Privacy Policy

📋 Overview

DilmahSync is an internal application developed exclusively for authorized employees and representatives of Dilmah (Ceylon Tea Services PLC). This app is not intended for public use. Access is restricted to personnel within the Dilmah Organization.

📊 Information We Collect

1. Account Information

• Email address (used for authentication via Supabase Auth)
• Display name (as configured by organization administrators)

2. Business Card Data

When you scan or manually enter business contact information, we collect:

• Contact names, email addresses, phone numbers
• Job titles, company/organization names
• Business addresses and websites
• Scanned business card images

3. Camera and Photo Access

The app requires camera access solely to scan and photograph business cards. Images are used exclusively for OCR (Optical Character Recognition) processing and contact data extraction.

4. Device Information

• Device type and operating system version (for crash reporting and compatibility)

⚙️ How We Use Your Information

• Authentication: To verify you are an authorized Dilmah Organization member
• Business Card Processing: To scan, digitize, and store business contact data collected at trade shows and events
• Salesforce Synchronization: To sync captured contact data with the organization's Salesforce CRM system
• Campaign Management: To associate contacts with organizational events and campaigns

🔒 Data Storage & Security

• All data is stored securely on Supabase (cloud infrastructure) with Row Level Security (RLS) enabled
• Business card images are stored in secure cloud storage
• Data transmission is encrypted using HTTPS/TLS
• Sensitive credentials (API keys) are stored server-side and are never exposed to client devices
• Authentication tokens are securely managed and automatically refreshed

🤝 Data Sharing

We do not sell, trade, or share your personal data or collected business contact data with any third parties outside the Dilmah Organization.

Data is shared only with the following services for operational purposes:

🗄️ Data Retention

Business contact data is retained as long as it is relevant for organizational purposes. Users may request deletion of specific records through the app. Account data is retained for the duration of employment or authorization within the Dilmah Organization.

✅ Your Rights

As an authorized user, you may:

• View and edit any contact data you have captured
• Delete contact records you have created
• Request account deletion by contacting the organization's IT administrator

👶 Children's Privacy

This app is not intended for use by individuals under the age of 18. We do not knowingly collect data from minors.

🔄 Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be communicated to authorized users through internal channels.

📬 Contact Us

For questions or concerns about this Privacy Policy, please contact: