Privacy Policy

This Privacy Policy explains how Core IT ("we," "us," or "our") collects, uses, and shares information when you use our websites, products, and services (the "Services").

1. Information we collect

We collect information you provide directly to us, such as:

• Account information — name, email address, and password (stored as a secure hash, never in plain text) when you sign up.
• Profile and account details you add after signing in.
• Communications you send us, such as support requests or inquiries.

We also collect some information automatically, including:

• Usage data — pages visited, actions taken, and general analytics events, collected via Google Tag Manager and related analytics tools.
• Device and log data — IP address, browser type, and similar technical information.
• Cookies used to keep you signed in and remember preferences.

2. Signing in with Google

If you choose to sign in with Google, we receive basic profile information from Google (such as your name and email address) to create and authenticate your account. We don't receive your Google password, and you can review or revoke this access at any time from your Google account settings.

3. The Core IT mobile app

The Core IT client portal is also available as an Android app (com.coreit.clientportal). It uses the same account and the same servers as the website, and everything in this Policy applies to it. The app asks for the following on your device, and only when you use the feature that needs it:

• Photos, videos, and camera — to attach an image or video, or take a photo, when you add it to a chat message or a support ticket. The picker opens only when you tap the attachment button; we do not read your photo library at any other time.
• Microphone — to record a voice message in chat, while you hold the record button.
• Location — to share your location in a chat message, only at the moment you choose to send it. The app does not collect location in the background or track your movements.
• Files and documents — to attach a document you select to a ticket or conversation.
• Notifications — we store a push notification token for each device you sign in on, so we can tell you about replies to your tickets and messages. You can turn notifications off in your device settings at any time.

Content you send through the app — messages, attachments, and support ticket details — is stored on our servers so that you and our team can see the conversation history. The app contains no advertising and no third-party analytics or crash-reporting services, and it does not use an advertising identifier.

4. How we use your information

We use the information we collect to:

• Provide, maintain, and improve the Services.
• Authenticate you and keep your account secure.
• Understand how the Services are used, through analytics, so we can improve them.
• Communicate with you about your account or our Services.
• Comply with legal obligations.

5. Cookies and tracking

We use cookies and similar technologies for authentication (keeping you signed in) and analytics (understanding how visitors use our site, via tools such as Google Tag Manager). You can control cookies through your browser settings, though disabling them may affect parts of the Services that require you to be signed in.

6. How we share information

We don't sell your personal information. We may share it with:

• Service providers who help us operate the Services (e.g. hosting, analytics, email delivery), under obligations to protect your data.
• Authorities, where required by law or to protect our rights.
• Another party in connection with a merger, acquisition, or sale of assets, subject to this Policy.

7. Data retention

We retain your information for as long as your account is active or as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements.

8. Your rights

Depending on where you live, you may have the right to access, correct, or delete your personal information, or to object to or restrict certain processing. To exercise these rights, contact us using the details below. To delete your account and the data attached to it, see Account Deletion.

9. Security

We use reasonable technical and organizational measures to protect your information, including encrypted storage of credentials and secure transmission over HTTPS. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

10. Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you by posting the updated Policy with a new "Last updated" date.

11. Contact us

If you have any questions about this Privacy Policy or how we handle your information, contact us at privacy@coreitbd.com.