Your Privacy Matters

1. Who We Are

MoveMentrix IT Solutions Pvt Ltd ("MoveMentrix", "we", "us", or "our") is an Indian company registered at 1103/L02 Plot No.2, Megh Malhar, Sector 10, Ghansoli, Navi Mumbai - 400701. We build and operate TeamTrail, a field force management platform used by businesses to manage their field employees.

This Privacy Policy explains how we handle personal information when you use our website at movementrix.com, our mobile application TeamTrail, and any related services (together, the "Services").

2. Scope of This Policy

This policy applies to:

• Website visitors — anyone browsing our public website
• Business customers — companies that subscribe to TeamTrail and their authorised users
• Field employees — individuals whose data is collected via TeamTrail by their employer

If you are a field employee using TeamTrail, your employer is the primary data controller for your data. We act as a data processor on their behalf. Please also review your employer's internal privacy policy.

3. Information We Collect

3.1 Information you provide directly

• Name, email address, phone number (when you contact us or sign up)
• Company name, designation, and business details (for customer accounts)
• Messages and enquiries submitted through our contact forms
• Payment and billing information (for subscribed customers)

3.2 Information collected automatically (website)

• IP address, browser type, device type
• Pages viewed, time on site, referring URL
• Cookies and similar technologies (see Section 11)

3.3 Information collected through TeamTrail (app)

When used by field employees through their employer's TeamTrail account, the app collects:

• Location data (GPS): coordinates, accuracy radius, timestamp — collected only during configured working hours
• Selfie photos: captured during attendance check-in for identity verification
• Visit data: client location, check-in/check-out times, notes, visit outcomes
• Work photos: images captured at client sites as proof of visit or work completion
• Expense data: amounts, categories, bill photos, GPS-tagged timestamps
• Device information: device model, OS version, app version, battery status
• Network information: connection type (used to sync offline data)

4. How We Use Your Information

We use personal information for the following purposes:

• Service delivery: providing TeamTrail features to subscribed customers
• Attendance verification: confirming field employees were at claimed locations
• Reporting: generating attendance, visit, expense, and coverage reports for employers
• Customer support: responding to enquiries and troubleshooting
• Product improvement: analysing usage patterns to improve features (using aggregated, anonymised data)
• Communications: sending service updates, invoices, and important notices
• Marketing: sending product news and offers (only with consent, and you can opt out anytime)
• Legal compliance: meeting applicable legal and regulatory obligations
• Security: detecting and preventing fraud, abuse, and unauthorised access

5. Legal Basis for Processing

We process personal data based on one or more of the following legal grounds under India's Digital Personal Data Protection Act (DPDP Act) 2023:

• Consent: You have given clear consent for specific purposes (e.g., marketing communications)
• Contract: Processing is necessary to deliver the Services you or your employer have engaged us for
• Legal obligation: Processing is required to comply with Indian law
• Legitimate use: Processing is necessary for legitimate business purposes that do not override individual rights (e.g., fraud prevention)

6. Field Employee Data — Special Provisions

We recognise that collecting location and selfie data from field employees is sensitive. To protect employee privacy, we enforce the following principles in TeamTrail:

• Work-hours only: Location tracking is automatically disabled outside configured shift hours
• Transparency: Employees can see their own data — attendance history, visit logs, expense records — the same as their manager
• Purpose limitation: Data is used only for attendance, verification, and reporting purposes — never for personal surveillance
• Access control: Raw data is accessible only to authorised users within the employer's organisation
• No third-party sale: We never sell or share field employee data with third parties for marketing or any purpose unrelated to service delivery

Employers using TeamTrail are responsible for informing their employees about data collection and obtaining any required consent, in line with the DPDP Act.

7. Data Sharing

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:

7.1 With your employer (for field employees)

Field employee data collected via TeamTrail is accessible to authorised users within the employer's organisation.

7.2 With service providers

We use trusted third-party providers for hosting, cloud storage, payment processing, and email delivery. These providers are bound by strict data protection agreements and process data only per our instructions.

7.3 With your consent

We share data when you specifically request or authorise us to do so.

7.4 For legal reasons

We may disclose data if required by law, court order, or government authority, or to protect our legal rights and the safety of users.

7.5 Business transfers

If MoveMentrix is involved in a merger, acquisition, or sale of assets, personal data may be transferred. We will notify affected users before any such transfer takes effect.

8. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy:

• Website contact enquiries: 12 months from last interaction
• Customer account data: For the duration of the subscription, plus 3 months after termination for backup purposes
• Field employee location and visit data: As per employer agreement — default 12 months, configurable per customer
• Attendance and selfie records: 12 months unless employer specifies otherwise
• Invoice and billing data: 8 years (as required by Indian tax law)
• Website analytics data: 26 months (standard Google Analytics retention)

After the retention period expires, data is securely deleted or anonymised.

9. Data Security

We implement industry-standard security measures to protect personal data, including:

• Encryption of data in transit (HTTPS/TLS) and at rest
• Secure cloud infrastructure with access controls
• Role-based access — employees see only what they need
• Regular security audits and monitoring
• Multi-factor authentication for administrative access
• Secure backup procedures with encrypted storage
• Anti-spoofing and anti-tampering for location data

While we take security seriously, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but commit to notifying affected users within 72 hours of discovering any material data breach.

10. Your Rights

Under India's DPDP Act and general data protection principles, you have the following rights:

• Right to access: Request a copy of the personal data we hold about you
• Right to correction: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data (subject to legal retention obligations)
• Right to withdraw consent: Withdraw consent for marketing communications at any time
• Right to grievance redressal: File a complaint with our Grievance Officer or the Data Protection Board of India
• Right to data portability: Request your data in a structured, commonly used format
• Right to nominate: Nominate someone to exercise your rights in case of death or incapacity

To exercise any of these rights, email us at sales@movementrix.com. We will respond within 30 days.

If you are a field employee, please contact your employer first — they are the primary controller of your data. We will assist them in handling your request.

11. Cookies & Tracking

Our website uses cookies and similar technologies to:

• Keep you logged in during a session
• Remember your preferences
• Analyse website traffic (via Google Analytics or similar tools)
• Improve site performance and user experience

You can control cookies through your browser settings. Disabling cookies may affect website functionality. We do not use cookies to track you across other websites for advertising purposes.

12. Children's Privacy

TeamTrail is a business-to-business product intended for use by adults aged 18 and above. We do not knowingly collect personal data from children under 18. If we become aware that we have inadvertently collected such data, we will delete it promptly.

If you believe a child has provided us with personal information, please contact us at sales@movementrix.com.

13. International Data Transfers

Our primary data storage is in India. Some of our service providers (such as cloud hosting and analytics tools) may store or process data outside India. When data is transferred internationally, we ensure:

• Adequate data protection safeguards are in place
• Compliance with the DPDP Act's transfer requirements
• Contractual protections with all third-party processors

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements.

When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Notify subscribed customers by email
• Display a notice on the website for 30 days

Your continued use of the Services after any change constitutes acceptance of the updated policy.

15. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

This Privacy Policy is governed by the laws of India. Any disputes arising from this policy will be subject to the exclusive jurisdiction of courts in Navi Mumbai, Maharashtra.