Qapan Data Hub
Privacy Policy
In short
- Data Hub is a workplace tool. Nobody can sign up; accounts are issued by your organisation.
- We use your data only to sign you in, keep your account secure and show you the operational records your account is allowed to see.
- No advertising, no analytics or tracking tools, no location, and we never sell data.
- Face ID, Touch ID and fingerprint checks stay on your phone. We never receive biometric data.
- You can ask for your personal data or for your account to be deleted at info@gigant.tech.
1. Who we are
Qapan Data Hub is built and operated by Gigant Technology ("we", "us"). It consists of the web dashboard at datahub-sys.com and the DataHub System mobile app. Together they record and report the loading and unloading of consignments: weighbridge readings, laboratory results, volumes and deliveries.
Data Hub is used by the companies that run those operations and by their staff ("your organisation"). Your organisation decides who gets an account and which sites and records each account can see. We process the data on your organisation's behalf and under its instructions.
2. Who can use Data Hub
You cannot create an account yourself, in the app or on the website. Accounts are created by your organisation's administrators. Mobile access is switched on separately for each account. If you have questions about why you have access or what you can see, ask your administrator.
3. What we collect
| Data | What it is | Why |
|---|---|---|
| Account details | Username, display name, password, and the sites and permissions your administrator gave you. The password is stored on our servers only as a one-way hash. The app never stores it. | To sign you in and show only what you are allowed to see. |
| Contact details for sign-in codes | The mobile number and/or email address your administrator adds to your account. | To send you a one-time code when you sign in on a new device. |
| Sign-in codes and authenticator | One-time codes, stored only as hashes and valid for a few minutes. If you switch on an authenticator app, its secret key is stored on our servers so we can check your codes. Backup codes are stored only as hashes. | Two-step verification. |
| Device and session information | Device name, platform (iOS or Android), app version, a random ID the app creates when it is installed (not a hardware or advertising identifier), sign-in time, last-seen time and IP address. | To keep you signed in, recognise a device you have used before, and let administrators see and remove signed-in devices. |
| Security records | Failed sign-in attempts and changes to your security settings, for example switching an authenticator app on or off. | To block password guessing and to investigate misuse. |
| Operational records | The consignment, weighing, laboratory and site records your account is allowed to view. These can include drivers' names, vehicle plate numbers and the names of the staff who entered them. | This is the purpose of the service. The mobile app only displays these records; it does not create or change them. |
4. How we use it
- To sign you in, verify it is you, and keep your session open on devices you use.
- To show you the operational records and reports your account has access to.
- To protect the service: limiting sign-in attempts, recording security events and investigating misuse.
- To give support when you or your organisation ask for it.
We do not use your data for advertising or marketing, we do not build profiles of you, and we make no automated decisions about you.
5. What we do not collect
The app does not access your location, contacts, photos, camera, microphone, calendar or health data, and it does not read your advertising identifier. It contains no analytics, advertising or crash-reporting tools from other companies. We do not track you across other companies' apps or websites.
6. Face ID, Touch ID and fingerprint
You can choose to unlock the app with your phone's biometrics (Profile → Security → Unlock with biometrics). The check is done entirely by your phone's operating system. The app receives only a yes or no answer. Your face or fingerprint data never leaves your phone and is never sent to us. Biometrics only reopen a saved session; they never replace your password.
7. What stays on your phone
- Sign-in tokens are kept in the iOS Keychain or Android encrypted storage and are excluded from device backups.
- Your settings are stored in the app: light or dark theme, text size, colour, tile alignment, and whether biometric unlock is on.
- Clipboard: tapping a figure copies it to your clipboard. That happens only when you tap, and the app never reads your clipboard.
Signing out deletes the sign-in tokens from your phone. Deleting the app removes everything it stored.
8. Who we share data with
We never sell personal data or share it for advertising. We share it only in these cases:
- Your organisation. Its administrators can see your account, your sign-in history and your signed-in devices, and can remove devices or access.
- Delivery of sign-in codes. If a code is sent by WhatsApp or text message, your mobile number and the code go to our messaging provider, Standing Tech. If it is sent by email, your email address and the code go to our email provider, Mailgun. They use these details only to deliver the message.
- Hosting. Our servers are run by a hosting provider that stores the data for us and cannot use it for its own purposes.
- Systems your organisation connects. Operational records may be exchanged with systems your organisation instructs us to connect, such as its own consignment or fleet-tracking systems.
- The law. We disclose data where the law requires it, or to protect the security of the service and its users.
9. Security
- All traffic between the app or browser and our servers is encrypted (HTTPS).
- Passwords, sign-in codes, backup codes and sign-in tokens are stored only as one-way hashes.
- Access tokens expire after 30 minutes and are renewed automatically while you use the app.
- Repeated failed sign-ins are blocked for a while, and a new device can be required to pass two-step verification.
- Administrators can sign a device out or withdraw access at any time.
No system is perfectly secure. If we learn of a breach that affects your data, we will inform your organisation and, where required, you.
10. How long we keep data
- Account and contact details: while your account exists.
- Sign-in codes: they expire within minutes and cannot be used again.
- Session and security records: kept as a security log while your account is active and for as long as needed to investigate misuse, then deleted or anonymised.
- Operational records: kept as long as your organisation needs them for its business, audit and legal obligations. These are your organisation's records, so they are not deleted when an individual account is removed.
11. Your choices and rights
- Sign out at any time from Profile → Sign out. Your administrator can also sign out any of your devices.
- Switch biometric unlock or an authenticator app on or off from Profile → Security.
- Depending on where you live, you may have the right to see the personal data we hold about you, to correct it, to have it deleted, or to object to how it is used. To use these rights, contact your administrator or email info@gigant.tech. We reply within 30 days.
12. Deleting your account
Because accounts are issued by your organisation, you can ask your administrator to delete your account, or email info@gigant.tech from the address on your account with the subject "Delete my Data Hub account". We will confirm with your organisation and then, within 30 days, delete your account, your contact details for sign-in codes, your authenticator settings and your signed-in devices. Operational records you entered or viewed stay with your organisation, as explained in section 10.
13. Children
Data Hub is a workplace tool for adults. It is not directed to children, and we do not knowingly collect children's data.
14. Changes to this policy
If this policy changes, we will update this page and the date at the top. For significant changes we will also inform your organisation.
15. Contact us
Gigant Technology
Email: info@gigant.tech
Website: www.gigant.tech