Privacy Policy

Application: ELLORA Connect | Last updated: September 11, 2026

ELLORA Connect is a business-to-business (B2B) field sales management application. It is deployed exclusively to sales representatives and staff of organisations that use the ELLORA Connect platform. If you are using this app, your employer has authorised and configured your access — there is no public self-registration.

1. Who We Are

ELLORA Connect is developed and operated by QuiQGenie Technologies Private Limited. In this policy, "we", "us", or "our" refers to QuiQGenie Technologies Private Limited. We act as both the data controller for platform-level data and as a data processor on behalf of the client organisation that employs you.

2. Scope of This Policy

This Privacy Policy explains what personal data the ELLORA Connect mobile application (Android and iOS) collects, why it collects it, how it is stored and shared, and what rights you have over your data.

3. Data We Collect

3.1 Account & Identity Data

Mobile number or email address used to log in
Employee name and employee / user ID assigned by your organisation
Organisation name and branch assignment
Firebase Authentication token (used to maintain a secure session)

3.2 Location Data

ELLORA Connect collects your GPS location to enable route tracking and field activity verification for your employer.

Foreground ("When In Use") location — captured at login and whenever you start a customer visit, so each activity can be GPS-stamped.
Background ("Always") location — when you tap "Start Day", the app records your GPS coordinates approximately every 15 minutes, even while the app is in the background or your screen is locked. iOS shows a blue status-bar indicator the entire time this is active. Tracking stops automatically — and the indicator clears — when you tap "End Day".
Each location log includes: latitude, longitude, accuracy, speed, and timestamp.

Background location notice: "Always" location access is requested only when you start your work day (Day Start) — not at app launch or login. It is used solely to reconstruct your field route for your employer's attendance and activity records. You can stop background tracking at any time by ending your work day inside the app, and you can revoke the permission entirely from your device Settings.

3.3 Camera & Photo Data

A photo captured at Day Start to confirm you are on-site
Photos captured in-app for expense receipts and customer visit records
Images selected from your device gallery for the same purposes
Photos are uploaded to secure cloud storage and are accessible only to authorised users within your organisation

3.4 Sales & Business Activity Data

Customer visit logs (customer name, visit time, outcome, payment collections)
Sales orders, product catalogue interactions, and pricing/discount data submitted through the app
Daily activity reports, beat plan / territory route data, and task completions
Expense claims and supporting documents
Support tickets raised from within the app

3.5 Device & Technical Data

Device model, operating system version, and unique device identifier
Push notification token (Firebase Cloud Messaging) to deliver alerts and updates
App version and crash/error logs
Network connectivity status (used to trigger offline-mode data sync)

4. How We Use Your Data

We use the data collected for the following purposes:

Authentication & access control — verifying your identity and authorising access to your organisation's data
Field operations tracking — recording route history, visit logs, and daily activity so your employer can manage field teams effectively
Order & inventory management — processing orders and syncing data with your organisation's backend systems
Expense management — supporting expense claim submission and approval workflows
Push notifications — sending you order approvals, expense status updates, and team alerts
Offline support — caching customer, product, and pricing master data locally on your device so the app keeps working with poor or no connectivity, syncing automatically when you are back online
App improvement — analysing crash reports and usage patterns to fix bugs and improve performance

5. Legal Basis for Processing

Contract performance — processing is necessary to provide the field sales management service to your employer
Legitimate interests — monitoring field operations is a legitimate business interest of your employer
Consent — you provide explicit consent when granting camera and location permissions on your device. You may revoke consent via your device settings, though this will limit or prevent the app's field-tracking features from working.

6. Data Sharing

We do not sell your personal data. Data may be shared with:

Your employer (client organisation) — all sales activity, location logs, and business data are accessible to authorised managers and administrators within your organisation.
Google Firebase — we use Firebase Authentication, Cloud Firestore, and Firebase Cloud Storage to store and sync data securely. Firebase Privacy Policy
Google Maps Platform — used to render route maps and resolve location coordinates. Google Privacy Policy
Your organisation's ERP backend — sales orders, customer data, and reports are synced to the ERP system configured by your employer.
Legal authorities — if required by law, regulation, or court order.

7. Data Retention

Location logs are retained for the period specified by your employer's data retention policy, typically 12 months of rolling history.
Sales activity data is retained for the duration of the employment relationship and any legally required period thereafter.
Account data is deleted upon account deactivation by your organisation's administrator, or upon your own deletion request (see Section 9).
Data cached locally on your device is cleared when you log out or uninstall the app.

8. Data Security

We take the security of your data seriously. Measures in place include:

All data transmitted between the app and our servers is encrypted using HTTPS/TLS
Firebase Security Rules control which users can read and write specific data
Authentication tokens are stored securely using platform-native secure storage
Access to production systems is restricted to authorised personnel only

9. Your Rights & Account Deletion

Depending on your jurisdiction, you may have the right to:

Access — request a copy of the personal data we hold about you
Correction — request correction of inaccurate data
Deletion — request deletion of your account and associated data, subject to your employer's retention obligations
Portability — receive your data in a portable format
Withdraw consent — revoke camera or location permissions at any time via your device settings
Object — object to processing based on legitimate interests

To request account or data deletion, visit our Account Deletion page or email quiqgenietechnologies@gmail.com with your registered user ID. Because this is a workplace application, some requests may need to be handled in coordination with your employer.

10. Children's Privacy

ELLORA Connect is a professional business application intended for use by adults in an employment context. We do not knowingly collect data from anyone under the age of 18.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, where appropriate, notify users through the app or by email. Continued use of the app after changes are posted constitutes acceptance of the revised policy.

12. Contact Us

If you have any questions, concerns, or requests about this Privacy Policy or how your data is handled, please contact us:

Email: quiqgenietechnologies@gmail.com
Support: ELLORA Connect Support
Application: ELLORA Connect