Privacy Policy - Gabcel App

1. Introduction

Gabcel ("Company," "we," "us," "our," or "Provider") is committed to protecting the privacy and security of our users. This Privacy Policy explains how the Gabcel App (the "App") collects, uses, discloses, and safeguards personal information when you use our hire purchase management and sales platform.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our App. By accessing and using the Gabcel App, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy.

2. Information We Collect

2.1 User Account Information

When you register for the Gabcel App, we collect:

• Full name and contact information (email address, phone number)
• Login credentials (username and password)
• Employee or agent identification number
• Role and department information
• Profile picture (optional)

2.2 Customer Information (Hire Purchase Data)

As part of your role as a sales or collections representative, the App processes customer information including:

• Customer names, phone numbers, and email addresses
• Residential address and GPS location data
• Payment history and transaction records
• Hire purchase agreement details
• Product/item information and specifications
• Financial transaction data (amounts, dates, payment methods)

2.3 Transaction & Activity Data

We automatically collect data about your use of the App:

• Real-time GPS location coordinates and timestamp of entries
• Date and time of all transactions (sales, payments, updates)
• Device identifier and mobile device information
• IP address and connection information
• Device battery and connectivity status
• App usage patterns and feature interactions
• Data synchronization logs

2.4 Device Information

We collect information about your mobile device:

• Device model, operating system, and version
• Unique device identifiers (IMEI, Android ID)
• Camera and location services permissions

2.5 Communication Data

We may collect and store:

• Messages and communications within the App
• Support tickets and customer service inquiries
• Feedback and bug reports
• SMS communications for official transactions (if enabled)

3. How We Use Your Information

3.1 Primary Business Functions

We use collected information to:

• Process Transactions: Record sales, payments, and hire purchase agreements in real-time
• Manage Collections: Track customer payment status and manage collection activities
• Generate Analytics: Produce advanced analytics and performance reports for management and agents
• Verify Customer Identity: Validate customer information
• Maintain Records: Keep accurate records of all transactions for compliance and auditing

3.2 Account & Security Management

We use your information to:

• Authenticate your identity and authorize access to the App
• Detect and prevent fraud and unauthorized access
• Monitor suspicious activity patterns
• Enforce account security policies and credential safeguarding
• Investigate security incidents and breaches

3.3 Service Improvement

We use information to:

• Improve App functionality and user experience
• Develop new features, particularly related to hire purchase logic
• Fix bugs and technical issues
• Optimize App performance and speed
• Conduct analytics to understand usage patterns

3.4 Communications

We may contact you regarding:

• App updates and security notifications
• Critical compliance or policy changes
• Account status and access issues
• Transaction receipts and confirmations
• Performance metrics and sales reports

3.5 Legal & Compliance

We use information to:

• Comply with applicable laws and regulations
• Enforce our Terms of Use and other agreements
• Protect against legal liability
• Respond to government requests and subpoenas
• Maintain audit trails for hire purchase regulatory requirements

4. GPS Location & Timestamp Tracking

4.1 Purpose of Location Tracking

• Verify that transactions occur at the stated location
• Detect unauthorized or fraudulent transactions
• Manage field agent accountability and performance
• Prevent data manipulation and off-book transactions
• Enhance data accuracy for hire purchase records

4.2 Location Data Usage

GPS coordinates and timestamps are:

• Automatically recorded with every transaction entry
• Stored in the central database linked to your user account
• Used to verify agent activity and transaction legitimacy
• Included in performance analytics and reports
• Available for investigation of disputed transactions

4.3 Your Responsibilities

• You must not attempt to bypass, spoof, or manipulate GPS data
• Do not use location spoofing apps or services while using Gabcel
• Ensure your device's location services are enabled and accurate
• Accurate location data is a requirement of your role as a Gabcel representative

6. Payment Information & Financial Data

6.1 Payment Processing

The App processes and records:

• Payment amounts and payment methods
• Transaction dates and times
• Customer payment history
• Hire purchase terms and payment schedules

6.2 Payment Security

• All payment transactions are encrypted using industry-standard protocols (TLS 1.2+)
• Payment data is never stored on the mobile device in unencrypted format
• All transactions are immediately synced to secure servers
• We do not store complete credit card or banking credentials on the device

6.3 Real-Time Recording Requirement

• Every payment must be recorded immediately in the App at the point of transaction
• Manual receipts or off-book transactions are strictly prohibited
• Failure to record transactions may result in account suspension or termination

7. Data Sharing & Disclosure

7.1 Internal Sharing

Your information may be shared with:

• Management Team: Performance analytics, sales reports, and collection data
• Finance Department: Payment records and revenue tracking
• Compliance Team: Audit trails and regulatory reports
• IT Security Team: Security incident investigation and device management
• Human Resources: Performance metrics linked to commission and compensation

7.2 Third-Party Service Providers

We may share information with trusted third parties who provide:

• Cloud hosting and data storage services
• Analytics and reporting tools
• Payment processing services
• SMS and communication services
• GPS and mapping services
• Cybersecurity and fraud detection services

7.3 Legal Requirements & Law Enforcement

We may disclose information when:

• Required by law, court order, or government request
• Necessary to investigate fraud or security breaches
• Needed to enforce our Terms of Use or other agreements
• To protect the rights, privacy, and safety of our users and the company

7.4 Business Transfers

If Gabcel is acquired, merged, or sold, your information may be transferred as part of that transaction. We will provide notice of any such change.

7.5 What We Do NOT Share

• We do not sell customer data to third parties
• We do not share data for marketing purposes outside our organization
• Customer financial information is not shared with unrelated business parties
• Your login credentials are never shared with any external party

8. Data Security & Protection

8.1 Security Measures

We implement comprehensive security protocols:

• Encryption: TLS 1.2+ encryption for data in transit; AES-256 encryption for data at rest
• Authentication: Strong password requirements and optional multi-factor authentication
• Access Controls: Role-based access controls (RBAC) limiting data access
• Firewalls: Advanced firewall configurations protecting infrastructure
• Intrusion Detection: Continuous monitoring for unauthorized access attempts
• Regular Updates: Critical security patches deployed to all devices
• Audit Logging: Comprehensive logs of all data access and modifications

8.2 Agent Responsibilities for Security

• Strong Passwords: Use unique, complex passwords (minimum 12 characters with mixed case, numbers, symbols)
• No Credential Sharing: Never share your login credentials with anyone, including colleagues
• Device Security: Keep your mobile device locked and password-protected
• Public Wi-Fi: Avoid using unsecured Wi-Fi; use VPN when available
• Report Compromises: Immediately notify administrators if you suspect your account is compromised
• App Updates: Promptly install all app updates, especially security patches

8.3 Limitations

While we maintain rigorous security standards, no system is absolutely impenetrable. We cannot guarantee 100% security of all personal information. Users acknowledge the inherent risks of digital communication and data transmission.

9. Data Retention & Deletion

9.1 Retention Periods

• Active Hire Purchase Records: Retained for the duration of the agreement plus 7 years (standard financial record retention)
• Transaction Logs & GPS Data: Retained for minimum 5 years for audit purposes
• Agent Account Data: Retained for 3 years after account closure
• Communication Logs: Retained for 2 years or as required by law
• Backup Data: Maintained for business continuity and disaster recovery

9.2 Data Deletion

When data is no longer needed, we:

• Securely delete information using industry-standard deletion protocols
• Permanently remove data from active systems and backups
• Ensure deletion is compliant with legal and regulatory requirements
• Maintain audit trails documenting deletion activities

9.3 Your Data Deletion Requests

Subject to legal and regulatory obligations, you may request deletion of your personal information by contacting our Privacy Officer. Requests will be evaluated within 30 days, taking into account:

• Active hire purchase agreements and obligations
• Legal retention requirements
• Ongoing investigations or disputes
• Tax and financial record requirements

10. User Rights & Access

10.1 Your Rights

You have the right to:

• Access: Request and receive a copy of your personal information held by us
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your information (subject to legal obligations)
• Portability: Request transfer of your data in a structured format
• Object: Object to certain types of processing (where legally permitted)

10.2 How to Exercise Your Rights

To exercise any of these rights, contact our Privacy Officer at:

• Email: privacy@gabcel.com
• Mailing Address: [Insert Company Address]
• Phone: [Insert Company Phone]

We will respond to your request within 30 days, and may require proof of identity before processing.

11. Children's Privacy

The Gabcel App is intended for use by authorized sales agents, collection officers, and company employees only. We do not knowingly collect information from individuals under 18 years of age. The App is not designed for public or consumer use. If we become aware that a minor has provided information, we will take steps to delete such data and terminate the minor's access.

12. International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence, which may have different data protection laws. By using the Gabcel App, you consent to the transfer and processing of your information in such countries, and acknowledge that such countries may not have the same level of data protection as your home country.

13. Third-Party Links & Services

The Gabcel App may contain links to third-party websites or services. This Privacy Policy applies only to the Gabcel App. We are not responsible for the privacy practices of third-party websites or services. We encourage you to review their privacy policies before providing any personal information.

Google Play services

Google Analytics For Firebase

Firebase crashlytics

14. Policy Updates & Changes

Gabcel may update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by:

• Updating the "Last Updated" date at the top of this policy
• Posting prominent notices within the App
• Sending you an email notification (if you are an agent or employee)
• Requiring acceptance of updated terms before continued use

Your continued use of the App after changes means you accept the updated Privacy Policy.

15. Contact & Complaints

15.1 Privacy Officer Contact

For privacy inquiries, concerns, or complaints, contact our Privacy Officer:

• Email: bethelsoftwareteam@gmail.com
• Mailing Address: Gabcel - Ashaiman
• Phone: 0504225001
• Response Time: Within 15 business days

15.2 Data Protection Authority

If you believe your privacy rights have been violated and our Privacy Officer cannot resolve your concern, you may have the right to lodge a complaint with your local data protection authority or regulatory body.

15.3 Dispute Resolution

Any disputes regarding privacy matters will first be addressed through our internal complaint resolution process. If unresolved, such matters may be subject to binding arbitration as outlined in our Terms of Use.

16. Disclaimer of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, GABCEL SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES RESULTING FROM YOUR USE OF THE APP OR THIS PRIVACY POLICY, INCLUDING BUT NOT LIMITED TO LOSS OF DATA, LOSS OF PROFITS, OR BUSINESS INTERRUPTION, EVEN IF GABCEL HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.