SFA is a Sales Force Automation app for field sales teams. It connects to your organization’s OpenSkylabz ERP backend (server URL configured via QR code or manual setup). Business data is processed on your organization’s servers, not on public OpenSkylabz consumer services, unless we explicitly state otherwise.
The App may collect and process the following information for authentication and account access:
Email address
Password
Access tokens and refresh tokens
User profile information returned by your organization’s server, such as name, role, sales person ID, and permissions
When you sign in, your password is transmitted securely to your organization’s authentication server for identity verification.
To support offline sign-in, the App may store your email address and password locally on your device after a successful online login. Where supported, these credentials are stored using secure or encrypted storage mechanisms provided by the device or operating system.
Locally stored credentials are used only to support authentication and offline access to the App.
You can remove locally stored credentials by:
Logging out of the App
Clearing the App’s data from your device settings
Uninstalling the App
We do not sell or share your password with third parties. Password verification is performed by your organization’s authentication server.
Access tokens, refresh tokens, and certain account information may also be stored locally on your device to maintain your login session and support offline functionality.
When you use the App, it may access, display, create, or sync:
Customers, products, warehouses, and stock levels
Sales orders, invoices, receipts, and quotations
Sales areas, bank accounts, and related ERP master data
Pending/offline transactions created while disconnected
This data is sent to and retrieved from your configured API server.
API server URLs and connection settings (from QR scan or manual entry)
App preferences (e.g. printer settings, receipt layout)
If you grant location permission, the App may collect GPS coordinates (latitude/longitude) when creating certain records (e.g. customers, invoices, receipts) for audit or field-visit purposes. Location is not collected continuously in the background.
The camera is used to scan QR codes for server configuration. Photos or videos are not stored unless required for a feature you actively use.
Bluetooth is used to connect to receipt/printer devices. The App does not use Bluetooth for location tracking.
To support offline operation, the App stores data on your device using:
Browser/device storage (e.g. localStorage)
Local database (IndexedDB/SQLite)
This may include cached business data, login session backup, and unsynced transactions until they are uploaded when connectivity is restored.
We use collected information to:
Authenticate users and maintain secure sessions
Perform sales, invoicing, receipting, and related ERP operations
Enable offline access and sync when online
Print receipts via connected Bluetooth printers
Attach location to business records where enabled
Improve reliability and security of the App
We do not sell your personal information to third parties.
Information is shared only as follows:
Recipient Purpose
Your organization’s ERP/API server Core app functionality
Google Play / device OS services App distribution, optional device backup (if enabled on device)
Legal authorities When required by applicable law
The App does not include third-party advertising or analytics SDKs for tracking users across apps.
On device: Data remains until you log out, clear app data, uninstall the App, or your organization’s policies require removal.
On server: Retained according to your employer/organization’s data retention policies on the connected ERP system.
We use reasonable technical measures including:
HTTPS/API communication with your configured server
Token-based authentication
Local encryption/storage practices supported by the device OS
No method of transmission or storage is 100% secure. You are responsible for keeping your login credentials confidential.
You may:
Deny camera, location, or Bluetooth permissions (some features may not work)
Log out and clear local app data from device settings
Contact your organization’s administrator for access, correction, or deletion of server-side data
Depending on your country, you may have additional privacy rights (e.g. access, correction, deletion). Contact us using the details below.
The App is intended for business use by authorized employees and is not directed at children under 13 (or 16 where applicable). We do not knowingly collect data from children.
If your organization’s server is located outside your country, data may be transferred internationally according to your organization’s setup and applicable law.
We may update this Privacy Policy from time to time. The “Last updated” date will be revised. Continued use of the App after changes constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy or the SFA App:
OpenSkylabz / Cipherlabz
Email: info@cipherlabz.com
Website: https://www.openskylabz.com/
Address: No. 80, Nawala Road, Nugegoda