Privacy Policy

1. Data Controller

2. Introduction

Dealer Quest is an application used for quests, user activities, product browsing, cart management, orders, user profiles, and delivery or billing address management. We may collect, use, disclose, or otherwise process your personal data as described in this Privacy Policy.

By registering, signing in, using the application's features, or submitting information through the application, you acknowledge and understand the personal data processing practices described in this Privacy Policy.

3. Categories of Personal Data We May Collect

3.1 Account and Identity Data

• First name, last name, or display name
• Email address, phone number, or login-related data
• User ID or internal system identifier
• Account data associated with an organization, store, dealer, or relevant team

3.2 Profile and Transaction Data

• User profile information
• Quest participation, activity history, or engagement records
• Product, browsing, favorites, cart, and order information
• Payment-related information or order status as necessary to provide services
• Invoice details, shipping address, billing address, and contact information

3.3 Photos, Files, and Media

• Images uploaded from the camera or photo library
• Files or media used for quest participation, verification, or other in-app submissions

3.4 Location, Device, and Technical Data

• Device coordinates or location data when permission is granted for related features
• Device model, operating system, app version, language, and certain device settings
• Device identifiers, usage logs, and system error information

3.5 Notification and Analytics Data

• Push notification token
• App usage statistics
• Crash reports and technical diagnostics related to service errors

4. Sources of Personal Data

• Directly from you when you register, sign in, complete your profile, add an address, place an order, or submit forms
• From your device when you grant access permissions such as camera, photo library, location, or notifications
• Automatically through app usage, such as logs, analytics, and crash reports
• From service providers or connected systems involved in delivering the service, such as authentication, backend, or cloud services

5. Purposes of Collection, Use, and Disclosure

• To register, authenticate, and manage user accounts
• To provide the core app features, such as profiles, quests, products, cart, orders, and addresses
• To process orders, delivery, documents, and after-sales services
• To support image uploads or related user submissions
• To use location data for relevant features when permission is granted
• To send notifications related to accounts, app usage, orders, or in-app activities
• To analyze, improve, and develop the application and services
• To prevent, investigate, and manage security incidents, fraud, or misuse
• To comply with legal obligations, lawful orders, or regulatory requirements

6. Legal Bases for Processing

• Performance of a contract or steps prior to entering into a contract
• Legitimate interests of the company and users
• Compliance with legal obligations
• Your consent, where consent is required by law

7. Device Permissions

• Camera, to capture images for upload
• Photo library, to select images from your device
• Location, for maps and address-related features
• Notifications, to notify you about important in-app events

You may manage these permissions through your device settings. Disabling certain permissions may affect the availability of some features.

8. Disclosure to Third Parties

• Cloud, infrastructure, or database service providers
• Analytics, performance measurement, and crash reporting providers
• Notification or communication service providers
• Business partners or service providers involved in orders, delivery, or system support
• Government authorities or regulators where required by law

Examples of external services that may be involved include database and authentication services through Supabase, analytics and crash reporting services such as Firebase Analytics and Firebase Crashlytics, and notification services relevant to the operating system or platform in use.

9. International Data Transfers

In some cases, your personal data may be stored or processed on cloud systems or by service providers located in other countries. The company will implement appropriate safeguards in accordance with applicable laws.

10. Data Retention

The company retains personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by law, taking into account service delivery, auditing, dispute resolution, fraud prevention, and legal obligations.

11. Security Measures

• Role-based access controls
• Authentication and access management controls
• Use of infrastructure and database services with appropriate security measures
• Logging and error tracking to improve system security

However, no method of security can guarantee absolute protection in all circumstances.

12. Data Subject Rights

• The right to access and obtain a copy of your personal data
• The right to request correction of inaccurate, incomplete, or outdated data
• The right to request deletion or destruction of personal data
• The right to request restriction of processing
• The right to object to processing
• The right to data portability, where applicable
• The right to withdraw consent where processing is based on consent
• The right to lodge a complaint with the relevant supervisory authority

13. Children's Data

This application is not intentionally designed to collect personal data from children unless permitted by law or supported by valid consent from a parent or legal guardian. If you believe that a child's data has been submitted inappropriately, please contact the company for review and appropriate action.

14. Third-Party Links or Services

The application may contain links, services, or integrations connected to third-party systems that have their own privacy policies. We recommend reviewing those privacy policies before using such services.

15. Changes to This Privacy Policy

The company may update this Privacy Policy from time to time to reflect changes in services, technology, or applicable laws. If any material changes are made, the company will notify users through appropriate channels, such as within the application or on the website.

16. Contact Information