Privacy Policy for ShelfEx-ShelfScan (Mobile App & Web Portal)

Effective Date: April 17, 2025

ShelfEx-ShelfScan ("we", "our", or "us") operates the ShelfEx-ShelfScan mobile application and the ShelfEx-ShelfScan web portal (together referred to as the "Service"). We are committed to protecting your privacy and ensuring compliance with international privacy regulations, including:

General Data Protection Regulation (GDPR) (European Union)
California Consumer Privacy Act (CCPA) (United States)
Digital Personal Data Protection Act (DPDP Act) (India)
Other applicable national and sector-specific privacy laws

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our service. By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect the following types of information depending on how you interact with our mobile application and web portal.

a. Information Collected via Mobile App

Camera Access: Required to scan and capture images of shelves or products.
Microphone Access: Used for recording voice notes, if applicable.
Storage Access (Read & Write): Allows the app to save images or reports locally and retrieve them when needed.
Location Data (Fine & Coarse): Used for geo-tagging shelf scans or visits, subject to user consent.
Internet Access: Required to sync data with our secure servers.
Device Information: Includes device ID, operating system version, app version, and crash logs.

b. Information Collected via Web Portal

User Credentials: Name, email, and password when you create or log in to your account.
Business Data: Information entered during usage, such as reports, analysis, shelf data, or uploaded images.
Browser and Usage Logs: Includes IP address, browser type, access times, pages viewed, and referring URL.
Uploaded Files: Files you upload via the web portal interface.

2. How We Use Your Information

We process personal data only for legitimate purposes:

To provide, maintain, and improve our services
To enable core functionalities such as scanning, data syncing, and report generation
To communicate with users regarding updates, support, and service notifications
To prevent fraud, unauthorized access, or abuse of the Service.
To ensure regulatory or legal compliance (if applicable)

We do not use your information for advertising or marketing without your explicit consent, nor do we sell or rent your personal data to third parties.

3. Sharing of Information

We do not share your personal information unless required or permitted under applicable laws. Data may be shared only under the following conditions:

With user consent for specific services
With third-party service providers (e.g., cloud hosting, data processing) under strict contractual security measures.
For legal or regulatory purposes, responding to legal requests or protecting our rights.
In cases of mergers or acquisitions, where data transfers comply with international privacy regulations.

All third-party service providers must adhere to strict data protection measures, including encryption and secure storage standards

4. Data Security

We implement technical and organizational security measures to protect user data from unauthorized access, disclosure, or destruction, including:

End-to-end encryption (AES & HTTPS protocols).
Secure authentication methods (multi-factor authentication, access controls).
Regular security audits and vulnerability assessments.

While we take significant precautions, no data transmission method is entirely secure. Users should follow best practices to safeguard their accounts.

5. Data Retention & User Rights

We retain personal data only for the necessary duration to fulfill the purposes outlined in this policy or comply with legal obligations. Users may:

Access and request copies of their personal data.
Request corrections to inaccuracies.
Request data deletion under applicable laws, subject to legal exceptions.
Withdraw consent for data processing (where applicable).

To exercise these rights, users may contact us at: support@shelfexecution.com

6. Cross Border Data Tranfers

If you access our services from outside your country, personal data may be transferred across international jurisdictions. We comply with applicable cross-border data transfer mechanisms, including:

EU-US Data Privacy Framework for European users.
Standard Contractual Clauses (SCCs) where applicable.
Adequacy decisions for recognized regions.

7. Children’s Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal data from minors. If such data is discovered, it will be deleted promptly in accordance with regulatory requirements

8. Third-Party Services & Integrations

Our app or portal may contain links to third-party websites or integrations such as:

Cloud hosting providers for data storage
Analytics platforms to assess usage trends.
External APIs to enhance user functionalities.

Third-party privacy policies may differ, and users should review them separately.

9. Changes to This Privacy Policy

We may update our Privacy Policy periodically. When changes occur, we will:

Update the Effective Date at the top of this document.
Notify users through appropriate channels (email or app notifications, where required).
Ensure continued compliance with global privacy standards.

10. Contact Us

For any inquiries, suggestions, or privacy-related concerns, please contact us:

📧 support@shelfexecution.com
🌐 https://shelfexecution.com/