Privacy Policy

1. Introduction

GoBuildMart CRM ("GoBuildMart CRM", "we", "us", or "our") is a customer relationship management platform operated by VIVAN BUILDMART PRIVATE LIMITED, located at RS No. 49, Block No. 345/B/5/3, Orma, Olpad, Surat, Gujarat – 394540, India.

This Privacy Policy explains how we collect, access, use, process, store, share, retain and protect personal and business information when users access our website, mobile applications and related CRM services (collectively, the "Services").

GoBuildMart CRM is designed for authorised business users, including sales executives, field sales employees, managers and administrators.

Depending on the circumstances, we may process information as a data controller or as a data processor acting on behalf of a business customer.

2. Information We Collect

2.1 Account and Profile Information

We may collect:

• Full name and employee information
• Email address and phone number
• Business name and job title
• Username and authentication credentials
• User ID and account information
• Department, role and assigned permissions
• Account activity and login information

2.2 CRM and Business Information

We collect and process information entered or uploaded by authorised users, including:

• Leads and customer records
• Customer contact details
• Sales activities and interactions
• Tasks, follow-ups and appointments
• Calls and meeting records
• Orders, quotations and invoices
• Product and pricing information
• Sales campaigns and campaign activities
• Attendance and field sales activity records
• Notes, documents and attachments
• Reports and performance-related information

This information is processed to provide the requested CRM functionality.

2.3 Location Information

GoBuildMart CRM collects precise and approximate location information to support employee attendance, live field sales tracking, customer visit verification and sales activity monitoring.

Location data may include:

• GPS coordinates (latitude and longitude)
• Precise geographical location
• Approximate geographical location
• Location timestamps
• Employee movement and travel routes
• Clock In and Clock Out records
• Customer and project-site visit locations
• Location history recorded during active working sessions

2.4 Automatically Collected Information

We may collect:

• Device type and operating system
• IP address and device identifiers
• App version and diagnostic information
• Application activity and usage information
• Login and access records
• Crash reports and technical error information
• Activity timestamps

2.5 Photos, Videos and Documents

The application may allow users to select and upload photographs, videos and documents related to business operations, including customer records, leads, project visits and support requests.

Selected files may be uploaded and stored as part of the relevant CRM records.

2.6 Information From Third Parties

We may receive information from authorised integrations, service providers, connected business systems and other sources where permitted by applicable law.

3. Employee Live Location Tracking and Background Location Access

3.1 Purpose of Location Tracking

GoBuildMart CRM provides a live location tracking feature for authorised field sales employees.

The purpose of this feature is to:

• Monitor employee field activities during working hours
• Display employees' live locations on the authorised admin dashboard
• Track work-related movement and travel routes
• Verify customer and project-site visits
• Support attendance and field sales management
• Maintain records of sales visits and field activities
• Help managers coordinate and supervise field sales operations

Location tracking is used for legitimate business operations and workforce management.

3.2 When Location Tracking Starts

Live location tracking automatically starts when a sales employee selects the Clock In feature in the GoBuildMart CRM application.

Once the employee clocks in and the necessary location permissions are available, the application begins collecting location information during the active working session.

The collected information may include GPS coordinates, location timestamps and movement data.

3.3 Background Location Collection

GoBuildMart CRM collects location data to enable live employee location tracking even when the app is closed or not in use.

During an active Clock In session, the application may continue accessing and collecting location data when:

• The application is minimised
• The user switches to another application
• The device screen is locked
• The application is running in the background
• The user is not directly interacting with the application

Background location access allows authorised company administrators to monitor field employees' live locations and work-related movements during active working sessions.

Background tracking requires the relevant location permissions and is subject to device and operating-system restrictions.

3.4 Foreground Location Services

GoBuildMart CRM may use Android foreground location services to support continuous location updates during an active Clock In session.

When the foreground location service is active, the application may display an ongoing notification indicating that location tracking is running.

The service supports location updates while the employee is not actively interacting with the application.

3.5 Live Location Visibility to Administrators

During an active Clock In session, an employee's live location may be transmitted securely to GoBuildMart CRM servers.

Authorised company administrators and managers can view relevant location information through the administrative dashboard.

This may include:

• Current or most recently reported employee location
• Location update timestamps
• Work-related movement information
• Recorded travel routes and location history
• Field visit and attendance information

Access is restricted according to applicable roles and permissions.

3.6 When Location Tracking Stops

Live location tracking automatically stops when the sales employee selects Clock Out in the GoBuildMart CRM application.

After a successful Clock Out:

• Collection of new location updates for live employee tracking stops.
• Active background location tracking is stopped.
• Live location transmission for the completed work session ends.
• The employee is no longer actively tracked through the Clock In session.

GoBuildMart CRM does not intentionally continue live employee tracking outside an active Clock In session.

Previously recorded location history may remain stored for authorised business reporting, attendance verification and applicable retention requirements.

3.7 Location Permissions

Depending on the device and enabled functionality, GoBuildMart CRM may request the following Android permissions:

• ACCESS_FINE_LOCATION: Used to obtain precise GPS coordinates for live field sales tracking and visit verification.
• ACCESS_COARSE_LOCATION: Used to obtain approximate location information where applicable.
• ACCESS_BACKGROUND_LOCATION: Used to continue location collection during active Clock In sessions when the application is not directly in use.
• FOREGROUND_SERVICE_LOCATION: Used to operate an active location-tracking service during field sales activities.

Users are informed about relevant location access through an in-app disclosure and the applicable Android permission requests.

Users can manage location permissions through their device settings.

Disabling location access may prevent attendance, live tracking or other location-dependent functionality from operating correctly.

3.8 Location Data Sharing

Location information may be accessible to:

• Authorised company administrators
• Authorised sales managers
• Designated personnel responsible for field operations
• Service providers processing location information on our behalf to operate the Services

We do not sell employee location information.

We do not use employee location information for third-party advertising or unrelated marketing purposes.

3.9 Location Data Retention

Location information collected during active Clock In sessions may be retained as part of attendance records, field activity history and operational reporting.

We retain such information only for as long as reasonably necessary for legitimate business purposes, contractual requirements and applicable legal obligations.

Employees may contact us to request information about their location data, applicable retention periods and available privacy rights.

4. How We Use Information

We use personal, business and location information to:

• Provide and maintain CRM services
• Authenticate and manage authorised accounts
• Manage leads and customer relationships
• Track sales activities and campaigns
• Manage orders, tasks and follow-ups
• Record employee attendance
• Provide live field sales tracking
• Verify customer and project-site visits
• Generate business and performance reports
• Improve service functionality and reliability
• Respond to customer and employee support requests
• Detect and prevent unauthorised activity
• Maintain platform security
• Comply with applicable legal requirements
• Send administrative and service communications
• Send marketing communications where permitted

We do not sell CRM customer data.

5. Legal Bases for Processing

Where applicable data protection laws require a legal basis for processing, we rely on one or more of the following:

• Contractual necessity: Processing required to provide CRM services and fulfil contractual obligations.
• Legitimate business interests: Processing necessary for security, service improvement, business administration and authorised field sales management, subject to applicable legal requirements and individual rights.
• Consent: Processing based on consent where required by law, including certain location permissions and optional communications.
• Legal obligations: Processing required to comply with applicable laws and regulations.

Device permission approval does not replace any additional consent or notice required under applicable law.

6. How We Share Information

We may disclose relevant information to:

6.1 Authorised Employees and Administrators

Information may be accessible to authorised employees, managers and administrators based on assigned access permissions and legitimate business requirements.

6.2 Service Providers

We may use third-party service providers for:

• Cloud hosting and data storage
• Application infrastructure
• Analytics and diagnostics
• Communication services
• Technical support
• Payment processing, where applicable

These providers may process relevant information on our behalf under applicable contractual and data protection requirements.

6.3 Third-Party Integrations

Where users enable or use authorised integrations, relevant information may be exchanged with those services to provide the requested functionality.

6.4 Legal Requirements

We may disclose information when required by applicable law, legal process or a valid request from competent authorities.

6.5 Business Transfers

Information may be transferred in connection with a lawful merger, acquisition, restructuring or sale of business assets, subject to applicable safeguards.

We do not sell or rent personal information to third parties for their independent marketing purposes.

7. Data Retention and Deletion

We retain personal information, CRM records, uploaded attachments and location data only for as long as necessary to provide the Services, fulfil legitimate business requirements, resolve disputes and comply with applicable law.

Retention periods may differ depending on the type of information and the requirements of the relevant business account.

When information is no longer required, we take reasonable steps to delete, anonymise or securely dispose of it, subject to legal and contractual obligations.

Users may request access, correction or deletion of eligible personal information by contacting our privacy support team.

For organisation-managed records, deletion requests may require verification and coordination with the relevant account administrator.

8. Data Security

We implement reasonable technical, administrative and organisational safeguards designed to protect personal and business information.

These measures may include:

• Encryption of information during transmission
• Access controls and authentication
• Role-based permissions
• Restricted administrative access
• Secure infrastructure and storage
• Security monitoring and maintenance
• Backup and recovery procedures

No electronic transmission or storage system can guarantee complete security.

Users are responsible for protecting their account credentials and reporting suspected unauthorised access.

9. International Data Transfers

Information may be processed or stored using authorised infrastructure or service providers located in India or other jurisdictions.

Where personal information is transferred across borders, we apply safeguards required by applicable data protection laws.

10. Cookies and Tracking Technologies

Our website and web-based CRM services may use cookies and similar technologies to:

• Maintain authenticated sessions
• Remember user preferences
• Improve application functionality
• Analyse service usage
• Support security and diagnostics
• Support permitted marketing activities

Users may control cookies through their browser settings.

Some website features may not function properly when necessary cookies are disabled.

11. User Privacy Rights

Depending on applicable law, users may have rights to:

• Access personal information
• Request correction of inaccurate information
• Request deletion of eligible personal information
• Request information about processing activities
• Withdraw consent where applicable
• Object to or restrict certain processing where legally available
• Request data portability where applicable
• Submit a complaint to the relevant authority

Employees may also request information about location data collected during their working sessions.

For data controlled by a business customer, requests may need to be directed to that organisation.

We will respond to valid requests in accordance with applicable legal requirements.

11.1 California Residents

Where applicable, California residents may exercise rights under relevant California privacy laws, including access, correction and deletion rights.

11.2 European Economic Area and United Kingdom

Where applicable, individuals in the EEA or United Kingdom may exercise rights provided by relevant data protection laws.

12. Children's Privacy

GoBuildMart CRM is intended for professional and business use and is not directed to children.

We do not knowingly collect personal information from children through the Services.

If we become aware of unauthorised collection of children's personal information, we will take appropriate steps in accordance with applicable law.

13. Third-Party Links and Services

GoBuildMart CRM may include integrations or links to third-party services, including communication platforms and other business tools.

For example, authorised users may initiate telephone calls or WhatsApp conversations from CRM records.

These services operate under their own privacy policies and terms.

We encourage users to review the privacy practices of third-party services they access.

14. Employee Awareness and Location Tracking Transparency

GoBuildMart CRM provides location-based functionality to support authorised field sales operations.

Employees should be informed that:

• Live location tracking starts when they Clock In.
• Their location and work-related movements may be visible to authorised administrators.
• Tracking may continue while the application is minimised or running in the background.
• Live tracking automatically stops after a successful Clock Out.
• Previously collected location history may be retained for legitimate business purposes.
• Location permissions can be managed through device settings, although disabling them may affect required work features.

We provide relevant in-app disclosures and request applicable device permissions before accessing location information.

15. Contact Us

If you have questions about this Privacy Policy, employee location tracking, personal information, data access or deletion requests, please contact:

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, features, location tracking practices, technology or legal requirements.

When changes are made, we will update the "Last Updated" date.

Where required by applicable law, we will provide additional notice or obtain the necessary consent before implementing material changes.