PRIVACY POLICY — GMATS FIELD SERVICE
Effective date: 11 July 2026 · Last updated: 11 July 2026

GMATS Field Service ("the App") is a business application used by employees of
GMATS and its authorised partners to record air-compressor service reports,
sales enquiries and staff attendance. This policy explains what data the App
collects, why, and how it is handled. The App is operated by GMATS ("we", "us").
Contact: info@gmats.in

1. WHO USES THIS APP
The App is not offered to the general public. Accounts are created only by a
GMATS administrator for staff members (service engineers, sales engineers and
administrators). Users cannot self-register inside the App.

2. DATA WE COLLECT
- Name, work email, phone number, employee ID — when your administrator creates
  your staff account; used for account identification and sign-in.
- Photos (a live selfie and machine photographs) — when you file a service
  report or sales enquiry; used as proof of attendance at the customer site and
  machine condition records.
- Precise location (GPS) — when you file a report/enquiry or check in/out for
  attendance; used to record the job/attendance location on the report.
- Voice recordings — optionally, when you attach a voice note to a sales
  enquiry; used to describe the enquiry.
- Customer business contact details (name, contact person, phone, email,
  address) — when entered into a report or enquiry; used to maintain GMATS
  customer service records.
- Diagnostic data (error logs) — if the App encounters an error; used to fix
  bugs and improve reliability.

3. WHAT WE DO NOT COLLECT
The App contains no advertising and no analytics trackers. We do not collect
browsing history, contacts, messages, financial information or any data
unrelated to field-service work. We never sell data to anyone.

4. WHERE DATA IS STORED
Data is stored securely on Supabase (hosted on Amazon Web Services, Singapore
region), protected by row-level security so each user can only access the
records their role permits. All data is encrypted in transit (HTTPS/TLS) and
at rest.

5. SHARING
Data is visible only to authorised GMATS staff (e.g. administrators review
reports and enquiries). Service reports may be shared as PDF documents with the
customer they concern. We do not share personal data with advertisers or
unrelated third parties. Our infrastructure provider (Supabase/AWS) processes
data on our behalf under their own security and privacy commitments.

6. RETENTION AND DELETION
Records are retained for as long as GMATS requires them for business and
warranty purposes. Staff may request correction or deletion of their personal
data — including account removal — by emailing info@gmats.in. Requests are
honoured within 30 days unless a legal or contractual obligation requires
longer retention.

7. PERMISSIONS THE APP REQUESTS
- Camera: live selfie and machine photos on reports.
- Location: recording the job/attendance location.
- Microphone: optional voice note on sales enquiries.
- Biometrics (fingerprint/face): optional app unlock — biometric data never
  leaves your device.

8. CHILDREN
The App is a workplace tool for adults (18+). It is not directed at children
and we do not knowingly collect data from children.

9. CHANGES
If this policy changes, the updated version will be published at this address
with a new "last updated" date.

10. CONTACT
GMATS — info@gmats.in