RAFID CMS mobile privacy

RAFID CMS is operated by Mircado LLC, United States. This notice covers the iOS and Android companion. Your company controls the business information in its workspace and determines employee access. For help, contact [email protected]. The full RAFID privacy policy also applies.

We process your account name, email, user identifier, company memberships, assigned roles and access settings. Depending on enabled modules and permissions, company records can include customer contact details, sales activity, invoices, collections, inventory, shipment details, support requests, employee records, compensation and bank information. Company email and WhatsApp connections can include message content, participants, attachments and delivery information. We use this information to deliver the requested business functions, protect company boundaries and maintain accountable history.

Camera access is optional and supports item-code scanning and evidence capture. The system photo picker shares only the images you choose. Files are uploaded when you select them for an attachment or PDF analysis. The app does not request microphone recording or device-address-book access. Opening an address in maps uses the external maps app. Adding an appointment opens a system calendar editor for your review; RAFID does not import your private calendars. Notifications use an installation identifier and push token; lock-screen messages are generic by default. Device biometrics remain with the operating system; RAFID does not receive your biometric template.

When a company owner enables a field assignment for a sales representative, that employee can review the assignment and start field duty. After a prominent disclosure and separate system permission requests, RAFID collects precise location in the background, including when the app is closed or not in use, during the active duty session within assigned working hours. Only the company owner and explicitly assigned, currently authorized managers can view current locations. Locations support field coordination and alerts for sustained departures from a specified area. Missing signals, inaccurate fixes and suspicious device signals are shown separately; they do not establish misconduct. Employees can stop sharing at any time; responsible managers are notified. Declining location does not block other permitted RAFID work. No location queue is stored for later offline upload. Location history is retained for the company-selected period of 1–30 days (default 7), then removed by bounded cleanup and/or database expiry. Stopping duty hides current coordinates. Company deletion removes associated field records. Personal-account deletion removes location history, field assignments and device-verification keys. Security and company audit records may retain minimal event metadata without coordinates. The app uses Apple App Attest or Google Play Integrity, installation identifiers and device-integrity signals to reduce abuse; GPS authenticity cannot be guaranteed. Version 1.0 does not request field location.

OpenAI processes AI requests, permitted record excerpts, selected conversation text and selected PDF content needed for enabled AI actions. Before a new AI request sends content, the mobile app names OpenAI and asks for permission for that request. You can decline and continue ordinary CRM work. Company AI settings, permissions, budgets and inbox assignments also apply. AI may be inaccurate: review its output and confirm proposed changes or messages. General assistant chat does not search private inboxes. Company-authorized server automations and Morning Briefs have separate owner-controlled settings, described in the full privacy policy.

Google Firebase provides authentication, database, device attestation and push infrastructure. Apple delivers iOS push notifications. Cloudflare provides delivery/security infrastructure. Contabo hosts RAFID services in France. OpenAI supports enabled AI processing; Meta/WhatsApp supports company-authorized WhatsApp messaging. Connected mail infrastructure handles assigned company email. Information may be processed internationally. RAFID does not sell personal information, display third-party advertising or use app data for cross-app advertising tracking. Mobile subscription purchasing is not offered.

Authorized supervisors can view their assigned team and territories inside RAFID using Apple Maps on iOS and Google Maps on Android. Map providers process map-rendering requests and device/network information under their own privacy terms. Viewing the team map does not request the supervisor’s own location. Employee markers require a current, accurate fix during authorized field duty; stale and off-duty markers are hidden. Map data is online-only and is not included in RAFID’s offline summaries or drafts.

Authentication state is protected using platform storage. Eligible recent operational summaries and explicit drafts use an encrypted local database, separated by account and company. Offline authorization expires after 12 hours unless refreshed. Sensitive financial details, payroll, personnel fields and private inbox history are not included in that offline cache. Connect to the internet before changing records. Offline drafts do not submit automatically. Sign-out clears the account cache. Network transport uses HTTPS, and the server checks permissions for every controlled operation.

Business information remains subject to the company’s retention requirements. You can request deletion of your personal RAFID login and personal app data from More → Delete personal account, after resolving company ownership and completing identity verification. Company transaction records and historical authorship can remain under company policy; personal deletion does not erase a company. Some security, audit, legal or backup records may be retained where required. Use the account deletion page to request help outside the app.

Contact [email protected] about access, correction or deletion requests. Do not send passwords or API keys. We verify identity and may coordinate with the company responsible for a workspace. This notice was updated on October 19, 2026.