Privacy Policy

Gasht is a field activity platform used by businesses to plan and record customer visits, follow-ups and meeting notes made by their field staff. It is published by Tapas Dutta. A company (your employer or the business you work with) signs up for Gasht, invites its staff by mobile number, and owns the business data recorded in its account. In short: the data you record in Gasht is stored on Gasht servers hosted in India, belongs to the company whose account you use, is never sold, and is never used for advertising.

Who we are

The app, the web dashboard at https://gasht.duttatech.in and the service behind them are provided by Tapas Dutta (“we”, “us”). For any privacy question or request, contact tapasdutta@outlook.com.

Two roles: the company and its users

Gasht is a business tool. The company that creates an account (the “customer”) decides who may use it, which staff see which records, and how long records are kept. We process that company’s data on its behalf. If you are a field user, the company you work for is the owner of the records you create; questions about those records go to its administrator first.

What data the app handles

When you use Gasht, the following information is stored in your company’s account:

• Your account — name, mobile number, optional email and photo, your role and team.
• Customers and prospects — names, phone numbers, addresses, area, stage and notes your company records.
• Visits — the customer visited, visit type and purpose, meeting notes, check-in / check-out time.
• Visit photos — taken inside the app, stamped with the date, time and GPS location of the visit.
• Location at the moment of saving a visit (latitude, longitude and accuracy) — never in the background.
• Follow-ups — dates, reminders, outcomes and reschedule reasons.
• Device details needed to sign you in and send notifications — a device identifier and a push-notification token.

Location and camera

Gasht asks for location permission so that a visit can be stamped with the place where it was recorded. Location is read only when you save a visit; the app has no background location service and does not track your movements or route. Photos are taken with the in-app camera so that they are genuine, timed and geo-stamped; the app does not read your photo gallery. A consent screen explains this before the first visit is saved, and you can revoke either permission in your phone’s settings at any time (visits can then no longer be stamped).

Sign-in by mobile number

You sign in with a one-time code sent to your mobile number. The code is delivered using Google’s Firebase Authentication, which processes your phone number to send and verify it. After that Gasht issues its own sign-in token to your device; we never see or store a password. Signing out, or being removed by your company administrator, wipes the app’s local copy of the data from the phone.

Notifications

Follow-up reminders and team updates are delivered through Firebase Cloud Messaging. For this, a push token for your device is stored with your account and removed when you sign out.

Where data is stored and who can see it

Company data is stored in a separate database for each company on servers located in India, with photos in encrypted object storage, and is transmitted over HTTPS. Inside a company, your administrator decides which roles can see which records (for example a field user sees only their own customers and visits; a manager sees their team). Tapas Dutta’s staff access company data only to operate, support and secure the service. We do not sell personal data, do not share it with advertisers, and do not use it to profile you.

Service providers

• Hostinger International — cloud servers in India that run the service and store the databases and photos.
• Google Firebase — phone-number sign-in (Authentication) and push notifications (Cloud Messaging).
• Google Play — app distribution; Play may share basic install and crash statistics with us.

No analytics or advertising SDKs are included in the app.

How long we keep data

Records stay in the company’s account for as long as the company keeps using Gasht and chooses to keep them. When a company closes its account, its data is exported for it on request and then permanently deleted after a short grace period. Daily backups are kept for 30 days and then overwritten. If your administrator removes you, your sign-in is disabled immediately and your personal details are deleted; visits you recorded remain part of the company’s business records.

Your rights

Under India’s Digital Personal Data Protection Act, 2023 and similar laws you may ask to see, correct or delete personal data about you. For data inside a company account, contact your company administrator; for anything else, email tapasdutta@outlook.com and we will respond within 30 days. How to delete your data is explained on the Data Deletion page.

Children

Gasht is a workplace tool for adults and is not intended for anyone under 18.

Changes

We will post any change to this policy on this page and update the date above. Material changes are also announced inside the app.

Contact

Tapas Dutta · tapasdutta@outlook.com · https://gasht.duttatech.in