Privacy Policy

Saveron CRM is a private tool for the field-sales staff of Saveron Digital Inc. and Avenor SARL (“we”). It is not a consumer product. Accounts are either created for staff by an administrator, or created in the app by someone applying to work with us as a freelance sales representative. A new account can do nothing except complete the joining steps described below until an administrator approves it.

This policy covers the Android and iOS app (com.saveron.crm) and the web application at app.saveron.co.

Account details. Your name, work email address, phone number, job title, role, department, referral code and — if you add them — a profile photo, cover image and a short bio. These are entered by your administrator or by you.

Joining. If you apply through the app: your home address, a photo of yourself, photos of both sides of your government ID, a confirmation that you control your email address (a one-time code), and the agreements you sign — a non-disclosure agreement, a freelance offer letter and a freelance contract. For each signature we keep the exact text you signed, your drawn signature and typed name, the time, your IP address, your device and app version, and a PDF copy with a certificate of completion, time-stamped by an independent time-stamping authority. Your ID photos are used only to confirm who you are, are visible only to you and to our administrators, and are never shown elsewhere in the app.

Location. When you log a visit, the app reads your device’s location at that moment and stores it with the visit, together with the distance to the shop, so a visit can be confirmed as having happened on site. While the app is open on your screen, it also shares your current position with your manager and our administrators about every two minutes, so the team can see who is out in the field. Location is read only while the app is open — the app requests no background-location permission and cannot locate you when it is closed or in the background. Only the latest position is kept, and it is shown as where you were last seen. You can decline the permission; visits will then be recorded as unverified, and the team map will show that location is off on your phone.

Work you record. Visits and their notes, the businesses you hold, deals, tasks, photographs you attach to a visit, and the commissions and payouts calculated from them.

Payout details. How you want to be paid — bank account, Whish or OMT number, or cash — if you add them. Only you and our administrators can see them.

Messages. Messages, images, files and voice notes you send to colleagues through the built-in chat. The microphone is used only while you are recording a voice note.

Technical records. A security log of significant actions, which includes your IP address and whether you were on the web or the app; and, if you allow notifications, a push token issued by Firebase Cloud Messaging so we can deliver reminders and messages.

• We do not show advertising and we do not sell your data.
• There are no advertising or analytics trackers in the app. It talks to our own servers and to Firebase Cloud Messaging, and to nothing else.
• We do not track your location in the background.
• We do not collect payment card details, health data, contacts, your calendar, your call logs, your SMS messages, or the other apps installed on your device. Government ID photos are collected only when you apply to join, as described above.

Your colleagues can see your name, photo, job title and the businesses you hold. Administrators and your manager can see your visits, deals, tasks and earnings, and administrators can read the chat conversations held inside the CRM — the app tells you this in the chat screen itself, because oversight you are not told about is surveillance.

Outside the company, we share nothing. The only third parties involved are the ones that run the service for us, and they may use the data only to do that: Hetzner Online GmbH (hosting, Finland/Germany), Cloudflare (file storage and network security), Google Firebase Cloud Messaging (delivering push notifications) and FreeTSA / DigiCert (time-stamping signed documents — they receive only a fingerprint of the file, never its contents). Shop information shown on the map comes from Google Places; we send Google the shop query, never anything about you.

Data is stored on our servers in the European Union. Passwords are stored only as salted hashes, never in readable form, and every connection between the app and our servers is encrypted with TLS.

We keep your records for as long as you have an account with us. When your account is deleted, your personal details — name, contact details, photos, address, ID photos and payout details — are erased. Visit, commission and payout records are kept, without your contact details, for as long as we are legally required to keep business and payroll records, because they are the evidence of what you were paid. Signed agreements are legal records and are kept for as long as the law allows either party to rely on them. If an application is not approved, its ID photos are deleted when the account is deleted.

Location, camera, microphone and notification permissions are all optional and can be withdrawn at any time in your device settings; the rest of the app continues to work without them.

You can delete your account yourself at any time, in the app under Profile → Delete my account (also available while you are still joining). You may also ask us for a copy of your data, ask us to correct it, or ask us to delete it: write to jad@eye.digital and we will answer within 30 days. Records we are legally obliged to retain are kept, without your contact details, even after your account is removed.

Saveron CRM is a workplace tool intended for people aged 18 and over. It is not directed at children and we do not knowingly collect data from them.

If we change how the app handles your data we will update this page and change the date at the top. Material changes will also be announced inside the app.

Saveron Digital Inc. — jad@eye.digital
saveron.co