1. Authorized Use

The Application is intended exclusively for authorized personnel of the West Central Railway, Kota Division Commercial Department or other users explicitly provisioned through official employment or enterprise onboarding processes.

• The Application does not support public registration
• User accounts are created and managed externally by authorized administrators
• Only authenticated and approved users may access the Application

2. Information We Collect

The Application collects and processes the following categories of data to support operational workflows:

2.1 Account and Authentication Data

• Name
• Email address
• User role (e.g., Admin, User, Contractor)
• Authentication credentials and session tokens (securely stored)

2.2 Inspection and Operational Data

• Inspection titles and descriptions
• Contract details and station mapping
• Compliance status (Resolved / Not Resolved)
• Assignment information (users assigned to inspections/reviews)
• Creation and update timestamps

2.3 User-Generated Content

Users may submit:

• Review remarks and observations
• Inspection descriptions
• Uploaded images related to inspections or field activities

3. Location Data

The Application collects precise location data (GPS coordinates) when users create reviews.

• Location capture is mandatory for review submission
• Location data is used to verify field inspections and ensure operational accuracy
• Location is stored as part of inspection and review records
• Users are prompted to enable location services if not already enabled

4. Camera and Media Access

The Application may request access to:

• Device camera (to capture inspection images)
• Photo/media library (to upload images)

Images are used strictly for:

• Inspection documentation
• Review evidence
• Operational reporting

5. How We Use Information

Collected data is used solely for:

• Inspection and contract management
• Operational workflow execution
• Compliance tracking and reporting
• Assignment and task management
• Audit and record-keeping purposes
• System functionality and security

6. Data Storage and Cloud Infrastructure

The Application uses secure third-party infrastructure to store and process data.

• Uploaded images and files may be stored using cloud storage services (e.g., AWS S3)
• Operational data may be stored on secure backend servers
• Data is protected using commercially reasonable security measures

7. Third-Party Services

The Application may use trusted third-party service providers for:

• Cloud hosting and storage
• Authentication services
• Application infrastructure and maintenance

These providers only process data on behalf of the Service Provider and are not permitted to use it for independent purposes.

8. Data Sharing and Disclosure

User data is not sold or used for advertising.

Data may be shared only:

• With authorized internal personnel for operational purposes
• With trusted service providers assisting system operation
• When required by law, regulation, or legal process
• To protect system security, users, or organizational integrity

9. Data Retention

The Application retains data for as long as necessary to:

• Support operational and contractual requirements
• Fulfill administrative and audit obligations
• Comply with applicable legal or organizational policies

Users may request deletion of their data by contacting the Service Provider.

10. Security

We implement reasonable administrative, technical, and organizational safeguards to protect data.

However, no digital system is completely secure, and absolute security cannot be guaranteed.

11. Permissions

The Application may request the following device permissions:

• Location (for GPS-based review validation)
• Camera (for capturing inspection images)
• Storage/Media access (for uploading images)
• Network access (for system functionality)

Users may manage permissions through device settings, but disabling required permissions may limit functionality.

12. Data Rights and Access

Authorized users may:

• Access their profile and submitted data
• Request correction of inaccurate information
• Request deletion of their account and associated data (subject to organizational requirements)

Requests can be submitted to: info@rcims.in

13. Children’s Privacy

The Application is intended strictly for authorized organizational personnel only and is not directed toward children or general public users.

14. Changes to This Policy

This Privacy Policy may be updated periodically.

Authorized organizational personnel will be notified of any changes to the Application or this policy. Continued use of the Application after such changes constitutes acceptance of the revised policy.

15. Contact Information