Privacy Policy

CAPAS Live — Centralized Analytics & Proactive Alert System

Effective Date: 23 February 2026 | Last Updated: 23 February 2026

            Summary: CAPAS is a business-to-business (B2B) security alert application. We collect only
            the minimum data needed to deliver real-time security alerts to authorized personnel. We do not sell, share,
            or use your data for advertising.
        

1. Who We Are

CAPAS is developed and operated by eSecure365 ("we", "us", "our"). It is a mobile application designed exclusively for enterprise security operations — delivering real-time surveillance alerts from CCTV and sensor systems to authorized company personnel.

2. Data We Collect

We collect the following data, strictly for app functionality:

Data Type	Purpose	Stored Where
Phone number	Login & identity verification via company-assigned PIN	Server (encrypted)
Device information (model, OS)	Push notification delivery & device management	Server
FCM device token	Delivering push notifications via Firebase Cloud Messaging	Server
Login timestamps & IP address	Security audit trail & fraud prevention	Server
Alert interaction data	Tracking acknowledgement of security alerts	Server

Data We Do NOT Collect

Location / GPS data
Contacts, call logs, or SMS
Photos, files, or media from your device
Browsing history or usage analytics
Advertising identifiers

3. How We Use Your Data

Authentication: Verifying your identity using your company-assigned phone number and PIN.
Alert Delivery: Sending real-time security alerts via push notifications (FCM) and WhatsApp fallback for critical alerts.
Device Management: Ensuring only authorized devices receive alerts (maximum 2 devices per account).
Audit & Compliance: Maintaining logs of login attempts and alert acknowledgements for security accountability.

4. Third-Party Services

We use the following third-party services to operate the app:

Service	Purpose	Privacy Policy
Google Firebase (FCM)	Push notification delivery	firebase.google.com/support/privacy
Twilio	WhatsApp fallback for critical alerts only	twilio.com/legal/privacy

We do not share your personal data with any third party for marketing, advertising, or data brokering purposes.

5. Permissions

The app requests the following device permissions:

Permission	Why It's Needed
Push Notifications	Core functionality — receiving security alerts in real-time
Do Not Disturb Override (Android)	Critical security alerts (e.g., theft, intrusion) must bypass silent/DND mode to ensure immediate awareness
Critical Alerts (iOS)	Same as above — ensures critical security alerts are audible even when the phone is muted
Photo Library (Save)	Allows you to save alert evidence (images/videos) to your device for offline review or reporting
Internet Access	Communicating with the backend server for authentication and alert retrieval

6. Data Retention

Alert data: Retained on the server for the duration configured by your company administrator.
Audit logs: Login attempts and device registrations are retained for 12 months for security compliance.
Device tokens: Automatically removed when a device is deregistered or a token expires.

7. Data Security

All API communication is encrypted using HTTPS/TLS.
PINs are stored as bcrypt hashes — we never store plaintext passwords.
Authentication tokens (JWT) are stored in platform-secure storage (Android Keystore / iOS Keychain).
Account lockout after 5 failed login attempts prevents brute-force attacks.
Database access is restricted to authorized backend services only.

8. Children's Privacy

CAPAS is a B2B enterprise application and is not intended for use by children under 13. We do not knowingly collect data from children.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

Request access to the personal data we hold about you
Request correction or deletion of your data
Withdraw consent for data processing

To exercise these rights, contact your company administrator or reach out to us directly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the app after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices:

Email: support@esecure365.in
Website: esecure365.in