Privacy policy

1. Who we are, and who is responsible for your data

Satota Field Force is a field-force and distribution management service made and run by Satota Technologies Ltd, Bhai Bhai Plaza, Baniapatti Road, Panchagarh, Bangladesh ("Satota", "we").

Companies (for example FMCG, pharmaceutical and distribution businesses) subscribe to the service and use it to manage their own employees and sales representatives. The app is not for the general public: an account is created for you by your employer; you cannot sign up by yourself.

• Your employer is the data controller: it decides which features are switched on, what is recorded about your work and how long it keeps its records.
• Satota is the data processor: we host and run the service for your employer, and we use your data only to provide the service on its behalf and under this policy.

For questions about what your employer records or keeps, you may ask your employer (your manager, HR or the administrator of the service in your company) or ask us; we will pass the request on.

2. The data we handle

Depending on the features your employer uses, the service handles:

• Account and identity: your name, mobile number, e-mail address (optional), employee code, designation, the area and team you belong to, your role, and a profile photo if one is added.
• Sign-in: your password (stored only as a secure one-way hash, never in readable form), sign-in times and the network (IP) address used.
• Precise location, only in connection with your work (see section 4): while you are checked in, the GPS position with its accuracy, speed and direction, the time, whether the phone reported a mock (fake) location, and the phone battery level at that moment; and the place where you check in or out, visit a shop, add a new shop or record a collection.
• Photos you take in the app: a check-in selfie for attendance, and photos of visits, receipts, bills and complaints. Photos are taken with the camera when you choose to; the app does not read your gallery or other files.
• Work records you enter: attendance, journey plans, outlet and project visits, orders, collections and payment amounts, expense claims, leave applications, daily call reports, complaints, notes and targets.
• Device information: a random identifier created when the app is installed (not your phone's IMEI, serial number or advertising ID), the phone model, Android version and app version. Your employer uses it to approve the phone you work from.

We do not collect your contacts, messages, call logs, browsing history, health data or any data from other apps. The app contains no advertising and no analytics or tracking SDKs.

3. Why we use it, and the legal basis

• To run the service for your employer: record attendance, plan and verify field visits, take orders and collections, handle expenses and leave, and produce the reports your managers use.
• To keep the service secure: sign-in protection, approving the phone an account may use, and an audit log of important actions.
• To support you and your employer when something does not work.

Your employer processes this data to manage the employment relationship and its business (for example, to pay travel and daily allowances correctly and to verify collections). Satota processes it only on your employer's instructions and under our agreement with them. We never use your data for advertising, never build profiles for others, and never sell or rent it.

4. Location — only while you are on duty

Location is the most sensitive data the app handles, so it is limited on purpose:

• The app records your location only after you check in for the day, within your working hours, and stops when you check out or the working hours end. While you are checked in it keeps recording when the app is in the background or the screen is off. Outside working time it does not track you.
• Apart from that, the app takes your position once when you do something that needs it: checking in or out, starting or finishing a visit, adding a new shop or recording a collection. It is saved with that record to show where it was made. Showing how far a shop is, or sorting shops by distance, uses your position on the phone only; it is not sent.
• While it is recording, Android shows a notification that stays for as long as tracking is on ("Field Force — on duty: your location is shared while you are checked in"), so you can always see it.
• Tracking runs as a visible foreground service. The app does not ask for, and does not use, the "Allow all the time" (background location) permission.
• Your employer sets how often a position is taken and the working hours. Your location is used for attendance, visit verification, route and distance reports (for example, for travel allowance) and for your managers to see where the team is during the working day.

You can refuse the location permission in Android settings at any time. Features that need your location (check-in, visits) will then not work, and your employer may treat that under its own rules.

5. Who can see your data

• Your employer: only people in your company with the right permission — for example your managers for their own team or area, HR or accounts. Each company's data is kept separate from every other company's by the database itself.
• Satota staff: only when needed to operate, secure or support the service, bound by confidentiality.
• Hosting: the service runs on servers Satota operates, in Bangladesh-hosted infrastructure. Data travels over encrypted connections (HTTPS).
• Map images: to draw maps, the app and portal load map tiles from a map-tile provider. That provider receives only the technical request (the network address and the map area being shown), not your name, account or location history.
• Authorities: only when the law requires it, for example a valid court order.

We do not share your data with advertisers, data brokers or any other third party, and we do not sell it.

6. How long data is kept

• Location history: kept for the number of days your employer sets (180 days unless your employer chooses otherwise), then deleted automatically.
• Work records and photos (attendance, visits, orders, collections, expenses, leave): kept while your employer uses the service, as its business records. Some of them, such as financial records, your employer may have to keep for a period required by law.
• Your account: kept while you work for the employer; your employer deactivates it when you leave.
• When a company stops using the service, we delete its data within 90 days of the end of the agreement, unless the law requires otherwise or the company asks for a copy first.

7. How we protect it

• Encrypted connections (HTTPS) between the app, the portal and the server.
• Passwords stored only as a salted one-way hash (scrypt); sign-in attempts are limited against guessing.
• On the phone, sign-in tokens are kept in Android's secure storage; signing out removes the work data from the phone.
• Each company's data is isolated in the database (row-level security), and access inside a company follows roles and areas.
• A new phone must be approved by your employer before it can be used with your account.
• Important actions (sign-ins, permission changes, approvals) are written to an audit log that cannot be edited.

No system is perfectly secure. If a breach affects your data, we will inform your employer without undue delay so that you can be told and the right steps can be taken.

8. Your choices and rights

You can ask to see the data held about you, to correct it, or to have your account and data deleted:

• Many details (name, phone, area) are managed by your employer — ask your manager or the administrator to correct them.
• To delete your account or some of your data, use the form at https://fieldforce.satotatech.com/delete-account, the "Delete my account" link in the app's settings, or write to support@satotatech.com.
• We carry out a deletion request within 30 days. Records your employer must keep by law (for example payments you collected, or expense claims that were paid) may be kept for that required period, and are deleted after it.
• You can withdraw the location and camera permissions in Android settings at any time.

If you are not satisfied with the answer, you may raise the matter with the relevant authority in Bangladesh.

9. Children

The service is a workplace tool for employees and is not intended for anyone under 18. We do not knowingly handle data of children. If you believe a child's data has been entered, contact us and we will have it removed.

10. Changes to this policy

When this policy changes, we publish the new version on this page with a new effective date. If a change is significant, we will also tell the companies that use the service, and show a notice in the app or portal.

11. Contact

Satota Technologies Ltd, Bhai Bhai Plaza, Baniapatti Road, Panchagarh, Bangladesh.

E-mail: support@satotatech.com · Phone: +880 1737-934742