Privacy Policy
How C-FAST collects, uses and protects information when you use the mobile and web application. Written in plain language — no hidden surprises.
Contents
Overview
C-FAST is a construction operations platform used by contractors, site engineers, project managers and finance teams. This policy explains what data the C-FAST mobile application collects, why each piece is needed, and the controls you have.
C-FAST is a workforce application — your employer (the contractor or construction company operating the account) is thedata controller. Pronasoft India Pvt. Ltd. processes data on their behalf as the platform provider.
Who we are
Pronasoft India Pvt. Ltd. is a construction technology company headquartered in Pune, Maharashtra, India. We publish the C-FAST application on the Google Play Store, the Apple App Store and as a web application.
Information we collect
3.1 Account information
- Name, mobile number and email address
- Employer / project assignment and role (e.g. site engineer, project head)
- Employee ID provided by your organization
3.2 Operational data you submit
- Attendance check-in selfies, timestamps and GPS coordinates
- Daily Progress Reports (DPR), photographs of site activities
- Purchase orders, inventory entries, wastage records, equipment logs
- Comments, approvals and messages inside the application
3.3 Device & technical information
- Device model, operating system and application version
- Crash reports and anonymous diagnostics (when enabled)
- Login events and in-app activity timestamps (for audit trails)
App permissions
The C-FAST Android app requests the permissions below. Each is used only for the feature described — we do not collect background data beyond what is shown here.
Location REQUIRED
To geo-tag attendance check-ins, Daily Progress Reports and PO delivery confirmations. We only read location at the moment you submit an entry. No background tracking.
Camera REQUIRED
To capture attendance selfies, progress photos of site activities, wastage evidence, delivery photos and material receipts — a core part of how C-FAST creates an auditable record.
Photos & Media REQUIRED
To attach existing photos from your gallery to reports (e.g. reference images, older site photos). Access is read-only and scoped to user-selected files.
Storage REQUIRED
To save generated reports (PDFs, PO documents) and cache data so the app works offline on poor-signal sites. All cached data is encrypted.
Phone State OPTIONAL
To detect incoming calls and pause an active recording session (e.g. when a driver uses the hands-free equipment log). Not used to read call logs.
Notifications REQUIRED
To deliver PO approvals, attendance reminders, delivery confirmations and urgent site alerts. You can mute any category in Settings.
Internet & Network State REQUIRED
To sync data with the C-FAST servers and detect connectivity so the app can queue entries when offline and sync them automatically when back online.
Biometric / FingerprintOPTIONAL
To secure app login with fingerprint or device unlock. Biometric data never leaves your device.
How we use information
- Operate the core features of C-FAST — attendance, POs, DPR, billing and the rest
- Create audit trails so contractors can verify who did what, when and where
- Send operational notifications (approvals, deliveries, alerts)
- Improve product reliability through crash reports and anonymous diagnostics
- Provide customer support when you contact us
We do not use your data for advertising, donot sell it to third parties, and donot build advertising profiles.
Sharing & disclosure
C-FAST shares data only in these limited cases:
- With your employer — your workplace owns the C-FAST account. Project data you submit is visible to authorized roles in your organization based on permissions.
- With service providers — cloud hosting (AWS Mumbai region), push notifications (Firebase Cloud Messaging), and error monitoring. All are bound by data-processing agreements.
- When legally required — if we receive a valid legal order from Indian authorities, we may be required to disclose data and will notify the customer unless prohibited.
Data storage & security
- All data is stored in AWS data centers in India (Mumbai region)
- Data is encrypted in transit (TLS 1.2+) and at rest (AES-256)
- Role-based access controls limit who on our team can see what
- Regular backups and incident-response procedures are in place
Retention
Operational data (POs, attendance, progress records) is retained for as long as your employer's C-FAST account is active. Upon account termination, data is retained for 90 days to allow export and recovery, then permanently deleted — except where law requires longer retention (e.g. GST records, 8 years).
Your rights
Under applicable Indian data protection law, you can request:
- Access to the personal data C-FAST holds about you
- Correction of inaccurate data
- Deletion of your account and associated personal data (subject to employer retention)
- A copy of your data in a portable format
- To withdraw consent for optional permissions at any time
To exercise any of these rights, contact us at the email below. We respond within 30 days. To request account deletion, use Request Account Deletion in the app's Profile screen or email us with the subject "Account Deletion Request" — the account is deactivated and associated personal data deleted within 30 days, except records your employer is legally required to retain.
Children's privacy
C-FAST is a workplace application intended for users aged 18 and above. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, please contact us and we will remove the data.
Changes to this policy
We may update this policy when features, legal requirements or security practices change. Material changes are notified in-app and via email to account administrators at least 14 days before taking effect. The effective date at the top of this page always reflects the current version.
Contact
Pronasoft India Pvt. Ltd.
Pune, Maharashtra, India
Email: info@pronasoft.com