Privacy Policy

Overview

This Privacy Policy explains how information is processed when you use the PriyaGold Field Sales mobile application (the "App"). The App is a B2B field sales solution provisioned for the exclusive use of Surya Food & Agro Ltd (which owns and operates the Priyagold brand) and is intended for authorized field sales personnel and distributor sales representatives.

Last updated: 24 August 2026

Roles (Controller, Processor, Publisher)

The App is published on the Google Play Store and the Apple App Store under Appstrail Technologies Pvt Ltd and is made available for use by Priyagold (Surya Food & Agro Ltd).

The App displays “Powered by RutX” on its splash screen. RutX is a product/brand name owned by Appstrail Technologies Pvt Ltd, used only for on-screen attribution. It does not refer to a separate company, platform, or service, and has no role in processing, storing, or accessing any data — all processing described in this policy is carried out by Appstrail as set out above.

Information we process

To enable field sales functionality (including via the Salesforce Mobile SDK), the App may process the following categories of information:

Authentication and identity

• User identifiers and enterprise credentials used to authenticate you and manage your field-user profile, assigned beats/routes, and daily work.

Location data (with your permission)

• Precise location (GPS) and/or approximate location (such as from network signals), captured when you mark attendance and when you record retailer or distributor visits, to verify that attendance and visits are performed at or near the correct location and to support visit compliance.
• You can control location permissions through your device settings. Certain features (such as attendance check-in/out and visit capture) may not function properly without location access.

Camera, photos, and media

• Selfie photos (photographs of your face) captured to mark daily attendance and to confirm completion of field activities, and photos you capture in the App as supporting evidence for retailer onboarding, store audits, and visit records. Selfies are ordinary photographs: the App performs no facial recognition and creates no biometric identifier. See Face data (attendance and activity selfies) for the full description of how this data is collected, used, shared, stored, and deleted.

Field sales and operational data

• Retailer, distributor, and outlet information, order details, beat/journey plans, visit records, and store-level data that you view or capture as part of your field sales work.

Files stored on your device

• Photos awaiting upload: a photo you capture is held in the App's private storage only until it has been sent to Salesforce, which normally happens as soon as you submit the record.
• Documents you open: files and product images downloaded from Salesforce for you to view are cached in the App's private storage so they do not have to be fetched again.
• Reports you generate: when you choose to download a report (for example an expense or visit report), the PDF is created and saved on your device.
• These files are stored in App-private storage and are not shared with other apps. The App does not add photos it captures to your photo library.

Notifications

• With your permission, the App sends push notifications for work-related alerts and reminders (such as attendance, visit, and order updates). To deliver these, a device notification token may be processed.

Technical logs and diagnostics

• We use Firebase Crashlytics to collect diagnostics (such as crash reports) to help keep the App reliable and to troubleshoot issues.

Face data (attendance and activity selfies)

Because an attendance selfie is a photograph of your face, we describe this category separately and in full.

What face data the App collects

• The App collects a single still photograph of your face (a "selfie"), captured with the device's front camera only at the moment you tap the capture button, and only after you have reviewed the image and pressed Confirm. You may retake the photo before confirming.
• The selfie is captured in the following work situations: attendance Day In and Day Out, retailer/distributor visit closure, store audits, and distributor onboarding and appointment activities.
• Each selfie is stored as an ordinary image file (JPEG) at reduced resolution (approximately 720 × 540 pixels). It is stored and used only as a viewable picture, alongside the date, time, and — where you have granted location permission — the location recorded for that same attendance or visit entry.
• The camera is used only in the foreground, while the capture screen is open. The App does not record video, does not capture images in the background, and does not save selfies to your device's photo library or gallery.

What the App does not do with face data

How face data is used

• The selfie is attached to the corresponding attendance or field-activity record so that authorized Priyagold personnel (your reporting manager, HR, and Sales Operations) can visually confirm, by human review, that the correct employee marked that attendance or completed that field activity at the recorded date, time, and place.
• It is used for attendance and field-activity record-keeping, payroll and expense verification, and internal audit — and for no other purpose.
• Review is always performed by a person looking at the photograph. No automated decision is made about you on the basis of the image.

Where face data is stored

• On Priyagold's Salesforce environment. Once uploaded, each selfie is stored as a Salesforce file attached to the related attendance or activity record inside Surya Food & Agro Ltd's (Priyagold's) own Salesforce organization, which Priyagold controls and administers. Salesforce, Inc. provides the hosting infrastructure as Priyagold's sub-processor and does not use the images for its own purposes.
• Temporarily on your device. A captured selfie is held in the App's private storage — not in your photo library or gallery, and not readable by other apps — only for as long as it takes to upload it to Salesforce, which normally happens immediately. Nothing about the photo is kept on the device once it has been uploaded, and the App never copies it anywhere else on the device.
• Transmission to Salesforce is encrypted in transit using TLS/HTTPS via the Salesforce Mobile SDK.
• Appstrail Technologies Pvt Ltd does not operate any separate server, database, or file store for this App, and keeps no copy of your face data.

Sharing of face data with third parties

• Face data is never sold, rented, licensed, or shared for advertising, analytics, or any third party's own purposes.
• Face data is not shared with any third party other than the following two service providers, which process it strictly on Priyagold's instructions in order to run the App: Salesforce, Inc. (hosting of Priyagold's Salesforce environment, where the images reside) and Appstrail Technologies Pvt Ltd (development and support of the App, on Priyagold's instructions and under its service agreement).
• Face data is not sent to Firebase Crashlytics or to any other analytics, advertising, or diagnostics service. Crash diagnostics contain no images.
• Within Priyagold, selfies are visible only to authorized personnel who need them for attendance, sales management, audit, and support purposes. They are not published, and they are not visible to other field users.
• Face data may be disclosed to authorities only where Priyagold is required to do so by law or legal process.

How long face data is retained

• On your device: only from capture until the photo has been uploaded — normally a matter of seconds. Nothing is retained on the device after that.
• In Priyagold's Salesforce environment: a selfie is retained only for as long as it is needed for the purpose it was collected for — verifying the attendance or field-activity record it is attached to, and the related payroll and audit cycle. It is retained no longer than the underlying attendance or activity record itself.
• Who decides, and when it is deleted: because this is an internal enterprise application, retention is determined and enforced by Priyagold, as data controller, through its own Salesforce administrators, in line with Priyagold's internal HR, record-keeping, and audit policies and any period required by applicable law. Selfies are deleted by those administrators when the image is no longer required for those purposes, when a user or manager requests deletion, or when the associated user account or attendance record is deleted.
• Appstrail Technologies Pvt Ltd retains no copy of your face data at all — it holds no server or file store for this App — and it acts on Priyagold's deletion instructions under its service agreement.
• Face data is never retained for any secondary purpose, and it is never retained for machine-learning or model training.

Your choices and deletion of face data

• The App tells you why the camera is needed before you grant access — on the capture screen itself, in the system permission prompt, and (on Android) in a disclosure dialog shown before the operating-system prompt. You can withdraw camera access at any time in your device settings. Attendance and activity features that require a selfie will not function without it; nothing else in the App is affected.
• You may request access to, correction of, or deletion of your selfies by contacting Priyagold's IT or Sales Operations team through your internal support channels, or by using the Account Deletion process. On deletion, the images are removed from Priyagold's Salesforce environment.

Where data is stored

Appstrail does not manage independent data servers for this App. Field-user profiles, retailer and distributor details, attendance and visit records, orders, and photos are stored within Priyagold’s Salesforce environment. Salesforce provides the infrastructure for data stored and transmitted in connection with the App.

How information is used

Information is used strictly to support professional field sales operations, including to:

• Mark daily attendance (check-in/out) using a selfie and location, and support visit compliance.
• Display assigned beats/routes, retailer and distributor information, and visit history.
• Capture retailer and distributor visits, orders, retailer onboarding, and store-audit data (including via photo evidence and location tagging, where enabled).
• Detect whether your device has a working connection, so the App can tell you when connectivity is needed to submit or refresh your work.
• Monitor app performance and reliability to prevent operational downtime.

How information is shared

Information may be shared in the following ways:

• Within Priyagold: with Surya Food & Agro Ltd personnel and teams who need access for operations, sales management, audits, and support.
• Service providers used for the App: such as Salesforce (for the underlying data environment) and Firebase Crashlytics (for diagnostics). These providers process information to provide their services.
• Appstrail as service provider/processor: Appstrail processes information on behalf of Priyagold to operate, maintain, and support the App under its agreement with Priyagold.
• Legal and safety: if required by law or legal process, or to protect the rights, safety, and security of users, Priyagold, Appstrail, and the public.

Data retention and deletion

Account and data lifecycle management are handled by Priyagold’s system administrators within Priyagold’s environment. Retention depends on Priyagold’s operational and legal requirements.

Requesting deletion: To delete your account or specific records, contact Priyagold’s IT or Sales Operations team through your internal support channels. See the Account Deletion page for details.

Face data: attendance and activity selfies are kept only as long as the attendance or activity record they are attached to is needed for attendance, payroll, and audit purposes, and are deleted by Priyagold's administrators once they are not — or on request. They are not retained on your device after upload. See Face data (attendance and activity selfies).

Appstrail complies with deletion instructions provided by Priyagold in accordance with its service agreement.

Security

We implement industry-standard security measures designed to protect field data, including:

• Encryption in transit: communication between the App and Salesforce is encrypted using TLS via the Salesforce Mobile SDK.
• Secure API communication: all data transfer between the App and Salesforce occurs over protected HTTPS connections.
• Local data protection: files kept on your device (photos awaiting upload, cached documents, and reports you generate) are held in App-private storage, are not readable by other apps, and are protected by the standard security controls of your mobile operating system.
• Authenticated access: all requests are made with your own enterprise credentials through the Salesforce Mobile SDK, so you see only the records Priyagold has authorized for you.

No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

Device permissions

The App may request the following permissions to support operational functionality:

• Location access: to mark attendance and record retailer/distributor visits at the correct location and to support visit compliance.
• Camera access: to capture attendance selfies and photos for retailer onboarding, store audits, and visit evidence. See Face data.
• Photos access: to let you attach an existing image from your photo library where a supporting document is required (for example a medical certificate with a leave request), and to save reports you choose to download. The App does not add photos it captures to your photo library.
• Notifications: to send work-related alerts and reminders, such as attendance, visit, and order updates. You can enable or disable notifications through your device settings.

Your choices

• You can manage permissions (such as Location and Camera) through your device settings.
• You can request account deletion through Priyagold’s IT/Sales Operations team as described on the Account Deletion page.

Children’s privacy

The App is not intended for use by children. It is intended for authorized Priyagold field personnel for work-related purposes.

Changes to this policy

We may update this policy from time to time. We will update the “Last updated” date at the top of this page.

Contact

Data Controller (Priyagold): Surya Food & Agro Ltd (Priyagold).

For deletion requests and privacy rights requests: contact Priyagold’s IT or Sales Operations team through your internal support channels.

For technical questions about this policy or the App: www.appstrail.com • hello@appstrail.com