SupplyX privacy policy
What SupplyX collects, why, who sees it and how long it is kept.
Last updated
SupplyX is the ordering, delivery and invoicing service of Americom Group, Karachi, for the banks and businesses it supplies. This policy covers the SupplyX website (supplyx.ciphertronix.com) and the SupplyX apps for Android and iOS. Americom Group decides how this information is used; Ciphertronix PVT LTD builds and runs the service for Americom.
Who can use SupplyX
SupplyX accounts are created by your organisation’s head office or by Americom; you cannot create an account in the app yourself. The “Register your business” form only sends a request to Americom.
What we collect and why
| Information | Why |
|---|---|
| Name, work email, phone, username, role, department and office address | To sign you in, route orders for approval, deliver and send you notices about your orders |
| Orders, budgets, approvals, invoices and payments | To run ordering, approval, delivery and invoicing for your organisation |
| Photos you take or choose: proof of payment, proof of delivery | To record payments and deliveries |
| Precise location, only when delivery staff record a proof of delivery | To show where a delivery was handed over. The app does not track location in the background |
| Signature of the person receiving a delivery | Proof of delivery |
| Business registration requests: organisation, contact name, email, phone, city and message | So Americom can review the request and reply |
| Sign-in records, device type and an activity log of changes | Security and an audit trail for your organisation |
Fingerprint or face unlock is handled by your phone; SupplyX never receives your fingerprint or face data.
Sharing
Your information is seen only by the people who need it for an order: your organisation’s approvers and head office, and Americom staff. We do not sell it, use it for advertising, or share it with other companies, except where the law requires it. The apps contain no advertising or third-party tracking.
Storage and security
- All traffic between the apps, the website and the server is encrypted (HTTPS).
- Passwords are stored only as secure hashes. The apps keep your session in the phone’s secure storage and lock with a PIN or biometrics.
- Access is limited by role, and changes are recorded in an activity log.
How long we keep it
Orders, invoices and payment records are kept as long as Americom must keep business and tax records. Account details are kept while your account is active. Registration requests that are not taken forward are deleted within 12 months.
Your choices
You can see and correct your details on your account page, or ask your head office administrator. Your account belongs to your organisation: only its head office administrator can deactivate it, and an organisation can ask Americom to remove a former user’s personal details. See SupplyX accounts and deletion.
Children
SupplyX is a business service for adults and is not meant for children.
Changes
We will update this page when the policy changes and show the new date at the top.
Contact
Americom Group, F/9, Block-7, Clifton, Karachi. Email: [email protected]