Privacy Policy of ATPro Partner

ATPro Partner is run by MP CARRIERS O.E., which decides why and how your data is used (the "controller"). STANIMEROS PANTELEIMON develops and operates the app on its behalf (as a "processor"). Contact: mp.transfer.app@gmail.com.

This is what ATPro Partner handles. Each item is explained in the sections below.

You sign in with email and password through Firebase Authentication. We store your name, your email, a phone number if you add one, and your account ID. We never see your password.

If you allow location access all the time, ATPro Partner collects your device location while the app is running or in the background, including when the screen is off or another app is open. It stops when you close the app. This lets dispatchers and admins of your organization see driver positions during shifts and assign jobs.

• • Stored in Firebase.
• • Visible only to authorized users of your organization.
• • Never sold or shared with third parties.
• • You can turn it off at any time in your device settings (Location permission).

The app stores the business data you and your organization enter: orders and transfers (including customer names, phone numbers and addresses), vehicles, drivers and logs. This belongs to your organization and is visible to its authorized users.

Address fields use the Google Places API for suggestions, and order search uses Algolia. The text you type there is sent to those services.

Firebase Cloud Messaging sends push notifications to your device. We store a notification token for your device. You can turn notifications off at any time in your device settings.

ATPro Partner uses Firebase Analytics to see how the app is used. It records app interactions, device and app identifiers (on Android this can include the advertising ID), and your approximate country. We use it in aggregate to fix problems and improve the app, not for advertising.

Firebase Crashlytics sends us a report when the app crashes. It includes your device model, operating system version and the state of the app at the time.

Under the GDPR we rely on these legal bases:

• • Contract, Art. 6(1)(b): to provide the features you asked for and your account.
• • Consent, Art. 6(1)(a): for the device permissions you allow, such as notifications or location. You can withdraw consent at any time in your device settings.
• • Legitimate interests, Art. 6(1)(f): crash reports, aggregated usage analytics and security, so we can keep the service working and improve it.
• • Legal obligation, Art. 6(1)(c): records we must keep by law, such as accounting records.

We use these providers to run ATPro Partner. Some process data on our behalf. Others, such as the app stores, process it under their own policies.

Google Firebase and Google Cloud, for:

• • Firebase Authentication: sign-in and accounts
• • Cloud Firestore: database for app data
• • Google Cloud: our servers and server-side processing
• • Firebase Cloud Messaging: push notifications
• • Firebase Analytics: usage analytics
• • Firebase Crashlytics: crash reports
• • Firebase App Check: checks that requests come from the real app.

Google processes this data under its Privacy Policy.

Other providers:

• • Google Places API: place and address search. The text you type is sent to Google.
• • Algolia: order search. The text you type is sent to Algolia.

We do not sell your personal information or use it for advertising.

Some of the providers above, such as Google, may process data in the USA. These transfers rely on the EU-US Data Privacy Framework or Standard Contractual Clauses.

• • Account and app data: until you delete it or your account. We handle deletion requests within 30 days.
• • Crash reports: about 90 days.
• • Usage analytics: up to 14 months.
• • Data on your device: until you clear it or uninstall the app.
• • Records we must keep by law are kept for the required period.

Giving us data is not a legal requirement. Some features need it, and without it those features will not work.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

You can ask us to:

• • give you access to your data
• • correct it
• • delete it
• • restrict how we use it
• • stop using it for certain purposes (object)
• • give you a copy you can move elsewhere (portability)

You can withdraw your consent at any time. You can object at any time to processing based on legitimate interests, such as analytics and crash reports.

To use these rights, email mp.transfer.app@gmail.com or use the data deletion page. We reply within one month. You can also complain to the Hellenic Data Protection Authority at www.dpa.gr.

Data is encrypted in transit (HTTPS) and stored with Google Cloud/Firebase, which encrypts data at rest. We limit access to what is needed to run the service. No system is completely secure.

ATPro Partner is not intended for children under 15. We do not knowingly collect their data. If you think a child has given us data, contact mp.transfer.app@gmail.com and we will remove it.

If we change this policy, we update the date at the top of this page.

Questions about this policy or your data: mp.transfer.app@gmail.com.

Thessaloniki, Greece