Privacy Policy

Sadatech ("we", "our", or "us") operates the MaxCargo mobile application (the "App"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the App you agree to the practices described here.

Account & Identity

• Phone number — used as your login identifier.
• Full name (first name, last name) — shown on your profile.
• Password — transmitted over HTTPS and never stored in plaintext on device.
• Public user ID — a randomly generated reference used for warehouse address personalisation.

Authentication Tokens

• JWT access and refresh tokens are stored in Android EncryptedSharedPreferences (AES-256 GCM) and are used solely to authenticate API requests on your behalf.

Parcel & Shipment Data

• Parcel identifiers, tracking numbers, statuses, weight, volume, price.
• Shipment timeline events, warehouse name, and parcel photos.
• Real-time tracking coordinates (latitude/longitude) of your shipments — these are shipment locations reported by the logistics operator, not your device GPS.

Pre-Alert Packages

• Tracking number, origin store name, product URL, package description, and declared customs value that you voluntarily enter when creating a pre-alert.

Payment Information

• Balance and transaction history (amounts, currency, type, timestamps).
• Top-up requests: amount, payment method, and receipt reference number you provide.
• We do not collect or store card numbers, CVV codes, or full bank account details.

Push Notification Token

• Your Firebase Cloud Messaging (FCM) device token is registered on our server so we can send you parcel status notifications. You can disable notifications at any time in your device settings.

Technical & Usage Data

• App version and, where necessary for support, device OS version.
• HTTP request logs (request IDs, error codes) for debugging — these do not contain the content of your parcels or messages.

• Provide the service — authenticate you, display your parcels, process pre-alerts, show shipping quotes, and manage your balance.
• Send notifications — parcel status updates and important account alerts.
• Customer support — diagnose issues using request IDs and error codes.
• Security — detect fraudulent access and protect your account.
• Legal compliance — meet customs, financial, and regulatory obligations.

We do not sell your personal data. We do not use your information for third-party advertising or automated profiling.

• Logistics partners — parcel and pre-alert data is shared with warehouses and carriers only to the extent needed to fulfil your shipment.
• Payment processors — top-up receipt references may be shared with the bank or payment operator to confirm transfers.
• Service providers — infrastructure (cloud hosting, monitoring) providers operating under data-processing agreements.
• Legal requirements — if required by law, court order, or to protect the rights and safety of users or third parties.

We retain account and transactional data for as long as your account is active or as required by applicable law (e.g., customs and financial record-keeping obligations). Push tokens are removed from our servers when you log out or uninstall the App. You may request deletion of your account and associated data by contacting us (see §8).

All data in transit is encrypted with TLS. Authentication tokens on your device are stored in Android EncryptedSharedPreferences. Our servers are hosted in a secured environment with access controls and audit logging. No method of transmission or storage is 100% secure; we work continuously to protect your information.

The App is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Depending on your jurisdiction you may have the right to:

• Access or receive a copy of your personal data.
• Correct inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Restrict or object to certain processing.
• Withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, contact us at the address in §8.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

Sadatech
Email: privacy@sadatech.org
Website: sadatech.org

We may update this Privacy Policy from time to time. The updated version will be posted at this URL with a revised "Last updated" date. Continued use of the App after changes constitutes acceptance of the new policy. For material changes we will notify you via a push notification or in-app alert.