Privacy Policy

This Privacy Policy explains how D Y Uppar & Sons (“Company”, “we”, “us”, or “our”) collects, uses, stores, and protects information when you use the Pay Flow mobile application and related backend services (the “App”).

By signing in to and using the App, you acknowledge this Policy. If you do not agree, please stop using the App and contact your administrator.

1. Who this App is for

• The App is intended only for authorized employees / staff of D Y Uppar & Sons.
• User accounts are created and managed by the Company (or its administrators). You cannot generally self-register as a public user.
• The App supports internal vendor payment request, approval, and related workflow processes.
• The App is not directed at children under 13 (or the minimum age required in your jurisdiction).

2. Information we collect

Depending on your role and usage, we may process the following categories of information:

2.1 Account and identity information

• Name, email address, mobile number (if provided), designation / department
• Login credentials (passwords are stored in hashed form; we do not store plain-text passwords)
• Role / permission related data needed to authorize incharge or approval actions

2.2 Workplace / business information you submit

• Payment letter / payment request details (project, account/department, vendor, invoice references, amounts, RA bill number where applicable, status, remarks)
• Approval, rejection, and amendment actions and related remarks
• Documents and media you upload (for example invoices, measurement sheets, work photos, approval attachments)
• Vendor and project information shown to you as part of your authorized work

2.3 Device and technical information

• Device identifiers needed for app operation (for example device UUID where provided)
• Push notification token (FCM) so we can send workflow alerts (approval pending, request approved/rejected, payment updates, etc.)
• Platform (Android / iOS), app version, and basic device model information when supplied by the App
• Standard server logs such as IP address, timestamps, and API request metadata for security and troubleshooting

2.4 Permissions the App may request

• Camera / photos / files: to attach invoices, work evidence, or approval documents
• Internet / network: to communicate with Company servers
• Notifications: to deliver workflow alerts

The App is not designed to collect your phone contacts, precise continuous location tracking, or advertising identifiers for marketing profiles. If additional device permissions are requested in a future version, this Policy will be updated.

3. How we use information

We use the information above to:

• Authenticate users and enforce role-based access (account incharge / approver / admin workflows)
• Create, submit, review, approve, reject, amend, and track vendor payment requests
• Notify relevant employees about pending actions and status changes
• Maintain audit trails required for internal controls and accounting processes
• Operate, secure, debug, and improve the App and related services
• Comply with applicable legal, regulatory, or contractual obligations of the Company

We do not sell personal information. We do not use App data for third-party advertising or consumer marketing.

4. Legal basis / employment context

Processing is carried out in the context of your employment or authorized engagement with D Y Uppar & Sons, for legitimate business operations (vendor payment workflows), security, and compliance. Use of the App may be required for assigned job duties as determined by the Company.

5. How we share information

Information may be shared only as needed with:

• Other authorized Company users (for example approvers, accounts staff, administrators) as part of the payment workflow
• Service providers / processors who help host, develop, maintain, or operate the App — including web4rest Technologies — under confidentiality and instructions from the Company
• Infrastructure providers such as cloud hosting or push notification providers (for example Firebase Cloud Messaging) to deliver App functionality
• Authorities or other parties when required by law, legal process, or to protect the rights, safety, and security of the Company and its users

We do not share App user data with advertisers for targeted advertising.

6. Data retention

Business records related to payment requests, approvals, attachments, and audit logs are retained for as long as needed for operational, accounting, audit, and legal purposes of the Company, or as required by applicable law / Company policy. Account and device records may be deactivated or removed when an employee leaves or access is revoked, subject to retention requirements for historical workflow records.

7. Security

We implement reasonable administrative, technical, and organizational measures to protect information, including authenticated API access, role-based authorization, and hashed password storage. No method of transmission or storage is 100% secure. Users must keep login credentials confidential and use Company-issued or approved devices in accordance with Company IT policies.

8. Your choices and rights

• You may update certain profile information through the App or by contacting an administrator.
• You may disable push notifications in device settings (workflow alerts may then not reach you).
• Account access can be revoked by Company administrators.
• For access, correction, or deletion requests related to personal data in the App, contact the Company using the details below. Some records may be retained where required for business, legal, or audit reasons.

9. Third-party services

The App may rely on third-party infrastructure (for example hosting and Firebase Cloud Messaging). Those providers process limited technical data as needed to provide their services. Their use is governed by their respective terms and privacy practices, in addition to this Policy.

10. International / cross-border processing

Servers or service providers used to operate the App may process data in locations where the Company or its processors maintain infrastructure. We take steps appropriate to the employment / business context to protect such information.

11. Children’s privacy

The App is a workplace tool for authorized adults / employees and is not intended for children. We do not knowingly collect personal information from children through this App.

12. Changes to this Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when revisions are published. Continued use of the App after an update constitutes acknowledgment of the revised Policy, except where additional notice or consent is required by law or Company policy.

13. Contact us

For privacy questions, data requests, or concerns about Pay Flow:

• App name: Pay Flow
• Owned by: D Y Uppar & Sons
• Developed by: web4rest Technologies
• Email: dyuppar@gmail.com
• Phone: 080 2361 4193
• Address: #148/6-1, 9th Main Rd, 5th Road, R.M.V. Extension, Sadashivanagar, Bengaluru - 560 080

If you are an employee, you may also raise privacy or access requests through your Company administrator or HR / IT channel.