CommercialTech Privacy Policy

1. Introduction

CommercialTech ("we", "our", or "us") operates the CommercialTech mobile application and web platform. This Privacy Policy explains how we collect, use, and protect your personal information when you use our property management services.

By using our app or platform, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, job position/department
• Location Data: GPS coordinates when you use the Check-In feature (only when you actively check in)
• Photos: Images you take or upload for task documentation
• Usage Data: Task updates, attendance records, leave requests, messages sent within the platform
• Device Information: Device type, operating system for push notifications

3. How We Use Your Information

• To provide property management services to your organization
• To record attendance and GPS check-in/check-out times
• To send push notifications about tasks, emergencies, and announcements
• To enable communication between staff members
• To generate reports for building management
• To improve our platform and fix issues

4. Camera & Photo Access

Our app requests access to your device camera and photo library for the following purposes:

• Taking photos to document completed tasks
• Uploading evidence photos for emergency reports
• Uploading profile photos and building logos

Photos are only accessed when you explicitly choose to take or upload a photo. We never access your camera or photos without your action.

5. Location Data

Location data is only collected when you actively tap the "Check In" or "Check Out" button. We do not track your location continuously or in the background. Location data is used solely for attendance verification purposes.

6. Data Storage & Security

Your data is stored securely on Railway cloud infrastructure with PostgreSQL databases. We implement industry-standard security measures including:

• JWT token authentication
• Encrypted passwords using bcrypt
• HTTPS encryption for all data transmission
• Rate limiting to prevent unauthorized access

7. Data Sharing

We do not sell your personal data. Your data is only shared:

• Within your organization (building management and staff)
• With Cloudinary for photo storage (photos only)
• With Expo/Google for push notifications (device tokens only)

8. Data Retention

We retain your data for as long as your organization maintains an active account with CommercialTech. Upon account termination, data is permanently deleted within 30 days upon request.

9. Your Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent at any time

10. Children's Privacy

CommercialTech is a professional B2B platform intended for use by employees 18 years of age or older. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of any significant changes through the app or email. Continued use of the platform after changes constitutes acceptance of the updated policy.