1 Summary at a glance
- We do not sell your data, ever.
- We do not use third-party advertising trackers or share data with ad networks.
- Data we collect is used only for the CRM to function — leads, bookings, deliveries, service jobs, field tracking, and team management.
- Field staff (sales reps, technicians) share their location with their own manager during work hours. Location is never shared with anyone outside your dealership.
- You can request access, correction, or deletion of your data at any time — contact your Dealer Admin first, or email info@saskey.in if your Dealer Admin can't help.
2 Data we collect
| Category | Examples | Source | Linked to user? |
|---|---|---|---|
| Contact information | Name, email address, mobile number | You / your Dealer Admin when your account is created | Yes |
| Customer records | Customer name, mobile, address, village, taluka, district, optional Aadhaar/PAN/GSTIN | You / your colleagues, as you serve customers | Yes (linked to the user who created the record) |
| Precise location | GPS coordinates of field staff (sales reps, technicians) during active app use, including background updates while on the clock | Device GPS (only with your consent at iOS / Android prompt) | Yes |
| User identifiers | Internal user ID, dealer ID, role | Created server-side when your account is provisioned | Yes |
| User content | Vehicle photos, job-card photos (before/after fitment, odometer, dashboard), customer KYC document photos, voice notes attached to leads, customer signatures | Captured by you using the device camera / microphone / signature pad | Yes |
| Diagnostics | Crash reports, performance metrics (page load times, request durations) | Generated automatically when the app misbehaves | No (aggregated) |
Data we do NOT collect
- Browsing history outside the app.
- Contacts from your phone's address book.
- Photos from your library that you didn't explicitly attach to a record.
- Health, fitness, financial, or biometric data.
- Children's data — the app is not designed for users under 18.
3 How we use this data
Every piece of data we collect is used to make the CRM work for your business. Specifically:
- Contact info — to sign you in, identify which records belong to you, and let your manager assign work.
- Customer records — to populate the leads, customers, bookings, quotations, deliveries, and service-job sections of the app.
- Location — to power the Field Tracking module so your manager can see live positions and visit history during work hours. Location updates pause when the app is closed or you log out.
- User identifiers — to authenticate you and enforce role-based access (e.g. Sales Executive vs Dealer Admin) so people only see what they should.
- User content — to attach photos and signatures to specific records (job card, customer, delivery) for compliance and proof.
- Diagnostics — to fix bugs and improve app performance. Crash data does not contain customer information.
App functionality only
None of this data is used for advertising, profile-building, scoring, or sale to third parties.
4 Who can see your data
Inside your dealership
- You — every record you created.
- Your manager and anyone above you in the reporting hierarchy — your leads, customer records, location, and job cards (within their assigned team scope).
- Dealer Admin / Branch Manager — all records in their dealership.
Outside your dealership
Nobody, except:
- Saskey Innovations support engineers — only when investigating a bug or support ticket you raised, and only the minimum data needed.
- Server-side infrastructure — Hetzner Cloud (Germany, used for hosting), Cloudflare (used for DNS + edge caching), Zoho Books (only for customers who have explicitly enabled Zoho item sync in Settings).
- Lawful requests — if compelled by a valid Indian court order.
We do not sell, rent, or share your data with advertisers, data brokers, or analytics platforms.
5 Permissions used by the mobile app
The iOS / Android app requests these permissions at runtime. You can revoke any of them in your phone's Settings; the app will continue to work but the corresponding feature will be disabled.
- Location (When in Use + Always) — used by Field Tracking. "Always" is needed only if you're a field-staff role whose manager actively monitors live positions; sales-only or admin users can grant "When in Use" only.
- Camera — used to capture vehicle photos, KYC documents, odometer readings, and proof-of-delivery photos for job cards.
- Photo Library (Read & Add) — to attach a previously-saved photo to a record, and to save captured photos so you have a local copy.
- Microphone — to record short voice notes attached to leads and customer follow-ups.
- Push Notifications — to alert you when work is assigned, follow-ups are due, or stages forward to you.
6 How long we keep your data
- Active dealer accounts — for the life of your dealer's subscription, plus 90 days after expiry (to allow time for renewal or data export).
- Deactivated user accounts — data the user created stays with the dealer (it belongs to the business). The user's personal login credentials are removed within 30 days.
- Crash diagnostics — 90 days.
- Field-tracking location pings — 90 days, then auto-purged.
- Customer / lead / booking records — for the life of the dealer's subscription, unless the Dealer Admin deletes them earlier.
- Backups — encrypted, retained 30 days.
7 Your rights
Under Indian data protection norms, you have the right to:
- Access — request a copy of the data we hold about you.
- Correct — fix anything inaccurate.
- Delete — request deletion of your data (subject to business records that your employer is required to retain).
- Object / restrict — to specific uses, e.g. opt out of location tracking when your role doesn't require it.
- Portability — get an export of your data in a structured format.
- Withdraw consent — for permissions like location and camera, at any time via your phone settings.
How to exercise these rights
First, raise the request with your Dealer Admin — they can usually action it within the app. If they can't, email info@saskey.in with the subject line "Data request" and we'll respond within 30 days.
8 Security
- All traffic between the app and our servers uses HTTPS (TLS 1.2+).
- Passwords are bcrypt-hashed; we never see them in plaintext.
- Server infrastructure runs in a hardened Linux environment with database access locked to private network only.
- Multi-tenancy is enforced at the database layer with row-level security — each dealer's data is isolated.
- Daily encrypted backups, 30-day retention.
- Access to production data by Saskey staff is logged and limited to debugging needs.
No system is 100% secure. If you believe your account has been compromised, change your password immediately and email info@saskey.in.
9 Children
SasFlow CRM is a business tool intended for users 18 years and older. We do not knowingly collect data from anyone under 18. If you believe a child has provided data to us, email info@saskey.in and we will delete it.
10 Changes to this policy
If we change anything material — what we collect, how we use it, who we share it with — we'll post the updated policy at this URL and bump the "Last updated" date at the top. For significant changes we'll also push an in-app notice the next time you sign in.
11 Contact
Questions, requests, complaints — we want to hear them.
- Email: info@saskey.in
- Phone / WhatsApp: +91 84892 56789
- Postal address: Saskey Innovations, No 81/3/2, 2nd Floor, L.R. Tower, Above Anand Sweets, Opp Meenakshi Mall, Doddamma Layout, Hulimavu Village, Begur Hobli Bannerghatta Road, Bangalore 560076
- Business details: PAN AFCFS2312E · GSTIN 29AFCFS2312E1ZB