence) and for test-ride odometer logging. Background location is not continuously tracked.
- CAMERA: Required for employees to capture live verification punch selfies during clock-in/out and for delivery executives to photograph vehicle PDI condition and customer deliveries.
- READ_MEDIA_IMAGES / READ_EXTERNAL_STORAGE: Enables uploading profile photos, KYC verification documents, and saving generated PDF payslips or receipts.
- USE_BIOMETRIC / USE_FINGERPRINT: Enables instant, secure app unlock using on-device biometric hardware (Touch ID / Face Unlock). Biometric templates remain encrypted in Android KeyStore and are never sent to our servers.
- POST_NOTIFICATIONS: Dispatches real-time alerts for lead assignments, leave request status updates, follow-up alerts, and payslip generation notices.
4. How We Use Collected Data
All information collected is utilized strictly for dealership workflows:
- Attendance & Workforce Management: Calculating daily shift hours, overtime, late marks, leave balances, and automated monthly payroll calculations.
- Sales Pipeline Operations: Managing customer enquiries, scheduling test rides, issuing digital quotations, and tracking sales executive achievements.
- Inventory & Vehicle Delivery: Managing inter-branch vehicle transfers, logging PDI checklists, customer handover signatures, and digital gate pass generation.
- Account Security & Auditing: Recording immutable admin audit logs for critical data modifications (such as payroll adjustments and user status changes) to ensure corporate compliance.
5. Third-Party Service Providers
We work with trusted enterprise cloud infrastructure providers:
- Firebase Cloud Messaging (Google LLC): Dispatches encrypted push notification tokens for lead updates and alerts.
- Google Play Services (Google LLC): Provides core Android runtime APIs, maps geolocation resolution, and device safety checks.
- MinIO S3 Object Storage: Enterprise-encrypted cloud storage for KYC documents, vehicle photos, and generated PDF payslips.
We do not sell, rent, monetize, or share your personal data with third-party advertisers or data brokers under any circumstance.
6. Data Security & Retention
We implement multi-tiered enterprise security mechanisms:
- Data in Transit: All communications between the mobile application and backend servers are encrypted using TLS 1.3 / HTTPS encryption.
- Data at Rest: Database records and MinIO cloud storage are protected by AES-256 encryption. User passwords are encrypted using multi-round Bcrypt cryptographic hashing.
- Role-Based Access Control (RBAC): Strict authorization boundaries ensure employees can only view their own personal profile, attendance records, and assigned sales leads.
7. Google Play Data Safety Summary
Summary declaration corresponding to Google Play Console Data Safety section:
| Data Type | Collected | Shared | Purpose | Encryption |
|---|---|---|---|---|
| Name & Email | Yes | No | App Functionality, Account Mgmt | TLS 1.3 / AES-256 |
| Location (GPS) | Yes | No | Geofence Attendance Verification | Encrypted in Transit |
| Photos & Camera | Yes | No | Punch Selfie, PDI Vehicle Photos | Encrypted in S3 |
| Device / FCM Tokens | Yes | No | Push Notification Delivery | Encrypted |
| Biometric Data | Local Only | No | Local App Unlock Authentication | Android Keystore |
8. User Rights & Data Deletion Policy
In accordance with Google Play data safety mandates, users have the right to:
- Request access to the personal data associated with their account.
- Request correction or updating of inaccurate profile details.
- Request account deactivation and complete permanent deletion of personal records.
Employees or registered users wishing to delete their account and associated data can submit a deletion request directly to our Data Protection Officer.
9. Contact & Grievance Officer
For questions, concerns, or inquiries regarding this Privacy Policy, please reach out to:
Nashik, Maharashtra, India