Privacy Policy | ZTXEYE Enterprise Device Policy Controller

1. Introduction & Scope

This Privacy Policy explains how ZTXEYE Technologies ("ZTXEYE", "we", "our", or "us") collects, uses, protects, and discloses technical telemetry and device management data when utilizing the ZTXEYE Enterprise Device Policy Controller (DPC) application (Package Name: com.ztxeye.dpc) and the centralized management platform hosted at https://eye.ztxai.in.

ZTXEYE is a dedicated enterprise mobile device management (MDM) solution built specifically for corporate-owned devices, retail device financing compliance, kiosk lockdown, and enterprise fleet protection under the official Android Enterprise framework (Android 7.0 to Android 16+ / API 36).

Enterprise Use Disclosure: ZTXEYE is not a consumer spyware or tracking application. It is provisioned exclusively via Android Enterprise 6-tap QR provisioning or authorized device administrator enrollment with express user notice and organizational agreement.

2. Data Controller & Security Contact

For inquiries regarding this Privacy Policy, enterprise data handling, or Google Play Protect compliance, you may contact our dedicated security team:

Organization: ZTXEYE Enterprise Solutions
Data Protection & Compliance Email: security@ztxai.in
Technical Support: support@ztxai.in
Official Web Portal: https://eye.ztxai.in

3. Information We Collect

In strict adherence to Google Play Developer Policies and data minimization principles, ZTXEYE collects only minimal technical telemetry strictly required to verify device security, hardware compliance, and operational status:

Data Category	Specific Data Elements	Purpose & Legal Basis
Device Identifiers	Hardware Model, Manufacturer, Build Fingerprint, Android OS Version, Generated Device UUID.	Identify device in enterprise fleet inventory; enforce compatible OS policies.
Hardware Diagnostics	Battery percentage, Charging state, Internal storage free/total capacity.	Monitor device health and prevent unexpected battery shutdown during enterprise operations.
Network Telemetry	Network connectivity status (WiFi / Cellular connected flag), Public IP address for API requests.	Ensure connectivity to enterprise management server (`eye.ztxai.in`) for heartbeat sync.
Policy Compliance State	Device Owner active flag, Camera disabled flag, Lock status (`is_locked`), App uninstall protection flag.	Verify corporate security policy compliance and retail asset financing collateral security.

What We NEVER Collect:

❌ NO Personal Communications: We do NOT access, read, or collect SMS messages, emails, phone calls, or chat history.
❌ NO Audio / Video Recording: We do NOT record audio, ambient microphone sound, or unauthorized camera footage.
❌ NO Keystrokes or Credentials: We do NOT monitor passwords, banking details, or keystrokes.
❌ NO Personal Media: We do NOT read or transmit personal photos, personal videos, or external media files.
❌ NO Web Browsing History: We do NOT track web browsing history, bookmarks, or browser searches.

4. Android Permissions Declared & Strict Justification

ZTXEYE declares only the minimal permissions required for Android Enterprise Device Policy Controller operation:

Permission	Category	Official Enterprise Justification
`BIND_DEVICE_ADMIN`	Device Policy	Required by Android OS for Device Policy Controllers (DPC) to enforce enterprise security policies, kiosk mode, remote wipe, and device lock.
`INTERNET`	Network	Enables encrypted HTTPS/TLS communication with the enterprise management backend at `https://eye.ztxai.in`.
`ACCESS_NETWORK_STATE`	Network	Allows the app to check whether network connectivity is active prior to attempting periodic telemetry sync.
`RECEIVE_BOOT_COMPLETED`	System	Restarts enterprise background telemetry and compliance verification when the device is rebooted.
`FOREGROUND_SERVICE` `FOREGROUND_SERVICE_DATA_SYNC`	Service	Maintains reliable data synchronization with persistent notification informing the user that enterprise management is active.
`WAKE_LOCK`	Power	Ensures critical policy updates and remote security lock commands are reliably processed without being killed by OS sleep.
`POST_NOTIFICATIONS`	Notification	Required on Android 13+ (API 33+) to display the mandatory foreground service status notification to the user.

5. Device Lock & Retail Financing Protection Policy

When enrolled in retail financing or corporate asset protection mode:

If an EMI payment is delinquent or a corporate device is reported lost/stolen, an authorized administrator may issue a Remote Lock command.
The lock screen explicitly displays the customer support phone number, retailer identifier, device IMEI/UUID, and contact instructions.
The lock feature utilizes the standard Android DevicePolicyManager.lockNow() and full-screen compliance window. It is NOT ransomware and does not demand cryptocurrency, arbitrary extortion, or third-party gift cards.
Upon payment clearance or administrative release, the device is immediately unlocked via cPanel command.

6. Data Security & Storage Practices

Encryption in Transit: All communications between the mobile application and the cPanel server are strictly encrypted using TLS 1.2/1.3 (HTTPS). Plaintext HTTP is blocked.
Role-Based Access Control (RBAC): Backend access is partitioned across Super Admin, Distributor, and Retailer roles. Passwords are protected using salted bcrypt hashing. Session tokens are secured using industry-standard signed JWT.
No Third-Party Advertising: ZTXEYE contains zero third-party advertising SDKs (no Google AdMob, Unity, AppLovin, etc.) and zero behavioral tracking frameworks.
No Data Brokering: We never sell, rent, or trade device telemetry or customer information to third-party data brokers.

7. User Transparency & Device Unenrollment

Users have the right to transparent information regarding device enrollment. An ongoing foreground notification is visible on Android whenever the background service is running.

Upon full satisfaction of device financing or return of corporate property, the authorized retailer or administrator can issue an Unenroll / Wipe Policies command through the cPanel portal, which removes all administrative restrictions and uninstalls the DPC package.

8. Policy Updates & Inquiries

We may update this Privacy Policy from time to time to maintain compliance with updated Android Enterprise API standards, Google Play policies, or applicable local data protection regulations. The latest version will always be hosted at this URL:
https://eye.ztxai.in/privacy.html

For inquiries, compliance audits, or Google Play Protect review inquiries, please email security@ztxai.in.