Privacy Policy

DexVee is an enterprise workforce management platform operated by ENEOTERIC CONSULTANCY SERVICES PRIVATE LIMITED(“we”, “us”, or “our”). This Privacy Policy explains how we handle personal data collected through our web application at www.dexvee.com and our mobile applications (“the App”).

We collect only the data necessary to provide our services:

• Account information: name, work email address, phone number, and job role — provided during account creation by your organisation’s administrator.
• Authentication data: hashed passwords and one-time-password (OTP) verification codes, delivered via our SMS/email provider, MSG91. We never store passwords in plain text.
• Device identifiers: push notification tokens, issued by Expo’s push notification service, stored on-device in encrypted storage (Expo SecureStore) and on our servers, used solely to deliver push notifications.
• Location data: if you use field-service features, we capture your device’s GPS coordinates only while the app is open and in use — never in the background — at the moment you check in to or complete a work order, as proof of service. We do not track your location at any other time.
• Camera and photos: images you actively choose to capture or select from your photo library to attach to field-service reports, helpdesk tickets, or documents. We do not access your camera or photo library except when you initiate an upload.
• Voice call data: if your role uses the app’s in-app calling feature, calls are placed through our telephony provider, Twilio. We capture call metadata (participants, duration, timestamps) and, where enabled for your organisation, an audio recording of the call. A recorded call is announced at the start of the call.
• WhatsApp and messaging data: if your organisation communicates with its customers over WhatsApp, inbound messages and media sent to your organisation’s business number are received via Twilio (our WhatsApp Business Solution Provider) and stored against the relevant customer record. This is business communication your organisation receives, not your personal messages.
• Usage data: app interactions, CRM records, helpdesk tickets, field service work orders, and other content you create within the platform on behalf of your organisation.
• Technical data: crash reports and diagnostic logs, collected via our error-monitoring provider, Sentry, to maintain service reliability. These are not linked to personal identity beyond what is needed to reproduce and fix the underlying issue.

We do not collect your contacts, calendar, browsing history outside the app, health data, or financial/payment card data. Location and camera access are tied to the specific work-order and reporting features described above — we do not collect either continuously or in the background.

• To authenticate you and maintain your session securely.
• To deliver real-time push notifications about tickets, work orders, and CRM activity relevant to your work.
• To enable collaboration features within your organisation (assigning tasks, team visibility).
• To record GPS location and photo evidence as proof that a field-service work order was completed at the customer site.
• To connect and log calls placed through the app, and to route inbound WhatsApp messages to the correct customer record and helpdesk ticket.
• To provide support and respond to your requests.
• To improve reliability and fix bugs using diagnostic data.

We do not sell, rent, or share your personal data with third parties for advertising or marketing purposes.

We share data only in these limited circumstances:

• Your organisation: your employer or organisation can access your work-related data within the platform.
• Twilio — processes voice calls, call recordings, and WhatsApp messages placed or received through the app.
• MSG91 — delivers SMS and email OTPs for login and verification.
• Google Maps — provides mapping and location-lookup services within field-service and CRM features.
• Expo — delivers push notifications to your device.
• Sentry — receives crash reports and diagnostic logs to help us fix errors.
• Infrastructure providers — hosting, database, and email-delivery providers, operating under strict data-processing agreements, who may not use your data for any other purpose.
• Legal compliance: we may disclose data if required by applicable law or a valid court order.

Each provider above receives only the data necessary to perform its specific function and is contractually restricted from using it for any other purpose.

We retain your personal data for as long as your account is active. You can delete your account at any time from the mobile app (Profile → Delete Account), or by emailing [email protected] from your registered address. All personally identifiable information is anonymised and your account deactivated immediately. Residual backups containing your data are purged on a rolling 90-day schedule.

Work records you created (tickets, CRM entries, work orders) are preserved in anonymised form to maintain data integrity for your organisation. Call recordings and WhatsApp media are retained under the same schedule as the ticket or record they are attached to, and are deleted or anonymised on request.

All data is transmitted over HTTPS (TLS 1.2+). Passwords are hashed with bcrypt (cost factor 12). Authentication tokens are stored in OS-level encrypted storage on mobile devices (Expo SecureStore). Call recordings, photos, and location data are stored on the same access-controlled infrastructure as the rest of your organisation’s records, visible only to authorised users within your organisation. Our servers are hosted in ISO-certified data centres. We apply the principle of least privilege to all data access.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Delete your account and personal data (see Section 5).
• Object to or restrict certain processing.
• Data portability — receive your data in a machine-readable format.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

Location and camera access are requested only when you use a feature that needs them (completing a work order, attaching a photo), and only for as long as that action takes — the app does not track your location or access your camera in the background. You can decline either permission when prompted; declining means you will not be able to use the specific feature that requires it, but the rest of the app remains fully usable.

If your organisation has enabled call recording for in-app calls, you will hear a notice at the start of the call. To request access to, or deletion of, a specific call recording, contact [email protected].

The mobile app requests permission to send push notifications. This permission is optional — declining it does not affect your ability to use the app. You can change your notification preference at any time in your device Settings. When you sign out or delete your account, your push token is immediately deregistered.

DexVee is a professional enterprise application intended for use by adults in a business context. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. Material changes will be communicated via email to the registered address or via an in-app notice at least 14 days before they take effect. The “Effective date” at the top of this page reflects the most recent revision.

For privacy-related questions, data deletion requests, or to exercise your rights, contact us at [email protected].

In accordance with the Information Technology Act, 2000 and the rules made thereunder, the Grievance Officer for ENEOTERIC CONSULTANCY SERVICES PRIVATE LIMITED can be reached at the same address, [email protected]. We will acknowledge grievances within 24 hours and endeavour to resolve them within 15 days.

Our public marketing website at www.dexvee.com uses a small number of browser cookies and similar local-storage technologies:

• Essential/preference storage: a local-storage entry that remembers your light/dark theme preference. This is not a tracking cookie and is never sent to our servers.
• Google Analytics (GA4): we use Google Analytics to understand aggregate website traffic — pages visited, general location, and referral source — so we can improve the site. This is used for our own analytics only; we do not use it for third-party advertising or cross-site ad retargeting.

You can block or delete cookies at any time through your browser settings. The website remains fully usable without them; only aggregate analytics data collection is affected. This section covers the public marketing website only — cookie/local-storage use inside the logged-in application is separate and described in Section 2 above.