SalesPad Privacy Policy

Effective Date: August 22, 2025

This Privacy Policy informs you about our policies regarding the collection, use, and disclosure of Personal Information when you use the SalesPad Service, provided by EatRover.

The SalesPad app is an internal tool intended for use only by the authorized personnel and staff of a partner store. It is not intended for use by the general public or store clients. The SalesPad app is intended for use by adult employees who are 18 years of age or older. We do not knowingly collect personal data from individuals under this age. If we become aware that we have collected such data, we will take immediate steps to delete it.

---

Our Legal Basis for Processing Data

Our legal basis for processing your personal data is the necessity to perform our contract with your employer and our legitimate interest in providing and improving the Service.

---

Information We Collect and How We Use It

The SalesPad app is designed to be a functional tool for order submission and management. It collects the absolute minimum information necessary for you to perform your duties.

Account Information

To use the SalesPad app, you must have an account. Your store manager is solely responsible for creating and managing your account. The only information we require and store to create your user account is:

• Your phone number (used as your username).
• A password you set up to log in. Your password is never stored in plain text. Instead, we use a secure, one-way encryption process called hashing and salting, which protects your password even in the event of a data breach.

We use this Account Information for the sole purpose of authenticating you as an authorized user and granting you access to the Service (i.e., your store's menu and order submission system).

EatRover does not view, process, or use your Account Information for any other purpose. All user account creation, modification, and deletion are handled exclusively by your store's designated manager. The app itself holds no other personal information about you.

---

Operational Data and Privacy for Operators and Couriers

Operational Data refers to the specific, real-time data collected during an authorized work shift to facilitate the dispatch center's core functions.

The **SalesPad app does not collect or track the physical location of SalesPad App users.

The SalesPad app may handle the following types of Operational Data:

• Order information: Details of orders taken, assigned to couriers, dispatched, or delivered by couriers.
• Wallet information: Order totals for a clerk's or operator's shift session, including paid/unpaid amounts and payment method breakdowns (e.g., cash, card, other).
• Shift status: Start and end times of a clerk's, operator's, or courier’s work shift.

---

We are committed to the principle of data minimization. We only collect and retain the necessary Operational Data for the duration of the active work shift and for a limited period afterward, as required for billing, dispute resolution, and operational analysis. This data is de-identified and anonymized where possible.

Data Retention

We retain personal data only as long as necessary to provide the Service and meet our legal obligations. For example, we retain Operational Data for 12 months to allow for billing reconciliation, performance analysis, and the resolution of any disputes. Once the retention period ends, the data is securely and permanently deleted from our active databases and backup systems.

Data Access and Tiered Permissions

Access to Operational Data is strictly controlled based on user roles:

• Operator: Has access to a full view of the application, including the location of current orders and couriers on a map, shift wallets, totals, order history, and support chat.
• Clerk: Has restricted access and can only submit orders for in-house locations. Clerks do not have access to sensitive courier or operational data.

---

Log Data

When you use the app, we may collect data and information (through third-party products) on your device called Log Data. This is standard practice for maintaining app health and security. This Log Data may include:

• Device Internet Protocol (IP) address.
• Device type, model, and operating system version.
• The version of the SalesPad app you are using.
• The configuration of the app when utilized.
• The time and date of your use of the Service.
• Usage statistics and crash reports (de-identified where possible).

We use this Log Data strictly to:

• Diagnose and troubleshoot technical issues and bugs.
• Analyze and improve the performance and functionality of the SalesPad app.
• Ensure the security and integrity of our platform.

---

Cookies

The SalesPad app itself does not use cookies

---

Third-Party Services

We may use third-party services to help us operate, analyze, and improve the SalesPad app. We will disclose the names of these services in our app and link to their respective privacy policies where applicable.

• Google Firebase: We use Firebase services for backend operations. We use Firebase Cloud Messaging to send operational notifications to authorized users, such as alerts for new orders. Your device token is stored securely and used solely for this purpose. We do not share this information with third parties.

These services may collect information, such as Log Data, but we do not share your direct Personal Information (phone number) with them.

---

Data Security

We take reasonable and industry-standard steps to protect the limited information we store. These steps include:

• Secure Storage: We store your login credentials on secure servers.
• Data Encryption: We encrypt your information both in transit and at rest. Your password is never stored in plain text.
• Access Controls: We limit internal access to your information to authorized personnel on a strict need-to-know basis.
• Regular Security Reviews: We conduct regular security reviews to identify and address potential vulnerabilities.

However, please remember that no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

---

Your Rights and Account Management

Your user account for the SalesPad app is created and managed exclusively by your store manager or an equivalent authority at your place of employment.

Therefore, for all matters concerning your user account and the personal data associated with it, you must contact your store manager directly. This includes requests for:

• Access: To know what information is associated with your account.
• Correction: To correct or update your phone number.
• Deletion: To request the deletion of your SalesPad user account.

In compliance with the GDPR and various US privacy laws, any requests for data deletion ("the right to be forgotten") for an individual clerk or courier must be submitted by their employer (the venue manager) to EatRover.

• Requests from venues to delete their entire account and associated data should be submitted via email to info@eatrover.com.
• Upon receipt of a valid request, EatRover will delete the venue's data from its systems within 14 working days, as required for lawful logging purposes.

EatRover does not directly process these requests from individual users of the SalesPad app, as account management is the responsibility of our business partners (the stores).

---

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

---

Contact Us

If you have any questions or suggestions about this Privacy Policy, do not hesitate to contact us at info@eatrover.com.