Privacy Policy

1. Catalogue browsing and enquiries

You can browse the public catalogues without a staff account. To request a call or meeting, we collect your name, business name, business location (area and town or city), phone number, requested type of contact and language, along with any selected interests, optional message and selected catalogue. We use these details to contact you, discuss your business requirements and arrange a meeting if requested.

2. Purposes and limits on use

Courier folder records are separate from visits and do not collect GPS or require a photo. They store the send date, business, area/location, catalogue quantities, the staff account and submission time, plus any optional recipient name, phone, courier name, tracking number and notes. Staff can submit and view only their own records, without editing or deleting them. Authorised admins can view and export courier records. These records are kept for up to three years from submission and are excluded from visit counts.

Admins may keep a separate marketing contact list with phone numbers, optional names, businesses and locations, plus permission notes and opt-out status. Only contacts recorded as agreeing to marketing can be exported for a campaign. Exporting does not send a message; an admin must separately upload the selected phone numbers and campaign materials to the sending provider. Contact records and campaign drafts, including photos, are kept for up to three years from creation. Call Shubh Lam to stop marketing updates; admins record opt-outs so importing a list again does not reactivate them.

We use information for the enquiry or sales work described here, account security, access management, handling complaints and meeting applicable legal duties. We rely on consent where required and on other grounds only where applicable law permits them. Information provided for an enquiry is not permission for unrelated advertising.

We do not sell personal information or publish staff GPS records or private visit photos as a public catalogue. Any new purpose requiring separate permission will be explained before we use information for that purpose. Staff entering another person’s details must explain the business purpose and collect only what is necessary.

3. Staff accounts and profiles

Accounts use an email address, name and password for sign-in and account recovery. Staff profiles can include a phone number, work area and optional profile photo. We use account identity, approved roles and profile details to control access and identify who submits a visit. Account and security emails support verification and password recovery.

4. Visit details and precise location

A submitted visit includes staff identity, shop or company, contact person, meeting area, catalogue quantities, result, submission time and device time zone. Phone numbers, notes and follow-up plans may also be included.

Location permission is required for staff visit entry and submission. We ask for a fresh reading at the start and again when saving. The saved visit includes latitude, longitude, reported accuracy and capture time. We use this to review where a sales record was submitted. There is no continuous background location tracking. Public catalogue browsing does not require location access.

The app rejects missing, outdated or insufficiently accurate readings. Phone-reported location still has limitations and cannot guarantee attendance. If you cannot provide location, contact your admin; the visit cannot be submitted through the app.

To show a readable nearby address, our server sends the GPS coordinates to Photon (Komoot), using OpenStreetMap data. This also applies when an admin opens older visits. We do not include staff names, customer names, contact details, notes or photos in that lookup. The returned address is approximate and may identify a nearby street or area, not the exact meeting premises. We keep the derived name with the visit and reuse temporary lookup results for up to 30 days. A failed address lookup does not replace or remove the required GPS reading.

5. Visit and profile photos

Each new staff or admin visit requires a photo of the shop or meeting place. You can take a photo or choose an existing one you have permission to use. Profile photos are optional. The app resizes and compresses a selected image before uploading a copy, with a saved limit of 500 KB per photo. It does not change the original on your phone or upload your whole photo library. Avoid including unrelated people or private documents.

6. Who can access information

Authorised admins can view submitted visits, attached photos, customer enquiries and reports. Staff can manage their own profile and view only their own submitted visits, attached photos and reports. Staff cannot edit or delete submitted visits or view another employee’s records. Service providers also process information needed to operate the service.

Admins may correct meeting details and catalogue quantities. Each correction records the administrator, time, reason and the previous and corrected values. Captured GPS, the original photo and submission time are not changed. Correction history is removed with the visit under the same retention policy.

The current service uses Sites and Cloudflare for hosting, business records and files; Supabase for sign-in; and Resend for account emails. Provider processing may take place outside India. We do not promise storage only in India.

Displaying a visit map or opening its map link sends the coordinates to Google Maps. Opening WhatsApp or other external links is subject to those providers’ privacy practices. Information may also need to be disclosed where required by applicable law.

Admin access and downloads are for authorised business purposes. Admins must protect exported reports and share only the information needed with an authorised recipient. A provider receives information necessary for its function; using a map or messaging service may also allow that provider to process technical information under its own policy.

7. Three-year visit retention

Visit records, their follow-up details, attached visit photos and customer enquiries are kept for up to three rolling calendar years from submission. Older records are blocked from normal access and removed by automatic cleanup. If cleanup fails, deletion is retried; it is not a guarantee that every stored copy disappears at the exact anniversary.

Admins can move unwanted visits to Deleted records and restore them for up to 30 days, or until the three-year retention limit if sooner. Deleted visits are hidden from active reports and follow-ups. After the restore deadline, records and attached visit photos are queued for automatic permanent removal, with retries if cleanup fails.

Account access, staff profiles and profile photos are managed separately and are not automatically erased by the visit cleanup. Contact us when an account is no longer needed. Downloaded reports and provider-managed backups are outside this cleanup and require separate handling; any legally required records must be handled under applicable requirements.

8. Cookies, device storage and security

Sign-in uses cookies to maintain your session. Your chosen language is saved in this browser’s local storage. Hosting and sign-in providers may process technical data such as IP addresses, browser details and security logs to deliver and protect the service.

Access controls and protected connections help safeguard records, but no online system is risk-free. On a shared phone, sign out after use and avoid keeping your account signed in. Clearing browser storage does not delete records already submitted to Shubh Lam.

Report a suspected account compromise or data disclosure promptly using our business contact. We will assess it and make notifications required by applicable law. Please do not send private customer records in a public social-media complaint.

9. Children’s information

Staff and admin accounts are intended for authorised adults aged 18 or over. We do not ask children to create accounts or provide personal information. Avoid uploading children’s images or details. If you believe a child’s information has been submitted, contact us so we can review it and take appropriate steps under applicable law.

10. Your choices and requests

Contact Shubh Lam below to ask about your information, request access or correction, request deletion or account closure, withdraw permission where processing relies on it, or raise a privacy concern. We may need to verify your identity and check any applicable record-keeping requirements before acting.

You can remove location or camera permissions in your device or browser settings. Removing location permission prevents staff visit submission; it does not remove earlier records. A new visit cannot be submitted without a photo. You can choose an existing photo if camera access is unavailable. Profile photos are optional. If your business contact details were entered by a staff member, you can also contact us about them.

11. Privacy complaints and response

Use the phone, WhatsApp or postal address below for a privacy complaint or rights request. Describe the issue and provide a relevant account, enquiry or visit reference if available, plus a safe way to reply. Do not send passwords, one-time codes or unnecessary identity documents. Verification should be limited to what is reasonably needed.

We will review the request, explain any information needed or lawful reason limiting it, and respond within the period required by applicable law. You may also approach a competent regulator or other authority where a legal remedy is available; contacting us does not waive that right.

12. Policy updates

We will update this page and its date when these practices change. Use the business contact below for questions about the policy or how your request is being handled.