Privacy Policy

1. Who this policy covers

This policy explains how Auriforce (“we,” “us”) collects, uses, and protects personal data through the Auriforce Sales Management Suite. It applies to the employees of businesses we serve (“Customers”) and, where a Customer uses features that involve their own end-customers’ data (for example, test-drive booking or gate-pass verification), to those individuals as well.

2. What we collect

• Account & employee data — name, email, phone number, role, and employment details for people a Customer adds as employees.
• Location data — GPS coordinates captured at visit check-in/check-out, used to verify field visits.
• Expense & claims data — submitted amounts, categories, and receipt images/attachments.
• Customer relationship data — contacts, opportunities, and notes a Customer’s employees enter about their own customers/prospects.
• Messaging data — phone numbers used to deliver WhatsApp notifications (booking confirmations, reminders, approvals).
• AI Assistant interactions — for Customers on an AI-enabled plan, messages sent to the in-app assistant are processed by a third-party AI service provider to generate a response. Don’t include information in an assistant chat you wouldn’t want processed this way.
• Test-drive & dealership data (DemoFlow) — for Customers using DemoFlow, the end-customer’s name, contact details, ID/KYC information collected for a test drive, gate pass, and post-drive feedback.
• Technical data — session/authentication tokens, device/browser information, and basic usage logs needed to operate and secure the service.

3. How we use it

To provide and operate the service a Customer has signed up for: authenticating users, verifying field visits, processing expense claims, running the CRM and incentive/voucher features, sending operational WhatsApp and email notifications, generating AI-assisted drafts and reports when enabled, and maintaining the security and integrity of the platform. We do not sell personal data.

4. Who we share it with

We use a small number of infrastructure and communication providers to deliver the service — for hosting and database infrastructure, network security, transactional email, and (for AI-enabled plans) AI processing. Each is bound by its own data protection terms and only processes data on our instructions to provide their specific function. See our Trust Center for how that infrastructure is secured. A list of the specific providers we use is available on request.

5. Data retention

We retain personal data for as long as a Customer’s account with us remains active, and for a reasonable period afterward to meet our legal, accounting, or dispute-resolution obligations, unless a longer period is required by law. A Customer can request earlier deletion of their business’s data by contacting us (see §8), and we’ll act on that request within a reasonable time.

6. Your rights

Subject to applicable law, you may have the right to access, correct, export, or request deletion of your personal data, and to object to or restrict certain processing. To exercise any of these, contact us using the details in §8 — we’ll respond as promptly as we reasonably can.

7. Security

Data is encrypted at rest and in transit, access is role-based and logged, and infrastructure is chosen for its own independent certifications. Full detail is on our Trust Center.

8. Contact

Questions, requests, or complaints about this policy can be sent to support@auriforce.com, monitored by our team.

9. Changes to this policy

We’ll update this page if our data practices change materially, and update the date above.