Legal

Privacy Policy

Effective 20 September 2026 · Last updated 20 September 2026

This policy explains how FCMG Tech ("FCMG Tech", "we", "us") handles personal data in InOutlet Excellence — the web consoles at app.fcmgtech.com and admin.fcmgtech.com, the InOutlet mobile app for iOS and Android, and the API at api.fcmgtech.com (together, the "Platform").

1. Our role: who decides what happens to your data

InOutlet Excellence is business software licensed to companies ("Customers") — FMCG distributors, brands and merchandising agencies. If you are a merchandiser, supervisor, manager or administrator using the Platform, your account was created by your employer or the Customer you work for.

Your employer is the data controller for the operational data you generate in the Platform — visits, check-ins, shelf audits, photos, orders, surveys, messages and the location recorded with them. They decide what is collected, who sees it and how long it is kept, subject to the limits in their contract with us.
FCMG Tech is a data processor for that data: we host and operate the Platform and act on the Customer's documented instructions.
FCMG Tech is a controller for a narrow set of data we need to run our business — account and billing records, security and audit logs, support correspondence, and enquiries sent through fcmgtech.com.

If you want to know why your employer collects something, or you want your operational data corrected or erased, contact them first. We will help them respond, and you can always write to us at privacy@fcmgtech.com.

2. What we collect

Account and profile data

Name, work email address, phone number, role and permissions, the company and client accounts you are assigned to, your chosen app language, and a hashed (never plain-text) password.

Work data you create in the app

Visits and route runs: the outlet visited, check-in and check-out times, tasks completed, notes.
Shelf and product records: facings, shelf share, price checks, stock and expiry observations, planogram audits, barcodes you scan.
Sales orders you capture in-store, and survey answers you submit.
Photos you take of shelves, displays and products.
Messages you send in the in-app chat with your supervisor or support.
Location recorded at specific moments — see section 3.

Device and technical data

Device model, operating system version, app version and language.
A push notification token (Apple Push Notification service / Firebase Cloud Messaging) so we can deliver alerts such as route reminders and supervisor check requests.
Sign-in and security records: IP address, timestamps, refresh-token records, and audit entries for privileged administrative actions.
Server logs needed to operate and troubleshoot the service.

Stored on your device

The app keeps your session tokens in the operating system's secure storage (iOS Keychain / Android Keystore) and queues work you complete offline — actions and photos — on the device until it can sync. Signing out clears the session; uninstalling the app removes the local queue.

Website enquiries

If you submit the demo or contact form on fcmgtech.com, we receive the name, work email, company, phone, team size, country and message you provide, and use them only to respond to you.

3. Location data — what we record and when

Location is the most sensitive thing the app handles, so we are specific about it. The app does not track you continuously and does not record your location when you are not working.

Your device location (latitude, longitude, accuracy and timestamp) is captured at discrete moments:

when you check in at an outlet, to verify you are at the right store;
when you check out;
when you complete a task, take a photo, or record a route stop during an active visit;
when you respond to a supervisor check request.

These points are sent to your employer's tenant on the Platform so supervisors can confirm that the work was done where and when it was reported. Your employer may see them on a live map and in visit history. Location is not collected outside an active visit or route run, and never in the background when the app is closed.

You can refuse or later withdraw the location permission in your device settings. If you do, the app still works, but check-in verification and any task that requires proof of location will not be able to complete — and your employer may treat that as incomplete work. Location permission is requested by iOS and Android with the explanations shown in the system prompts.

4. Camera and photos

The app uses the camera to photograph shelves, displays and products, and to scan product barcodes. Barcode scanning happens on the device; the image is not uploaded — only the decoded code is used to look up a product. Photos you choose to capture or attach are uploaded to your employer's tenant and stored with the visit record. We do not access your photo library beyond the images you select.

5. How we use data

To provide the Platform: authenticate you, show your routes and tasks, sync your work, deliver notifications, and produce the reports and dashboards your employer uses.
To verify field execution — that visits happened at the right outlet, at the right time.
To keep the service secure: detect abuse, investigate incidents, enforce tenant isolation, and maintain audit trails of privileged actions.
To support you and your employer when you contact us.
To meet legal, tax and accounting obligations.
To operate and improve the Platform — using aggregated or de-identified statistics that do not identify you or any Customer.

We do not use your data to build advertising profiles, and we do not make automated decisions that produce legal effects about you.

6. Legal bases

Where data-protection law requires a legal basis (for example the GDPR for users in the EU/UK), we and our Customers rely on: performance of a contract (providing the Platform, and your employment relationship with the Customer); legitimate interests (securing the service, verifying field work, preventing fraud); legal obligation; and consent where it is required — notably the device permissions for location, camera and notifications, which you grant and can withdraw at the operating-system level.

8. International transfers

FCMG Tech operates from the State of Qatar and our providers operate data centres in several countries, so your data may be processed outside the country where you work. Where a transfer is restricted by law, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses — in our agreements with sub-processors.

9. How long we keep data

Operational data (visits, photos, orders, location points, messages) is retained for as long as your employer's subscription is active, according to their retention settings and instructions.
Account data is kept while the account exists; deactivated accounts are retained while needed for historical reporting and audit.
Security and audit logs are typically retained for up to 12 months.
After a Customer's contract ends, their tenant data is deleted or returned within 90 days, except where we must keep records to comply with law.

10. How we protect data

All traffic between the apps and our API is encrypted with TLS/HTTPS.
Data is separated per tenant and enforced in the database itself with row-level security, so one Customer cannot read another's records.
Passwords are stored only as salted hashes; API keys are stored hashed and shown once.
Access is role-based and default-deny; sessions use short-lived tokens with rotating refresh tokens.
Privileged administrative actions are recorded in an audit log.
Webhook deliveries are signed (HMAC-SHA256) and public endpoints are rate-limited.

No system is perfectly secure, but if a breach affects your personal data we will notify the affected Customer without undue delay and support their notifications to users and regulators.

11. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing of your personal data, to withdraw consent, and to receive a copy in a portable format. You can exercise several of these directly in the app — your profile details and password are editable under Profile, and device permissions are yours to grant or revoke at any time.

For operational data held in your employer's tenant, send the request to your employer; they are the controller. Write to privacy@fcmgtech.com and we will route it to them and assist. We respond to requests within 30 days. If you believe we have handled your data improperly, you may also complain to your local data-protection authority.

12. Deleting your account

Accounts on the Platform are issued and owned by your employer, not created by you in the app, so deletion normally goes through them: ask your administrator to deactivate and delete your user record.

You can also request deletion directly by emailing privacy@fcmgtech.com from your work address, with the subject "Delete my account". We will verify the request with your employer where the data belongs to their tenant, and complete or refuse it — with reasons — within 30 days. Where a record must be kept for legal or audit reasons, we anonymise your personal identifiers instead of deleting the row.

13. Children

The Platform is workplace software and is not directed at children. We do not knowingly collect data from anyone under 16, and accounts are issued only to employees and contractors of our Customers.

14. No advertising, no third-party tracking

The mobile app contains no advertising SDKs and no third-party analytics or tracking SDKs. It does not use the iOS Advertising Identifier and does not track you across other apps or websites. This website uses no advertising cookies; the only browser storage it sets is your light/dark theme preference.

15. Changes to this policy

We may update this policy as the Platform changes. The "Last updated" date at the top always reflects the current version, and material changes will be communicated to Customer administrators. Continued use after an update means you accept the revised policy.

16. Contact us

FCMG Tech — privacy enquiries
Email: privacy@fcmgtech.com
General: sales@fcmgtech.com
State of Qatar