Privacy Policy

Who this policy covers

This application is used by authorized Biloxi Paper Company sales representatives and by the sales manager. Accounts are created by invitation from a manager; there is no public sign-up for company staff outside that process. If you are not an authorized user, you should not use this application.

Information we collect

• Account information. Your name, work email address, assigned territory, role (representative or sales manager), and password credentials handled by our authentication provider. If you sign in with Google, we receive the basic profile and email address that Google returns.
• Call activity you dictate or type. Audio you record in the app, the transcript produced from that audio, and the fields extracted from it: customer or account name, contact name, city or location text you speak, call type, summary, next step, follow-up date, matched catalog products, quantities, and estimated annual dollar value.
• Opportunity and review records. Opportunity descriptions, stages, expected close dates, product-match corrections, review notes, approvals and rejections, and assignments between manager and representative.
• Notifications and preferences. In-app notifications, read status, follow-up reminder schedules, and your notification and display preferences (some preferences are stored in your browser).
• Change history. An audit log recording which account changed which record and when, for calls, opportunities, and product matches.
• Technical records. Standard server and platform logs generated when the application is served, and error reports raised by the application.

We ask only for what the sales log needs. Do not enter Social Security numbers, bank or payment card numbers, health information, government ID numbers, or other sensitive personal details into dictations or text fields — these are not requested and are not needed for this tool.

Location information

The map in the manager view is built from the city or place name a representative states in a dictation. That text is converted to approximate coordinates using a geocoding service. The application does not read your device’s GPS or request browser location permission, and it does not track your position continuously.

Voice recordings and automated processing

When you dictate a call, the recording is sent to an AI service to produce a transcript, and the transcript is processed by an AI model to extract the structured fields listed above and to suggest matches against the company product catalog. These suggestions are automated and can be wrong; the sales manager can review and correct them, and no employment decision is made by the software itself. Transcripts and extracted fields are stored in the company database and are visible to you and to the sales manager.

How we use information

• To create, store, and display your call log, opportunities, and follow-ups.
• To give the sales manager a view of team activity, pipeline, and territory coverage.
• To send in-app notifications, assignment alerts, and follow-up reminders.
• To send account emails such as invitations, confirmations, and password resets.
• To generate exports (CSV, Excel, PDF) requested by an authorized manager.
• To secure the application, investigate misuse, and diagnose errors.

Who can see your data

Access rules are enforced in the database: a representative can read and write their own calls, opportunities, and notifications, and the sales manager role can read team-wide records and manage review, assignment, and opportunity stages. Company administrators of this application may access records for support and oversight.

Service providers

We use third-party providers to run this application. Each processes data on our behalf for the purpose described:

• Lovable — application hosting, and the managed database, authentication, storage, and AI gateway backing it.
• AI model providers reached through that gateway — speech-to-text transcription and extraction of the structured fields from transcripts.
• Google — Google Maps and geocoding for the territory map, and Google sign-in when a user chooses it.
• Our transactional email provider — delivery of account and notification email sent from the mstogo.com domain.

We do not operate advertising networks in this application and we do not use it to build advertising profiles. We may disclose information if required by law, to protect our rights, or in connection with a corporate transaction.

Agent and API access

This application exposes an authorized agent interface. If you connect an external agent or client, you are shown a consent screen describing the access being granted, and that client can then read or write records on your behalf within your own permissions until you disconnect it.

Cookies and local storage

This application uses only storage that is strictly necessary to operate: a session record that keeps you signed in, and browser local storage that remembers interface preferences such as which activity types you display. We do not use advertising cookies, cross-site tracking pixels, or third-party analytics tags in this application, so there is no non-essential consent to give or withdraw. Clearing this storage in your browser will sign you out and reset your interface preferences. If tracking is ever added, this policy will be updated and a consent control will be provided before those tags load.

Retention

Call records, opportunities, product matches, notifications, and audit entries are retained as company business records for as long as the company keeps them for sales and reporting purposes, and then deleted or archived at the company’s direction. Specific retention periods are set by company policy rather than by this application.

Security

Data is transmitted over encrypted connections, access requires authentication, and per-record access rules are enforced on the server. Privileged operations verify the manager role on the server before running. No system can be guaranteed secure; please report any suspected problem using the contact below.

Your choices and requests

You can view and correct much of your own call data in the app, and you can turn individual notification types on or off in notification settings. For access to, correction of, or deletion of your account information — or to ask which records the company holds about you — contact us at admin@mstogo.com. Requests are handled subject to the company’s obligation to retain business records. Depending on where you live, you may have additional rights under applicable privacy law; we will honor rights that apply to you.

Children

This is a workplace tool intended for adults employed or engaged by the company. It is not directed to children and we do not knowingly collect information from anyone under 16.

Changes

We will update this policy when our practices change and will revise the effective date above.

Contact

Questions about this policy or about your data: admin@mstogo.com.