Privacy Policy

Phone numbers -- used for login, registration, and OTP verification.

CNIC -- collected from field officer profiles for payment KYC (Know Your Customer) verification.

GPS / Location data -- recorded during session tracking, photo metadata, and dealer coordinate mapping.

Bank / Wallet details -- JazzCash, Easypaisa, or bank account numbers submitted for reward withdrawals.

Photos -- product pack photos and barcode images captured during sale recording.

SMS content -- inbound and outbound message logs processed by the SMS campaign engine.

Chat messages and voice call metadata -- in-app communication between users.

Device information -- user agent string and IP address collected during sessions.

Farmer data -- name, village, crop type, and acreage collected during farmer registration.

Sales and financial transaction history -- all sale records, wallet transactions, and withdrawal requests.

All data is encrypted in transit using TLS (Transport Layer Security).

Data is stored in a PostgreSQL database hosted on Neon (a secure, managed cloud database provider).

Passwords are hashed using bcrypt with a cost factor of 10 and are never stored in plain text.

Authentication tokens are signed with HS256 (HMAC-SHA256) and expire after 24 hours.

Session cookies are httpOnly and secure-flagged in production to prevent client-side access.

Access is role-based and follows the principle of least privilege:

Field Officers (Support Officers) can only see their own sales, wallet, and profile data.

Dealers (Channel Partners) can see data for the field officers assigned to them.

Territory Sales Managers (TSMs) can see all data within their assigned territory.

Regional Sales Managers (RSMs) can see data across territories in their region.

Managers and Admins have full platform access for oversight, audit, and support purposes.

Farmers (Agri Experts) can see only their own profile and wallet data.

Audit logs are retained permanently for compliance and fraud detection purposes.

User sessions expire after 1 hour of inactivity and are marked inactive.

Login history is displayed for the most recent 7 days on user dashboards.

Sales records, wallet transactions, and financial data are retained for the lifetime of the campaign and any applicable regulatory period.

SMS logs are retained for the duration of the campaign for dispute resolution.

Deleted accounts: upon request, personal data is anonymized within 30 business days (see section 5).

You have the right to request a copy of all personal data we hold about you (data export).

You have the right to request correction of inaccurate personal data.

You have the right to request deletion of your account and personal data.

You can delete your account directly from the app: in the Rewards app open Me → Danger zone → Delete account (on the web: Profile → Delete Account). This immediately and permanently removes your name, phone number, password, and all login sessions.

Alternatively, to request deletion by email, contact us using the details in section 7 below.

Requests submitted by email will be processed within 30 business days.

Note: certain data (audit logs, completed financial transactions) may be retained in anonymized form for legal and regulatory compliance even after account deletion.

Google Sheets: aggregated marketing analytics data (sales summaries, territory performance) is synced to Google Sheets for campaign reporting. No individual personal data (CNIC, bank details) is shared.

WhatsApp Cloud API (Meta): phone numbers and message content are shared with Meta's WhatsApp Business Platform for sending automated notifications and receiving user messages. This is governed by Meta's data processing terms.

JazzCash / Easypaisa: account numbers and withdrawal amounts are shared with the selected payment provider to process reward payouts.

We do not sell personal data to any third party.

We do not share personal data with third parties for their marketing purposes.

For privacy concerns, data requests, or questions about this policy:

Platform Administrator: INTERACT Solutions

Email: privacy@interactpak.com

Phone: Contact via the app's support chat or call your assigned Territory Sales Manager.

Mailing Address: INTERACT Solutions, Pakistan