Privacy Policy

Last updated: June 3, 2026

Metabu ("we", "our", or "us") operates the Metabu ERP mobile application (the "App"). This Privacy Policy explains how we collect, use, and protect information from employees and authorized field staff ("Users") who use the App as part of their employment duties.

1. Information We Collect

a) Account Information: Name, email address, phone number, employee ID, designation, and department — provided by your employer during account creation.

b) Location Data: GPS coordinates are collected during attendance check-in/check-out, shop visit check-ins, expense claim submissions, and lead captures. Location data is used to verify field presence, enforce geo-fence rules, and detect GPS-based expense fraud.

c) Camera & Photos: The App uses the device camera to capture attendance selfies, shop visit check-in/check-out selfies, cheque images for payment collections, expense receipt photos, and SOS (shelf-of-store) photos. These images are uploaded to our servers and stored securely.

d) Device & Other Identifiers: Device model, operating system version, push notification tokens (used to deliver work-related alerts), and a unique device/installation identifier generated by our crash-reporting and diagnostics provider. These identifiers are used solely for app functionality (such as delivering notifications) and stability monitoring — never for advertising.

e) Crash Logs, Diagnostics & App Performance: We use a third-party crash-reporting and performance-monitoring service (Sentry) that collects crash logs, error diagnostics, device identifiers, and app performance data to help us detect and fix bugs and improve stability. Personal details (name, phone, email, tokens) are scrubbed before transmission; only your user ID and role are attached so we can support you.

f) Transaction Data: Sales orders, collection entries, expense claims, stock updates, lead captures, and quiz responses created through the App in the course of employment duties.

2. How We Use Your Information

Verify attendance and field presence through selfie and GPS validation
Process sales orders, collections, and expense claims
Enforce geo-fencing rules (50m for Beauty Advisors, 100m for Sales Officers)
Detect potential fraud (GPS mismatch >500m, duplicate receipt detection via image hashing)
Calculate incentives, targets, and leaderboard rankings
Send work-related push notifications and alerts
Generate reports for management and accounting purposes
Maintain audit trails as required by company policy

3. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. Your data is accessible to:

Your employer's authorized management and accounting personnel, based on the role hierarchy
Cloud infrastructure providers who host our servers (under strict data processing agreements)
Our crash-reporting and diagnostics provider (Sentry), which processes crash logs and device identifiers on our behalf to improve app stability
Our push-notification provider (Google Firebase Cloud Messaging), which processes the device push token solely to deliver alerts
Law enforcement or regulatory authorities, if required by applicable Indian law

4. Data Storage & Security

Data is stored on secure servers hosted in India. We use HTTPS encryption for all data transmission, JWT-based authentication, and role-based access controls. Photos and documents are stored with restricted access. Offline data is encrypted locally on the device using SQLite and synced securely when connectivity is restored.

5. Data Retention

Transaction data is retained for the duration required by Indian tax and accounting regulations (minimum 8 financial years). Attendance selfies and visit photos are retained for the current financial year plus one year. Account data is retained for the duration of employment and deleted upon request after separation, subject to legal retention requirements.

6. Your Rights

As a User, you may:

Request access to your personal data held by us
Request correction of inaccurate data
Request deletion of your data (subject to legal retention requirements)
Withdraw consent for optional data collection

To exercise these rights, contact your HR department or email us at the address below.

7. Permissions Used

Camera — Attendance selfies, visit photos, cheque & receipt captures
Location — GPS verification for attendance, visits, expenses, and leads
Notifications — Work alerts, approval reminders, escalation notices
Storage — Offline data caching and photo queue

8. Children's Privacy

The App is intended for use by employed adults (18+) only. We do not knowingly collect data from anyone under the age of 18.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Users will be notified of material changes through the App or via email. Continued use of the App after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

Metabu

Email: privacy@metabu.in

Website: https://erp.metabu.in