Privacy policy

Who we are

Mr Sales is operated by Cleocure Lifesciences Private Limited, Vanasthalipuram, Hyderabad, Telangana 500070. For privacy questions, write to support@mrsales.in.

This website

If you ask for a demo, we receive your name, company, work email, the size of your field team, and, if you give them, your mobile number, city and a note. The form sends them to our sales inbox by email, through our email provider, Resend. We use them only to arrange and follow up on the demo.

This website sets no advertising or analytics cookies. Our website host, Vercel, keeps standard request logs. We keep a demo request while we are arranging that demo, and we delete it when you ask.

The Mr Sales app and console

When a company uses Mr Sales, that company decides whose data goes in and why. We process it on the company’s behalf, to run the service. There is no public sign-up. The company creates each login.

The service holds, for each person the company adds:

• Profile details: name, work email, phone, employee ID, role, reporting manager, territory and area.
• Work records: day plans, visits and call reports, orders, expense claims with receipts, tour plans, leave and attendance.
• Chat messages between people in that company.
• Precise location, recorded at each visit, and sent when a manager asks where a team member is and the app is open on that person’s phone. If a person shares a location in chat, or starts a live share, the app sends their position while that chat screen is open. The app does not collect location in the background. If the phone reports a position from a fake-location app, the attempt is recorded and the person’s manager is told.
• Photos and receipts the person takes or chooses in the app. The app does not read the whole photo library.
• Payslips and HR documents, if the company chooses to publish them.

Access inside a company follows the roles and scopes the company sets. A visit photo or receipt can be opened by the person who took it, the managers above them, and the company’s office roles. Data is kept apart from every other company’s in the database itself. We do not sell this data, and we do not use it for advertising.

What the phone app asks to use

• Location, only while the app is open: to check a visit is at the client, to answer a manager who asks where a team member is, and to share a location in chat when the person chooses to. The phone’s own place-name service (Google’s on Android, Apple’s on iPhone) turns a position into a street or area name.
• Camera, to take a photo at a visit, of a receipt, or for chat.
• Photos, through the phone’s own picker, one photo at a time. The app cannot browse the library.
• Notifications, if the person allows them: to tell them of a request waiting for them, a decision on theirs, a task, a message or an announcement. Each notification carries its title and a line of text.
• Whether a fake-location app or a tool that roots the phone is installed, on Android. The app looks at which installed apps ask Android for permission to fake the location, and for a known list of root tools. This is checked on the phone and the list of apps is not sent or kept. If one is found, the app does not open until it is removed, and the person’s manager is told its name.

The app creates an identifier for its own installation, so a manager can be told when a login is used on a new phone. If notifications are allowed, the phone is also given an address for them by Google’s Firebase Cloud Messaging; we keep it while the person is signed in on that phone and delete it when they sign out. So that it works where there is no signal, the app keeps a copy of what the person last viewed in its own storage on the phone, and deletes it when they sign out.

The app does not use the microphone, contacts, calendar, SMS or Bluetooth, and it does not read the phone’s IMEI, serial number or SIM details. It shows no advertising and runs no advertising or tracking software. You can change any permission in the phone’s settings; a visit then records that no location was available.

Google Play and the App Store, where the app is installed from, handle their own data under their own policies.

How we protect it

• Everything between the app, the console and our providers travels over HTTPS.
• The database decides who may read each record, company by company and role by role, so a screen cannot show more than its user is allowed to see.
• Photos, receipts and documents are private files. They open through links that stop working after an hour.
• Each person sets their own password. Nobody at Mr Sales or at your company is told what it is.

No system is perfectly secure. If a breach affects personal data, we tell the companies affected without delay, and the people affected and the authorities where the law requires it.

Who processes data for us

• Supabase: database, sign-in and file storage for the app and console.
• Resend: sign-in, invitation and password emails, and demo requests from this website.
• Vercel: hosting for this website and the web consoles.
• Google Firebase Cloud Messaging: delivers the app’s notifications to the phone. It receives the notification’s title and text and the phone’s notification address.
• OpenStreetMap: the map tiles in the app. Its servers receive the map area being viewed and the phone’s internet address, as any website does; they are not told who is using the app.

Data is sent to these providers over HTTPS.

When we would share data otherwise

• When the law requires it, such as a valid order from a court or a government authority. We share only what the order covers.
• If Cleocure Lifesciences Private Limited or Mr Sales is merged or sold, the data moves with the service, and the new owner must keep the promises on this page.

There is nobody else: no advertisers, no data brokers, no marketing partners.

How long we keep it

We keep a company’s records while that company uses Mr Sales. When it stops, it has 30 days to ask for a full export, and we then delete its data within 90 days, as theterms of service set out. A person can ask for their own account to be deleted; how is onDelete your account. We confirm the request with the company that created the login, then delete the account and the personal data we hold for that person. We keep a record where the law requires it.

Your rights

You can ask to see the personal data we hold about you, to correct it, or to erase it. If you work for a company that uses Mr Sales, your company is your first contact, because it decides what goes in. You can also write to us at support@mrsales.in.

If you are not satisfied with how we handle a complaint, you can take it to the Data Protection Board of India.

Who Mr Sales is for

Mr Sales is a work tool for adults employed by the companies that use it. It is not meant for anyone under 18, and we do not knowingly hold data about children.

Changes to this page

When this policy changes, the date at the top changes with it. The field app links to this page.