1. General Provisions
This Privacy Policy explains what information is processed when using PromoPoint and for what purposes such information is used in the mobile application, on the website and across related digital service channels.
The Policy applies to data received when registering a mobile account, joining a company, receiving and performing tasks, using routes, contacting support, completing authentication steps, receiving notifications and using other service functions.
2. Who Receives and Uses the Data
The operator of PromoPoint is Individual Entrepreneur Toderica Ion Alexandrovich. The operator processes the data necessary to run the platform, maintain security, authenticate users, provide support and deliver the application functionality.
The organization that the user voluntarily joins through the service may access data related to tasks, work statuses, routes and geolocation where such data is required to assign, perform and supervise orders. That organization is independently responsible for the lawfulness of its subsequent use of the data within its own business operations.
3. What Data May Be Processed
Depending on the functions used, the service may process:
- last name, first name and middle name;
- phone number and email address;
- password in protected form, authorization tokens and login session information;
- information about the company, project, invitation or the user's connection to an organization;
- information about assigned tasks, routes, visit points, statuses, timestamps and other work events;
- coordinates, route points, travel history during an active task or work mode and the timestamps of geo-events;
- device and application data, including app version, device model, operating system, IP address, country derived from IP, push token, battery level, charging state, signs of location spoofing (mock location, active VPN, root or jailbreak access), error logs and diagnostic events uploaded to the operator's servers for technical diagnostics and fraud prevention;
- profile data, including avatar, where uploaded by the user;
- support requests and other messages sent by the user through available communication channels.
4. Purposes of Processing
Data is used for the following purposes:
- creating and maintaining the mobile account;
- verifying the user's identity when signing in and recovering access;
- connecting the user to a company only after the user has registered and confirmed the relevant action;
- assigning, displaying, performing and supervising tasks;
- generating routes, confirming presence at a location, calculating estimated arrival times and maintaining work records;
- protecting users, companies, customers and the service infrastructure;
- sending push notifications, emails, one-time codes, app update notices and other service messages;
- investigating incidents, preventing abuse, auditing actions and protecting against fraud;
- verifying work-process integrity, detecting location spoofing and unsafe attempts to bypass operational controls;
- improving product quality, providing technical support, testing and developing the service;
- complying with legal obligations and lawful requests from public authorities.
5. When and How Geolocation Is Used
If the user does not grant the application permission to access location data, the service does not receive the device's background geolocation. Location access is requested separately by the operating system and can be changed by the user at any time in device settings.
Foreground location may be used while the application is open to display a route, current point and other features directly related to a task.
Background geolocation is used only when the user has personally started an active task, route, shift or work mode that requires such transmission. During that period, the service may receive and transmit coordinates in the background in order to:
- display route progress;
- confirm presence at a delivery or visit point;
- track the status of an active task;
- support logistics, safety, internal reporting and dispute resolution.
Once the active task is completed or the relevant permission is disabled, background geolocation collection stops. PromoPoint does not use the user's location data for advertising, sell such data to third parties or build covert consumer profiles.
6. Legal Grounds for Processing
Data is processed on the basis of:
- the user's consent;
- the necessity to perform a contract, provide access to the service and enable the functions requested by the user and the company;
- compliance with legal obligations;
- the operator's legitimate interest in maintaining security, functionality and resilience of the service.
7. Data Sharing and Third-Party Access
Data may be transferred to or made available to:
- the organization that the user has joined through the service, to the extent necessary to assign and supervise tasks;
- the operator's contractors that provide hosting, email and push delivery, monitoring, technical support, backup, infrastructure protection and other technology services required for PromoPoint to operate;
- competent public authorities where required by law.
The operator does not sell the user's personal data and does not disclose it to advertising data brokers for their independent marketing use.
8. Data Retention and Protection
Data is stored for as long as necessary to achieve the processing purposes, fulfill obligations to the user and the company, maintain records, resolve disputes, protect rights and comply with legal requirements.
Reasonable organizational and technical safeguards are applied to protect data, including access control, authentication, event logging, backups, security incident management and software updates.
9. User Rights and Settings Controls
The user may:
- request information about the processing of their data;
- request correction or updating of inaccurate data;
- withdraw consent where processing is based on consent;
- request deletion or restriction of processing where provided by law;
- delete the mobile account through the application; once deletion is confirmed, the account is removed from the active part of the service, authorization tokens, avatar, password-recovery data and operational links are deleted, while an archived user record may be retained in a dedicated restricted-access table where and to the extent permitted by law;
- manage location and notification permissions in device settings.
Disabling location access or background location access may make certain functions unavailable or limited, including route-related features, task-completion confirmation, work-status control and safety tools.
10. Changes to the Policy
The current version of the Policy is published within the service and/or on the PromoPoint website. The operator may update the Policy as service functionality, data processing methods, legal requirements or business processes evolve.
11. Contact
Questions regarding privacy, personal data processing and the exercise of user rights should be submitted through the contact channels indicated in the PromoPoint interface and on the official website https://promopoint.pro.
12. Operator Details
The operator of PromoPoint is Individual Entrepreneur Toderica Ion Alexandrovich.
Operator details:
- full legal name: Individual Entrepreneur Toderica Ion Alexandrovich;
- business form: Sole Proprietor;
- Primary State Registration Number of Sole Proprietor (OGRNIP): 324710000012312;
- Taxpayer Identification Number (INN): 713008327111;
- registration date: February 26, 2024;
- registering authority: Office of the Federal Tax Service for the Tula Region;
- tax registration date: February 26, 2024;
- tax authority: Office of the Federal Tax Service of Russia for the Tula Region;
- OKPO: 2030098094;
- OKATO: 70401364000;
- OKTMO: 70701000001;
- Pension Fund registration number: 1311663601;
- Pension Fund registration date: February 27, 2024;
- address: 25 Oboronnaya Street, Office 32, Tula, Russia;
- website: https://promopoint.pro.