Privacy Policy

Last updated: 30 August 2026

This Privacy Policy explains how Workshop Tracking (“the App”, “we”, “us”), operated in connection with Sarmad Protocol / sarmadprotocol.com, collects and uses information when you use our Android application and related APIs hosted at sarmadprotocol.com.

1. Who we are

Workshop Tracking is a multi-tenant workplace tool for managing organizations, departments, divisions, work tasks, and signature requests. Contact for privacy requests: privacy@sarmadprotocol.com (or the support channel published on sarmadprotocol.com).

2. Account and identity

The App uses a BIP39 recovery seed to derive a wallet-style address used only as your login identity. We do not send, receive, mine, trade, or process cryptocurrency payments in this App. Your seed phrase stays on your device (secure storage). We store the derived public address, display name, and optional contact fields you provide (phone, WhatsApp, Telegram username).

3. Data we process

• Account: wallet address, display name, optional contacts, roles
• Organization data you create: companies, departments, divisions, invites
• Work content: tasks, notes, custom fields, signature requests
• Device/session: refresh tokens, device metadata, optional FCM push tokens
• Diagnostics: standard server logs (IP, timestamps, request paths) for security and reliability

4. Why we process it

• Provide and secure the service (authentication, authorization)
• Operate company workflows (tasks, invites, signature requests)
• Send optional push notifications about task assignment / completion and signature requests
• Comply with law and prevent abuse

5. Sharing

Organization members see content shared inside their company according to their roles. We do not sell personal data. Infrastructure providers (hosting, and Firebase Cloud Messaging if push is enabled) process data only to run the service.

6. Retention

We keep account and company data while your account / company remains active. You may delete your account in the App (“Delete my account”). Managers may delete an entire company and its hosted data. Backups may persist for a limited period for disaster recovery, then expire.

7. Your choices

• Show / hide your recovery seed on device
• Export company data (managers)
• Delete company (managers)
• Delete account (removes your personal account data from our servers)
• Disable notification permission on Android

8. Children

The App is intended for workplace use by adults, not for children under 13 (or the age required in your country).

9. International hosting

Servers are hosted on our infrastructure (currently EU VPS). By using the App you understand data is processed there.

10. Changes

We may update this policy. The “Last updated” date will change; continued use after changes means you accept the updated policy.

Terms of Use · Home