Privacy Policy

GT Business (“App”, “we”, “us”, “our”) is a business operations application powered by GujjuTicks. It helps organizations manage sites, employees, customers, tasks, attendance, and product inventory.

This Privacy Policy explains how we collect, use, store, and share information when you use the App (web, Android, or iOS) and related services.

Operator: [GujjuTicks / GT Budiness]

Contact: [info@gujjuticks.com]

Website: [https://business.gujjuticks.com]

1. Who this policy applies to

This policy applies to:

• Account holders who register, sign in, or manage a profile in GT Business.
• Authorized users invited or permitted to use an organization’s workspace in the App.

If you are an employee or customer whose details were entered by a business using GT Business, that business (your employer or service provider) is usually the data controller for your information. We process that information on their behalf as a service provider to run the platform. Questions about how a specific company uses your data should be directed to that company; we can assist them as described in Section 12.

The App is intended for business use and is not directed at children. You must be at least the age required in your country to enter a binding contract (typically 18, or 16+ with parental consent where applicable).

2. Information we collect

2.1 Information you provide

When you create an account or use the App, you may provide:

CategoryExamplesAccount & profileName, email address, password, profile photoOrganizationOrganization name, slug, contact email/phone, address fieldsEmployeesName, email, phone, job title, employment type, hire dates, photos, documentsCustomersName, contact details, notes, tags, interaction recordsSites & locationsSite names, addresses, latitude/longitude you set on the mapTasksTitles, descriptions, schedules, geo coordinates, attachmentsAttendanceAttendance status and related records you or your organization recordProducts & inventoryProduct details, stock levels, stock movement historySupport communicationsMessages you send to us

We do not intentionally collect special categories of personal data (e.g. health, biometric, political opinions) unless your organization chooses to store such information in free-text fields; we ask that you avoid entering sensitive data unless necessary and lawful.

2.2 Information collected automatically

When you use the App, we and our infrastructure may automatically collect:

• Authentication & session data: API access tokens stored on your device (see Section 5).
• Technical & usage data: IP address, device/browser type, operating system, app version, timestamps, and request logs needed to operate and secure the service.
• Error and security logs: Information needed to diagnose failures, prevent abuse, and protect accounts.

We do not use third-party advertising or analytics SDKs in the App as currently shipped. We do not sell your personal information.

2.3 Device permissions (mobile)

On Android and iOS, the App may request:

• Internet access — required to communicate with our servers.
• Camera and photo library (when you choose to take or select a profile photo, employee image, or attachment) — only when you initiate that action.

The App does not continuously track your GPS location in the background. Location coordinates are stored only when you or your organization manually set a point on an in-app map (e.g. for a site, customer, task, or organization).

2.4 Information about third parties

If you upload employee, customer, or contact data, you represent that you have a lawful basis to do so and, where required, have provided notice to those individuals.

3. How we use information

We use personal information to:

1. Provide the service — authenticate you, sync data with your organization, and enable features (dashboard, employees, customers, sites, tasks, attendance, inventory, notifications within the App).
2. Maintain security — verify email, manage passwords and resets, detect unauthorized access, and enforce terms of use.
3. Communicate with you — send service emails (e.g. email verification, password reset) and respond to support requests.
4. Improve and operate the platform — monitor performance, fix bugs, and develop features.
5. Comply with law — respond to legal requests and protect our rights and users.

We do not use your data for unrelated marketing without your consent where consent is required by law.

4. How we share information

We share information only as needed:

RecipientPurposeYour organizationOther authorized users in the same organization workspace can see data your role permits (e.g. employees, customers, sites).Infrastructure providersHosting, database, email delivery, and backup services that process data on our instructions under contractual safeguards.Map tile providersWhen you use map features, your device may request map tiles from OpenStreetMap and CARTO servers. Those requests may expose your IP address and approximate map area to those providers under their own policies.Legal & safetyIf required by law, court order, or to protect rights, safety, and security.Business transfersIn connection with a merger, acquisition, or sale of assets, subject to continued protection of personal data.

We do not sell personal information.

Phone, email, and messaging: The App may open your device’s phone, email, or WhatsApp apps using contact details you stored (e.g. for a customer). Those actions occur on your device and are governed by your device and those apps’ policies.

5. Storage on your device

The App stores an authentication token in your browser or app storage (localStorage on web) so you remain signed in. You can end a session by logging out, which invalidates the server session and removes the stored token on the device.

You are responsible for securing your device and account credentials.

6. Data retention

We retain personal information for as long as your account or organization subscription is active and as needed to provide the service, resolve disputes, enforce agreements, and meet legal obligations.

When data is deleted from the App or your account is closed, we delete or anonymize it within a reasonable period, except where backup copies or legal retention requirements apply for a limited time.

Organizations may retain or export their business records separately; retention of employee/customer records they entered is also subject to their own policies.

7. Security

We use reasonable technical and organizational measures, including:

• HTTPS for API communication in production builds
• Token-based authentication for API access
• Access controls and logging on our servers

No method of transmission or storage is 100% secure. Please use a strong password and notify us promptly at [info@gujjuticks.com] if you suspect unauthorized access.

8. International transfers

Our servers and service providers may be located in [India / your hosting region]. If you access the App from another country, your information may be transferred to and processed in jurisdictions that may have different data protection laws. Where required, we implement appropriate safeguards (such as standard contractual clauses or equivalent mechanisms).

9. Your rights and choices

Depending on your location, you may have rights to:

• Access a copy of your personal information
• Correct inaccurate data
• Delete your account or certain data
• Restrict or object to certain processing
• Data portability (receive data in a structured format)
• Withdraw consent where processing is consent-based
• Lodge a complaint with a supervisory authority

Account holders can update profile details and avatar in the App, and request account deletion by contacting [info@gujjuticks.com].

Employees/customers of a business using GT Business should contact that business first; we will support them in fulfilling valid requests where we act as processor.

We will respond within the timeframe required by applicable law (e.g. 30 days under many frameworks, subject to extensions where permitted).

10. California (CCPA/CPRA) notice (if applicable)

If you are a California resident, you may have additional rights including knowing what personal information we collect, requesting deletion, and opting out of “sale” or “sharing” for cross-context behavioral advertising. We do not sell or share personal information for cross-context behavioral advertising.

To exercise rights, contact [info@gujjuticks.com]. We will not discriminate against you for exercising privacy rights.

11. India (DPDP Act) notice (if applicable)

If you are in India, you may have rights under the Digital Personal Data Protection Act, 2023, including access, correction, erasure, and grievance redressal.

Grievance officer: [Name]

Email: [info@gujjuticks.com]

Response time: We aim to address grievances within [30] days.

12. Roles: controller vs processor

• For your account and platform operation, [GujjuTicks / legal entity] acts as a data controller (or equivalent) for account and service data.
• For employee, customer, and operational records that your organization enters, your organization is typically the data controller and we act as a data processor, processing data only on documented instructions to provide GT Business.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version with a new “Last updated” date and, where required, notify you in the App or by email. Continued use after changes means you accept the updated policy, to the extent permitted by law.

14. Contact us

For privacy questions, requests, or complaints:

Email: [info@gujjuticks.com]

Postal address: [Gujarat]

App: GT Business - Powered by GujjuTicks

Short “Privacy Summary” (for App Store / Play listing)

GT Business helps businesses manage operations. We collect account info (name, email), business data you enter (employees, customers, sites, tasks, attendance, inventory), and optional photos. Maps load tiles from OpenStreetMap/CARTO. We use HTTPS and tokens for security. We don’t sell your data or use ad trackers. Contact [info@gujjuticks.com] for access or deletion requests.