N-Tag Agent Privacy Policy

A. PROJECT PRIVACY AUDIT
•Application Name: N-Tag Agent
•Developer: Soori Technology Pvt. Ltd. (confirmed via backend domain sooritechnology.com.np)
•Target Region: Nepal (confirmed via nepali_utils, NepaliFont assets, and regional identifiers like Province/District/Ward)
•Core Purpose: An agent-facing tool for managing vehicle RFID tags, vehicle registration verification, inventory tracking, and owner identity verification.
•Data Handling Paradigm: The application acts as a data collection and management portal for agents. It handles highly sensitive Personally Identifiable Information (PII), financial data, and vehicle metadata, all of which are transmitted to the Soori Technology backend.
•Security Implementation: The application employs a sophisticated security layer using hybrid RSA and AES encryption (via EncryptionHelper) to protect sensitive payloads before transmission. All communications are conducted over HTTPS.

B. Data Inventory
•User Identity: Collected (Name, DOB, Citizenship No). Stored in local cache. Transmitted to Backend. Purpose: Identity verification.
•Contact Info: Collected (Email, Phone). Stored in local cache. Transmitted to Backend. Purpose: Account management.
•Financial Info: Collected (Bank Name, Account No). Transmitted to Backend. Purpose: Vehicle finance.
•Vehicle Data: Collected (Engine/Chassis No, Plate). Transmitted to Backend. Purpose: Registration & Tagging.
•Photos/Images: Collected (JPEG/PNG/PDF). Transmitted to Backend. Purpose: Document verification.
•Device Identifiers: Collected (Android ID/Vendor ID). Stored in Prefs. Transmitted in Headers. Purpose: Security & Anti-fraud.

C.Permission Audit
•CAMERA: Used for scanning RFID tags and capturing document photos. (Evidence: MobileScanner usage in code).
•INTERNET: Used for all backend communications. (Evidence: AuthApiService).
•STORAGE: Used to pick files/photos and save generated PDF reports. (Evidence: FilePicker and Printing plugins).
Google Play Data Safety Cross-Check
•Data Type: Personal Info (Name, Email, Phone, ID) | Collected: Yes | Shared: No | Purpose: Account Mgmt / Fraud Prevention.
•Data Type: Financial Info | Collected: Yes | Shared: No | Purpose: App Functionality.
•Data Type: Photos/Docs | Collected: Yes | Shared: No | Purpose: App Functionality.
•Data Type: Device IDs | Collected: Yes | Shared: No | Purpose: Security.

1. Introduction
Welcome to N-Tag Agent. This Privacy Policy explains how N-Tag Agent ("we," "us," or "our"), developed by Soori Technology Pvt. Ltd., collects, uses, and protects your information when you use our mobile application. This application is designed for authorized agents to manage vehicle tagging, verification, and inventory services.
2. Information We Collect
Based on your use of the application, we collect the following categories of information:
•Personal Identity Information: Name, email address, phone number, physical address, date of birth, and government-issued identification details (such as Citizenship Number).
•Vehicle Information: Detailed vehicle metadata including engine numbers, chassis numbers, vehicle models, colors, fuel types, registration plate details, and ownership history.
•Financial Information: Bank names, account holder names, and account numbers associated with vehicle financing or registration.
•Media and Documents: Photos of users, vehicles, and digital copies of identity and registration documents (JPEG, PNG, PDF).
•Device Information: Unique device identifiers (such as Android ID or iOS Vendor ID) and basic technical data required for security and session management.

3. How We Use Information
We use the collected information strictly for the following purposes:
•To verify the identity of vehicle owners and authorized agents.
•To process vehicle registrations and assign RFID tags.
•To manage inventory and track the status of tagging requests.
•To prevent fraud and ensure the security of the registration ecosystem.
•To provide technical support and facilitate communication between agents and the central system.

4. How We Share Information
We do not sell, rent, or trade your personal information to third parties for marketing or advertising. Information is only shared in the following circumstances:
•Service Providers: With our backend infrastructure providers solely to host and process data on our behalf.
•Legal Requirements: When required by law, regulation, or government authority to comply with legal processes.

5. Third-Party Services
The application utilizes the following third-party services to ensure security and functionality:
•Cloudflare Turnstile: Used for bot protection and to ensure that login attempts are made by humans.
•Google Play Services: Used for core application functionality on Android devices.

6. Camera and Storage Access
The application requires specific permissions to function:
•Camera: To scan RFID tags/QR codes and to capture necessary document and vehicle photos.
•Storage: To upload existing documents from your device and to save generated reports.

7. Data Security
We implement robust security measures designed to protect your information. This includes:
•Encryption in Transit: Sensitive data payloads are encrypted using a hybrid RSA/AES scheme before transmission.
•Secure Communication: All data is transmitted over encrypted HTTPS channels.
•Local Security: Authentication tokens and session data are stored in secure application directories.

8. Data Storage and Retention
Your information is stored on secure servers managed by Soori Technology. We retain personal and vehicle data only for as long as is reasonably necessary to fulfill the purposes described in this policy, or as required by applicable laws and regulatory requirements in Nepal.

9. User Rights and Deletion
Users may have certain rights regarding their data, including the right to access, correct, or request the deletion of their information. Because this is an agent-based application, certain data may be required to be retained for regulatory compliance.
To exercise your rights or to request account deletion, please contact us at:info@sooritechnology.com

10. Children's Privacy
N-Tag Agent is an enterprise tool not intended for use by children. We do not knowingly collect personal information from individuals under the age of 18.

11. Changes to This Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Effective Date.”

12. Contact Information
If you have any questions about this Privacy Policy, please contact us at:
Soori Technology Pvt. Ltd.