1. Introduction & Scope
Jononi Motors ERP ("the Application", "we", "our") is an enterprise resource planning and
operations management platform designed for authorized employees, executives, and representatives of
Jononi Motors.
This Privacy Policy explains how we collect, use, store, and protect information when you install and use the
mobile application. By accessing or using the Application, you acknowledge and agree to the practices described
in this policy.
2. Information We Collect
To facilitate authorized access and enterprise operations, the Application collects and processes the following
categories of data:
A. Authentication & Profile Data
- User Credentials: Username, email address, hashed passwords, and employee identification
number.
- Role & Store Permissions: Role ID, assigned warehouse/store affiliations, and
role-based access control (RBAC) capability mappings.
- Session Tokens: Secure cryptographic JWT access tokens stored locally in encrypted device
storage.
B. Operational & Business Workflow Data
- Inventory & Reorders: Product stock levels, SKU counts, reorder alerts, warehouse
transfer notes.
- Sales & Financial Records: Quotation requests, sales invoices, client directory
profiles, and daily ledger summaries.
- Dispatch & Gate Passes: Vehicle dispatch queues, gate pass verification status, and
physical Proof of Delivery (POD) confirmations.
- Workflow Approvals: Managerial approval actions, leave submissions, and requisition audit
logs.
C. Device Information & Technical Diagnostics
- Device model, operating system version, app version, network connectivity status, and server IP endpoint
logs used solely to audit and secure enterprise API communication.
D. Device Permissions
- Camera (Optional): Used only when capturing photos for Proof of Delivery (POD), physical
receipts, or scanning item barcodes.
- Storage / Media (Optional): Used to download and save PDF catalogs, invoice receipts, and
transaction records locally.
- Internet: Required to communicate with your enterprise ERP server endpoint over secure TLS
channels.
3. How We Use Your Information
We process collected data exclusively for legitimate enterprise purposes:
- Verifying employee identity and preventing unauthorized access to corporate inventory and financial data.
- Enforcing organizational capability boundaries (e.g., separating sales, inventory, and management
approvals).
- Synchronizing real-time inventory adjustments and offline cached dashboard metrics.
- Providing background status refresh and urgent operational alerts (e.g., stock reorder warnings, approval
notices).
- Ensuring statutory accounting compliance and transaction traceability.
Zero Commercialization: We do not sell, rent, monetize, or share employee or corporate data
with third-party advertising networks or commercial brokers under any circumstances.
4. Data Storage & Security Measures
We employ robust industry-standard safeguards to protect enterprise data from unauthorized access, alteration,
or disclosure:
- Transport Layer Security: All API communication between the mobile panel and the server is
encrypted using TLS 1.3 / HTTPS.
- Hardware-Backed Keystore Storage: Sensitive session tokens are encrypted on-device via
Flutter Secure Storage (using Android Keystore / iOS Keychain).
- Offline Cache Protection: Dashboard cache data is stored locally in sandboxed application
directories inaccessible to other applications.
5. Account & Data Deletion (User Rights)
In strict compliance with Google Play User Data and Account Deletion policies, all users
possess the right to delete their application account and request the removal of their personal data.
In-App Deletion Option:
You can request account deletion directly within the mobile application at any time:
Open Navigation Drawer → Tap "Delete Account" → Confirm deletion in the prompt.
What Happens When You Delete Your Account:
- Your active JWT authentication token is immediately revoked on the server.
- All locally cached offline data, user preferences, and stored tokens are wiped from your device.
- Your user profile is queued for administrative deactivation in the corporate database.
- All active permissions and workflow authorization privileges are immediately rescinded.
Administrative / Web Deletion Request:
If you no longer have access to the application or wish to submit an administrative deletion request, you may
contact the designated Jononi Motors System Administrator or IT/HR department:
- Department: Enterprise IT & System Administration Desk
- Subject Line:
Account Deletion Request - Jononi Motors ERP
- Information Required: Your registered username and employee ID.
Note on Statutory Records: In compliance with commercial taxation and accounting regulations,
historical transactional logs (such as previously signed invoices, financial ledger entries, and completed
dispatch delivery notes) will be archived in accordance with statutory retention schedules.
6. Children's Privacy
The Application is an enterprise tool intended strictly for authorized adult workforce personnel. We do not
knowingly solicit or collect personal information from individuals under the age of 18.
7. Updates to This Policy
We may update this Privacy Policy periodically to reflect enhancements in application functionality or changes
in applicable regulatory requirements. Any modifications will be published here with an updated "Effective
Date."
8. Contact Information
If you have questions, feedback, or concerns regarding this Privacy Policy or our data protection practices,
please contact our enterprise administration team:
Jononi Motors Enterprise Administration
Department: IT & System Administration Desk
Contact: Reach out directly to your designated ERP System Administrator
Headquarters: Jononi Motors Corporate Administration