Privacy Policy for DDK Retail

1. What data we collect

We may collect and process the following categories of data:

• Account data, including email address, first name, last name, phone number, user ID, company-related account information, and role-related information.
• Profile data, including a profile photo or avatar if the user chooses to upload one.
• Business and operational data, including visits, orders, returns, customer and outlet information, activity history, report-related data, debt-related business data, and other records created or viewed in the app as part of normal work.
• Device and technical data, including a device-generated identifier, push notification token, app version, platform, and basic diagnostic information related to the operation of the app.
• Authentication data, including access tokens, refresh tokens, and, if the user enables biometric sign-in, stored login credentials protected by secure device storage.
• Local app data, including offline drafts, cached directory data, app preferences, notification state, local diagnostics, and locally stored runtime error records.

2. How we use data

We use personal and business data to:

• provide login and secure access to the app;
• enable core business functionality such as visits, orders, returns, reports, outlet information, and synchronization;
• support offline work and later synchronization with the server;
• deliver push notifications related to business events;
• allow optional profile features such as avatar upload;
• protect user sessions and application security;
• diagnose technical problems and improve reliability.

3. Permissions used by the app

DDK Retail may request the following permissions:

• Camera, used for barcode or QR code scanning and optionally for taking a profile photo.
• Photos or media library, used only if the user chooses to upload a profile photo from the gallery.
• Notifications, used to deliver push notifications related to business events.
• Biometric authentication, used only if the user enables biometric login on the device.

DDK Retail does not collect or store biometric templates. Biometric authentication is handled by the device operating system and security framework.

4. How data is stored

Some data is stored locally on the user device to support secure access and offline work. Depending on the type of data, DDK Retail uses protected device storage and local application storage, including secure credential storage and local app databases or key-value storage.

Examples of locally stored data may include:

• authentication tokens;
• saved credentials for biometric login, if enabled by the user;
• offline drafts of visits, orders, and returns;
• cached reference data;
• local preferences and notification settings;
• local diagnostic and runtime error records.

5. Data sharing

We do not sell personal data.

We may process data through service providers and infrastructure required to operate the app, including hosting, backend systems, and push notification delivery services. Data is shared only to the extent necessary to provide app functionality, maintain security, and support the service.

6. Data security

We use reasonable technical and organizational measures to protect data. Data transmitted between the app and the backend is sent over network connections configured by the application environment. In the current production configuration, DDK Retail uses HTTPS API communication.

No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

7. Data retention

We retain data only for as long as necessary to provide the service, fulfill contractual obligations, maintain security, comply with legal obligations, and support legitimate business operations.

Locally stored app data may remain on the device until it is removed by logout, app reset, app deletion, administrative action, or normal application cleanup processes.

If a user requests deletion of their account-related personal data, Zegoal Soft LLC will delete all user personal data associated with that request, except where retention is required by applicable law, regulatory obligations, dispute resolution requirements, fraud prevention, security, or other legitimate compliance purposes. Any retained data will be kept only for the minimum period required for those purposes.

8. User choices and rights

Depending on applicable law and the customer organization's internal processes, users may have the right to request access, correction, deletion, or restriction of personal data processing.

Requests related to business account data should usually be directed through the employer, system administrator, or customer organization that provides access to DDK Retail.

Users may request deletion of their account-related personal data by sending a request to info@zegoal.com. Such requests should identify the relevant account and app name DDK Retail. Upon verification of the request, we will delete all user personal data associated with the account, except data that must be retained for legal, security, fraud prevention, or compliance reasons. Any such retained data will be stored only for as long as required for those purposes.

Users may also:

• disable push notifications in device or app settings;
• disable biometric login in app settings;
• remove the app from the device.

9. Children

DDK Retail is not intended for children and is not directed to users under the age required by applicable law for business services.

10. This website (sellgo.by)

Sections 1–9 above describe the DDK Retail mobile application. This section covers the sellgo.by website itself.

Contact form

When you submit the form on this site, we receive the name, company, phone number and optional comment you enter, together with the label of the button you used. This information is delivered to our internal Telegram chat and is used solely to contact you about your enquiry. It is not stored in a database on the website and is not sold or shared with third parties for advertising.

Analytics and cookies

This website uses Yandex.Metrica, a web analytics service provided by Yandex, to understand how visitors use the site — which pages they open, where they come from, and which elements they interact with. For this purpose Yandex.Metrica places cookies on your device and processes technical data including your IP address, browser and operating system, screen resolution, referring page, and your actions on the site. Session Replay may record page interactions such as clicks, scrolling and mouse movement.

This data is processed in aggregate to improve the website. We do not use it to identify individual visitors, and we do not combine it with the contact details you submit through the form. The processing is carried out by Yandex under its own terms: Yandex Privacy Policy.

You can prevent this collection by disabling cookies in your browser settings, by using your browser’s private mode, or by installing the Yandex.Metrica opt-out add-on. The website remains fully usable with analytics blocked.

11. Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be posted with a new effective date.

12. Contact us

If you have questions about this Privacy Policy or your data, contact:

Zegoal Soft LLC
Email: info@zegoal.com