Privacy Policy for Sales Manager

Effective Date: 16 August 2026
Last Updated: 16 August 2026

Sales Manager (“Sales Manager”, “the App”, “we”, “us”, or “our”) is a business management application developed and operated by Byte Craft Enterprises.

Sales Manager helps businesses manage shops or branches, customers, services, tax rates, staff access, sales, invoices, reports, customer records, and related business operations.

This Privacy Policy explains what information Sales Manager collects and processes, why it is processed, how it is protected, when it may be shared, how long it may be retained, and the choices available to users.

By using Sales Manager, you acknowledge the practices described in this Privacy Policy.

1. Developer Information

Developer: Byte Craft Enterprises
Application: Sales Manager
Android Package: com.bytecraft.salesmanager
Website: bytecraftenterprises.com
Privacy / Support Email: info@bytecraftenterprises.com
Account Deletion Request Page: https://bytecraftenterprises.com/app-requests/

2. Who Sales Manager Is Intended For

Sales Manager is designed for businesses, business owners, administrators, managers, employees, and other authorized business personnel.

The App is not intended for general social networking or personal consumer use.

A business using Sales Manager may enter information about its own customers. In such cases, that business is responsible for ensuring that it has a lawful reason to collect and use its customers’ information. Depending on applicable law, Byte Craft Enterprises may act as a service provider or data processor for such customer information.

3. Information We Collect and Process

Sales Manager processes information necessary to provide its business-management features.

This may include:

• Account and authentication information: owner/administrator email address, authentication identifiers, account status, user role, email-verification status, password-related authentication data handled through Firebase Authentication, manager identifiers, assigned shop, manager status, and access-control information.

• Organization and shop information: company or organization name, shop name, address, location, telephone number, email, tax-identification details, currency, invoice prefix and numbering settings, receipt footer, shop logo, website, WhatsApp number, Instagram URL, Facebook URL, active/inactive status, and related business settings.

• Customer information entered by authorized business users: customer code, name, phone number, email address, gender where provided, address, notes, creation date, branch/shop association, visit history, last visit, number of visits, invoices and sales history.

• Sales and invoice information: invoice number, shop, customer snapshot, date and time, services purchased, quantities, service-price snapshots, discounts, taxes, adjustments, totals, invoice revisions, edit history, and audit information.

• Service information: service code, service name, unit price, category, SAC or similar service code, active/inactive status, and imported service information.

• Tax information: tax name, percentage/rate, active status, and tax snapshots stored with invoices.

• Manager and staff information: display name or identifier, role, assigned shop, status, account identifier, and administrative metadata.

• Files and content selected by users: Excel files selected for importing services or business data, exported Excel reports or customer lists, shop-logo images selected by the user, invoice PDFs generated by the App, and files intentionally shared through Android sharing features.

• Technical and security information: authentication identifiers, app/device integrity information used by Firebase App Check or Google Play Integrity, request metadata, timestamps, backend error information, application identifiers, and technical connection information necessary to operate and secure the service.

Firebase Authentication may process information such as email addresses, passwords, user agents and IP addresses to provide authentication and protect against abuse. Firebase and Google Cloud services may also process technical service information such as IP addresses and application identifiers. (Firebase)

Firebase App Check may process a Play Integrity token when Play Integrity is used as the Android attestation provider. (Firebase)

4. Information We Do Not Intentionally Collect

Sales Manager does not require business users to provide information unrelated to business-management functions.

The App does not currently use customer or business information for third-party targeted advertising.

Sales Manager does not intentionally store readable administrator passwords or readable manager access-code hashes as normal business records.

Manager access credentials are designed to be handled through trusted authentication mechanisms rather than stored as readable business data.

The App does not automatically access a user’s personal phone contacts simply because a customer phone number is stored in Sales Manager.

A shop “location” or customer address entered into Sales Manager is business/customer information entered by the authorized user and is not necessarily device GPS location.

5. How We Use Information

We use information processed through Sales Manager to provide and maintain the App; authenticate users; verify roles and permissions; manage organizations, shops and managers; manage customers; manage services and tax rates; create, edit and store sales and invoices; generate PDFs and Excel files; calculate sales totals, taxes and reports; maintain invoice numbering and historical snapshots; display customer visit information and sales history; allow owners to compare shops; provide searchable records; share invoices when instructed by the user; protect accounts and backend resources; detect invalid or unauthorized requests; troubleshoot technical problems; maintain audit history; and comply with legal, accounting, security or regulatory obligations where applicable.

We do not use business customer records to create advertising profiles for unrelated third-party advertising.

6. Business Customer Data

Sales Manager allows authorized users to enter information about their own customers.

The business or organization using Sales Manager is responsible for determining what customer information it is permitted to collect and for providing any notices or obtaining any consent required by applicable law.

Business users should only enter customer information that is necessary for legitimate business purposes.

If you are a customer of a business that uses Sales Manager and want to access, correct or delete information that business has stored about you, you should normally contact that business first.

Byte Craft Enterprises may assist the relevant business with such requests where appropriate.

7. Authentication

Owner/administrator accounts may use email and password authentication.

Authentication is provided using Firebase Authentication.

Passwords are handled through the authentication service and are not intended to be stored as readable passwords in Sales Manager’s Firestore business database.

Managers may use a manager access-code system created and administered by an authorized owner. Manager access is restricted to the shop assigned to that manager.

Firebase Authentication accounts may use identifiers that allow a user to be recognized across devices after signing in. (Firebase)

8. Role-Based Access

Sales Manager uses different access levels.

An OWNER_ADMIN may manage the organization and authorized shops, view organization-wide reports, manage managers, switch between shops, manage business settings and perform operational sales functions.

A SHOP_MANAGER is restricted to the shop assigned to that manager and does not receive organization-wide administrative access.

Authorization controls are enforced through application logic, Firebase authentication, Firestore/Storage security controls and trusted backend functions.

Cloud Firestore supports using Firebase Authentication and security rules to control access to data, while App Check may provide an additional app-authenticity layer. (Firebase)

9. Firebase and Google Cloud

Sales Manager uses Google Firebase and Google Cloud services as backend infrastructure.

Depending on the feature, this may include Firebase Authentication, Cloud Firestore, Cloud Storage for Firebase, Cloud Functions for Firebase, Firebase App Check, Google Play Integrity and related Google infrastructure.

These services are used for authentication, cloud data storage, file storage, secure business logic, invoice creation, synchronization, authorization, security checks and related App functionality.

Firebase services may process data on Google infrastructure in different countries. Firebase Authentication is operated from United States data centers, while services such as Firestore, Cloud Functions, Cloud Storage and App Check may operate on global infrastructure or configured Google Cloud locations. (Firebase)

10. Storage of Business Data

Sales Manager uses Firebase/Google Cloud as the authoritative cloud storage for normal business records.

This may include organizations, shops, customers, services, tax rates, invoices, invoice snapshots, audit records and manager metadata.

The Android application may also maintain cached information locally to improve performance and allow previously loaded information to remain available where supported.

Temporary local files may also be created when generating PDFs, Excel exports or shareable files.

Temporary or cached local copies do not replace the authoritative cloud business record.

11. Excel Import and Export

Sales Manager allows authorized users to import or export Excel files.

When a user selects an Excel file for import, the App processes the selected file for the requested import operation.

Information successfully imported may then be stored in the business’s authorized cloud data.

Sales Manager may generate Excel files containing services, reports or customer information when specifically requested by an authorized user.

Exported files may contain personal or business information. Users are responsible for protecting files after exporting, downloading or sharing them.

12. PDF Invoices

Sales Manager can generate invoice PDF files using stored invoice snapshots.

PDF invoices may contain shop information, invoice number, customer information, services, quantities, prices, discounts, taxes, adjustments and totals.

Invoices may also contain optional clickable website, WhatsApp, Instagram or Facebook links configured by the shop owner.

Historical invoices are intended to retain the business and customer information that was captured when the invoice was created rather than being silently rewritten when current customer or shop information changes.

13. WhatsApp and Other Sharing

Sales Manager allows users to share invoice PDFs and other files through Android sharing functionality.

Where a customer phone number is available, an authorized user may choose to open WhatsApp for that customer and share an invoice.

This sharing occurs only when initiated by the user.

When content is shared to WhatsApp, email, cloud-storage applications or another third-party application, the receiving service processes the information according to its own privacy policy and terms.

Byte Craft Enterprises does not control how a third-party application handles information after the user intentionally transfers information to that application.

14. Shop Logos and Images

An authorized owner may select an image to use as a shop logo.

The App may upload the selected logo to cloud storage so it can be displayed across authorized devices and used in invoices or business screens.

Where Android system photo/file pickers are used, Sales Manager accesses the content selected by the user for the requested purpose.

15. Security

We use technical and organizational measures designed to protect information processed by Sales Manager.

These measures include authenticated access, organization and shop scoping, role-based authorization, trusted backend processing for sensitive operations, Firestore and Storage security rules, server-controlled invoice numbering, server-side financial validation, manager-access controls, audit history, secure file-sharing mechanisms, and Firebase App Check/Play Integrity integration.

Firebase states that its services encrypt data in transit using HTTPS and that services including Firestore, Authentication, Cloud Functions, Cloud Storage and App Check support encryption at rest. (Firebase)

No electronic service can guarantee absolute security, and users remain responsible for protecting their devices, passwords and manager access credentials.

16. App Check and Play Integrity

Sales Manager integrates Firebase App Check and may use Google Play Integrity to help determine whether backend requests originate from an authentic instance of the App.

App Check is a security mechanism and is not used to create advertising profiles.

Google’s Firebase documentation describes Play Integrity as an Android App Check provider used to help protect Firebase backend resources. (Firebase)

Development versions may use Firebase’s debug App Check provider. Debug tokens are development credentials and are not intended to be included in production builds. (Firebase)

17. Data Sharing

We do not sell Sales Manager customer records or business records.

Information may be disclosed to service providers that process information on our behalf to operate the App, including Google Firebase and Google Cloud; to third-party applications only when the user intentionally chooses to share a PDF, spreadsheet or other content through that application; to authorized members of the same organization according to their role and shop permissions; when required by law, legal process, regulation or a valid governmental request; when reasonably necessary to investigate fraud, security threats or abuse; or in connection with a legitimate business transfer, merger, acquisition or restructuring, subject to applicable law.

We do not permit SHOP_MANAGER accounts to access unrelated shops merely because those shops belong to the same organization.

18. Data Retention

Business information is generally retained while the relevant organization or account remains active and while the information is required to provide Sales Manager services.

Customers, services, shops and business settings may remain stored until they are deleted or modified by an authorized user or through an approved deletion process.

Historical invoice and audit information may be retained for longer periods when reasonably necessary for accounting, taxation, legal compliance, fraud prevention, security, dispute resolution or legitimate business-record requirements.

Where information must be retained after an account-deletion request for a lawful reason, access will be limited as appropriate and the information will be deleted or anonymized when the applicable retention requirement ends.

Temporary PDF, spreadsheet and cache files may be deleted by the App, operating system or user when no longer required.

19. Account Deletion

Sales Manager supports user accounts and therefore must provide users with a way to request account deletion.

In-app deletion path: [ADD THE REAL IN-APP PATH AFTER WE IMPLEMENT IT, e.g. Menu → Account & Privacy → Delete Account]

Web deletion request: [ADD HTTPS ACCOUNT-DELETION PAGE]

Deletion contact: [ADD PRIVACY EMAIL]

When a valid account-deletion request is completed, we will delete or anonymize the account and associated personal data that is no longer required.

Some transaction, invoice, security, audit or accounting information may be retained where retention is required or permitted for legal, tax, fraud-prevention, dispute-resolution or regulatory purposes.

Google Play currently requires apps that support account creation to provide both an in-app deletion path and an external web resource where users can request deletion. (Google Help)

20. Deleting Customer Data

Authorized organization users may update or remove customer information subject to the App’s permissions and applicable business-record requirements.

A customer who is not themselves an App account holder should normally direct a privacy request to the business that collected their information.

If Byte Craft Enterprises receives a valid request relating to business-controlled customer data, we may need to identify and coordinate with the relevant business before taking action.

21. Data Access, Correction and Export

Authorized users may view and update information available through their account according to their permissions.

Sales Manager provides business export functionality for certain records, including customer and report information.

Depending on applicable privacy law, individuals may also have rights to request access, correction, deletion, restriction, objection or portability of personal information.

Requests may be sent to [ADD PRIVACY EMAIL].

We may need to verify the identity and authority of the requester before fulfilling a request.

22. International Data Processing

Sales Manager is designed for use by businesses in multiple countries.

Information may therefore be transmitted to and processed in countries other than the country where the user or customer is located.

Google/Firebase infrastructure may process data globally depending on the Firebase service and configured service location. (Firebase)

Where required, we will take appropriate measures to protect international transfers of personal information.

23. Legal Bases Where Applicable

Where laws such as the GDPR require a legal basis for processing, processing may be based on performance of a contract, legitimate business interests, compliance with legal obligations, consent where required, or other lawful grounds applicable to the relevant processing.

For customer data entered by a business, the business is normally responsible for determining the appropriate lawful basis for collecting and using that customer information.

24. Children’s Privacy

Sales Manager is a business-management application and is not directed to children.

We do not knowingly design the App to solicit personal information directly from children for independent use of Sales Manager.

Business users should not enter personal information about minors unless they have a lawful and appropriate reason to do so.

If we learn that information has been collected in violation of applicable child-privacy requirements, we will take appropriate steps to address it.

25. Advertising and Marketing

Sales Manager currently does not contain an advertising platform for using customer or business records to deliver third-party targeted advertising.

Customer names, phone numbers, email addresses, invoices and purchase history are not collected for sale to advertising networks.

If this practice changes materially in the future, this Privacy Policy and the Google Play Data safety disclosure will be updated before or when the new processing begins as required.

26. Third-Party Links

Businesses may configure website or social-media links that appear in Sales Manager or in generated invoices.

Opening those links leaves Sales Manager and may send the user to a third-party service.

Those third-party websites and applications have their own privacy practices, and Byte Craft Enterprises is not responsible for their privacy policies or content.

27. Changes to This Privacy Policy

We may update this Privacy Policy when Sales Manager changes, when our data practices change, or when legal or platform requirements require an update.

The “Last Updated” date at the top of this Privacy Policy will identify the latest version.

If a change materially affects how personal information is handled, we may provide additional notice where appropriate or required.

28. Contact Us

For questions about this Privacy Policy, privacy requests, account deletion or data-handling concerns, contact:

Byte Craft Enterprises
Website: bytecraftenterprises.com
Email: info@bytecraftenterprises.com

For account deletion requests:

https://bytecraftenterprises.com/app-requests/