Ockys Privacy Policy

Ockys is an Android order-taking app for field sales teams, developed by Yahasystem. It works on top of the user's own Dropbox account: it reads the product catalog, the customer list and the sales staff list from files generated by the company's ERP, and it writes the confirmed orders back to that same Dropbox account so the ERP can import them.

Yahasystem does not operate any server for Ockys. There is no Yahasystem database where your data is stored. All data travels directly between your device and your Dropbox account.

Ockys connects to Dropbox only after you sign in and explicitly authorize it. It uses the following Dropbox permissions:

• account_info.read (granted by default by Dropbox) — to show the name, email address and profile photo of the connected account.
• files.metadata.read — to list the folders where the catalog files and product photos are stored.
• files.metadata.write — to create and update the order files and folders that Ockys manages in the shared folder.
• files.content.read — to download the files generated by the ERP: items.xml (products and prices), customers.xml (customers), employees.xml (sales staff) and the product photos in the fotoproducto/ folder.
• files.content.write — to upload the order files that Ockys creates, so the ERP can pick them up from the shared folder.

Ockys only reads and writes the files and folders listed above. It does not open, modify, share or delete any other content in your Dropbox, and it does not change your sharing settings.

3.1 Dropbox account information

When you sign in, Ockys requests your name, email address and profile photo URL from Dropbox, solely to display them inside the app so you know which account is connected. This information is stored only on your device and is never sent to Yahasystem or any third party.

3.2 Sign-in credentials

Sign-in uses OAuth 2.0 with PKCE. Ockys never sees or stores your Dropbox password: you enter it on Dropbox's own website, not in the app. The access tokens returned by Dropbox are kept in the operating system's secure storage, backed by the device keystore.

3.3 Business data

The product catalog, customer list, sales staff list and orders belong to you or your company. Ockys reads and writes them in your own Dropbox account.

The customer list may contain personal data of third parties — such as name, tax ID or national ID number, account number and balance — that your company placed in its Dropbox. The sales staff list contains each salesperson's employee code and name. Ockys displays this information and includes it in the orders it uploads to your account. Your company is the controller of that data with respect to its own customers and employees.

3.4 Data stored on the device

To work offline, Ockys keeps a copy of the catalog, customer list, sales staff list, product photos, the order in progress and confirmed orders pending upload in the app's private storage.

3.5 Demo data

If you open Ockys without signing in, it shows a demo catalog bundled with the app. This content is fictitious and does not correspond to any real products, prices or customers. It is fully removed as soon as you sign in with a real account.

• It does not include analytics, usage tracking or crash-reporting tools.
• It does not show advertising.
• It does not include third-party SDKs that collect data.
• It does not sell, rent or transfer your data to anyone.
• It does not access your location, contacts, camera, microphone or personal photos.
• It does not send your data to Yahasystem servers, because none exist.

Only with Dropbox, because that is where you choose to store your information. Your relationship with Dropbox is under your own account and Dropbox's privacy policy: https://www.dropbox.com/privacy

No other company receives data from Ockys.

All communication with Dropbox is encrypted over HTTPS. Access tokens are kept in the operating system's secure storage, never in plain text. Data stored on the device lives in the app's private directory, which other apps cannot access.

• Data on the device: deleted when you uninstall Ockys or clear the app's data from Android settings.
• Data in Dropbox: stays in your account until you delete it. Ockys cannot delete it for you.
• App access: you can revoke Ockys' access to your Dropbox at any time at https://www.dropbox.com/account/connected_apps

Ockys is a business tool for sales professionals. It is not intended for children under 13 and does not knowingly collect data from them.

If we change this policy, we will update the date at the top and publish the new version at this same address.

For any questions about this policy or how your data is handled, write to appsoporte@yahacloud.com