Request Manage Privacy Policy

Request Manage is an internal complaint and purchase-request management app for organisations. It is developed and operated by Aarvi Technology ("we", "us", "our"). Your organisation (the "Customer") decides who may use the app, creates or verifies user accounts and manages the complaints, purchase requests and other content inside its workspace.

For the content your organisation manages in Request Manage, your organisation is the data controller and we process that data on its behalf. For account, login and technical data needed to run the service, we act as the data controller. If you have a question about how your organisation uses Request Manage, please contact your administrator.

Information you give us

Information collected automatically

• To run the service: create and verify your account, sign you in, and let you raise, claim, track, update and resolve complaints and purchase requests.
• To send notifications: push notifications and e-mails about new complaints, claims, status changes, reminders, registrations and account verification.
• To keep the service secure: verify one-time codes, record login attempts, detect misuse and keep unverified users out of your organisation's data.
• To support you: answer questions from you or your administrator and fix problems.
• To meet legal obligations: keep records where the law requires it and respond to lawful requests.

We do not use your information for advertising, and we do not sell it to anyone.

Your information is shared only in these cases:

• Inside your organisation. Other users of your organisation see your name, role and the complaints, requests, comments and attachments you add, according to their role. Administrators see account details and the login report.
• Service providers that help us run Request Manage. They process data only on our instructions:

• Legal reasons. If required by law, court order or a government authority, or to protect the rights, safety and property of our users, our Customers or us.
• Business transfers. If we merge with or are acquired by another company, your information may be transferred as part of that transaction. We will inform you before your data becomes subject to a different privacy policy.

• Account details are kept while your account exists. When your account is deleted, your personal details are removed or anonymised within 30 days, except where we must keep them by law.
• Complaints, purchase requests, comments and attachments belong to your organisation's records and are kept for as long as your organisation uses Request Manage. Your name on past records may be replaced with a neutral label after your account is deleted.
• One-time codes are discarded once used or expired.
• Push notification tokens are removed when you sign out, when another user signs in on the same device, or when the account is deleted.
• Login records are kept for security review and are periodically purged.

We protect your information with measures such as encrypted connections (HTTPS) between the app and our servers, signed session tokens, role-based access so each user sees only what their role allows, administrator verification before a new account can sign in, and request-rate limits. Only authorised staff and administrators can reach account data.

No system is completely secure. If you believe your account has been compromised, please tell your administrator or contact us immediately.

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. You can:

• Review and update your name, photo and contact details in the app, or ask your administrator to update them.
• Turn notifications on or off in the app's settings or in your phone's notification settings.
• Sign out on any device to stop notifications on it.
• Delete your account as described in the next section.
• Contact us for any other request about your data. We respond within 30 days.

If you are in a region with a data protection authority, you also have the right to lodge a complaint with it.

You can ask for your Request Manage account and the personal data linked to it to be deleted at any time.

1. Ask your System Admin to delete your account from the Users screen in the app or the admin panel. This is the fastest route.
2. Or e-mail us at info@aarvitechnology.com from the e-mail address on your account, with the subject "Request Manage account deletion request" and your registered mobile number.
3. We confirm and delete within 30 days. Your profile, contact details, login records and push tokens are removed. Complaints and purchase requests you created stay in your organisation's records with your name replaced by a neutral label, because they are business records of the organisation.

The Request Manage app asks for these device permissions only when you use the related feature. You can change them at any time in your phone's settings.

Request Manage is a workplace tool intended for employees and staff of our Customers. It is not directed at children under 18, and we do not knowingly collect personal information from them. If you believe a child has created an account, please contact us and we will delete it.

We may update this policy from time to time. The effective date at the top shows when it was last changed. For significant changes we will notify you in the app or by e-mail before they take effect. Continuing to use Request Manage after a change means you accept the updated policy.

For questions about this policy, your data, or to exercise your rights: