Privacy Policy

ALOFTAURA.international's ERP engine is, in one of its units, a workforce field-operations system for members and registered users of the ALOFTAURA organisation. It exists so that work — attendance sessions, field captures, reports and queries — flows between a member's device and the organisation's own back office. We collect only what that requires, and none of it is sold, shared with third parties, or used for advertising.

This website

The public pages of aloftaura.international set no advertising cookies, load no third-party fonts, scripts or analytics, and embed nothing from another host. Everything the page needs is served from this domain.

Anonymous arrival & activity signal

When the house's own server is connected, the site reports an anonymous signal so the ALOFTAURA team can see live interest in the house. What is sent: the page path, the page title, the host of the site you arrived from (never the full referring address, which can carry search terms), your browser's language, a coarse device class (phone/tablet/desktop), which sections of the page you reached, and how long you stayed.

What is never sent: no name, no account, no advertising identifier, no cookie, no device fingerprint, and no user-agent string. You are represented by a random handle your own browser generates and discards every day — it groups two page views in one visit and becomes meaningless tomorrow.

The signal is switched off entirely for any browser that sends a Do Not Track or Global Privacy Control preference, and it can be switched off for everyone by the site operator.

What the app collects

• Identity — your name, your ALOFTAURA Code (AAC) and, if you sign in by phone, your mobile number (used for one-time-code login and to resolve your registered record).
• Location (foreground only) — while you are signed in, the app shares your device position with the organisation's own server so that authorised Directors and Executives can see which company premise you have arrived at and when you left. Only premise-level arrival and departure events are kept as records; live positions expire within minutes and no long-term coordinate trail is stored. Location is never collected in the background or when signed out.
• Work records — attendance sessions, field capture records, daily productivity statistics, report filings and the messages and attachments you choose to send through the in-app chat.
• Camera — used only when you open the in-app scanner to read bale, bundle or HUID codes. Images are not stored or transmitted; only the decoded code value is kept.
• Microphone — used only when you record a voice note in the chat; the note is sent to your chain of command through the organisation's server.

The AAC workspace

Signing in to the AAC workspace creates a session that lasts until you sign out or the session expires. The workspace shows you the departments you hold a value in and the work inside them — that scope is decided and enforced by the organisation's server, not by the page in your browser.

Open the AAC workspace

Your session token is kept in your browser's session storage, which the browser clears when the tab closes. Tasks you create while the server is unreachable are held on your own device and sent when the connection returns; you can discard them from the workspace at any time before they are sent.

Where it goes

All data is sent exclusively to the ALOFTAURA organisation's own sync server, operated by ALOFTAURA — there are no third-party analytics, advertising or tracking SDKs in the app or on this site. Data is visible inside the organisation strictly by decision-power tier (the AAC authority model): your own records to you, roll-ups and presence to the Directors and Executives accountable for your division.

Offline use

Without a server connection the app stores your records only on your device (local storage) and syncs them when a connection returns.

Retention & deletion

Work records are retained as part of the organisation's system of record. Live location expires automatically (minutes). The anonymous website signal is kept on a bounded rolling buffer of recent events and is overwritten as new traffic arrives. To correct or delete your personal data, or to remove your account (your AAC seat and its records), contact your division Director or the ALOFTAURA administration at the address below — deletion requests are honoured within 30 days.

Security

Device passcodes are never stored; sensitive personnel demographics are held only in an encrypted vault (AES-GCM) that the server cannot read. Access to records is gated by the AAC authority model. This site is served over HTTPS only.

Children

The app is a workplace tool for adults (18+) and is not directed at children.

Contact

ALOFTAURA administration · g.jayp14@gmail.com

Changes to this policy will be posted at this URL with a new effective date.