JagTrace is an NFC mail and package tracking product made by AllSync Solutions. This policy explains what information we collect, why we collect it, who we share it with, and the choices you have. If anything here is unclear, email david@allsynccrm.com and we will answer.
1. Who this policy covers
JagTrace has two distinct groups of people, and we treat their information differently.
Operators are employees of businesses that subscribe to JagTrace. They sign in to the JagTrace Operator iOS app and program NFC tags.
Mail recipients are people who receive an envelope or package carrying a JagTrace tag and tap it with their phone. Recipients install nothing and create no account.
2. Information we collect from operators
When an operator uses the JagTrace Operator iOS app, we collect:
- Account information — email address, display name, and a user ID, handled through Firebase Authentication.
- Operator profile — a record linking the operator to the business they work for.
- Tag records — the tag code programmed and the timestamp it was programmed.
The app uses NFC only to read and write the tag itself. NFC is not used to identify the operator or the phone.
3. What the iOS app does not collect
The JagTrace Operator app does not collect device location, contacts, photos, or advertising identifiers. It does not use tracking, and it does not include third-party analytics or advertising software. We do not build advertising profiles and we do not track operators across other apps or websites.
4. Information we collect from mail recipients
Tapping a JagTrace tag opens a web page in the phone's browser. That page asks for browser location permission. If the recipient grants it, we record:
- an approximate GPS location,
- the accuracy of that location, and
- the date and time,
tied to the tag code as a delivery confirmation. Location is requested only at that moment, only with the recipient's consent, and is never collected continuously or in the background. Declining the permission request is fine — the page simply records no location.
We do not collect a recipient's name or email address. Recipients do not create accounts and nothing is installed on their device.
5. How we use this information
We use the information above to sign operators in, to link them to the correct business, to record which tags were programmed and when, and to record delivery confirmations so the subscribing business can see that a piece of mail arrived. We also use it to operate, secure, and support the service. We do not use it for advertising.
6. Service providers
We use a small number of providers to run JagTrace:
- Google Firebase — authentication, the Firestore database, and Remote Config. Data is stored in the United States.
- Vercel — hosting for our web pages.
- AllSync CRM — our own CRM platform, hosted on Supabase, which mirrors tag and confirmation records so the subscribing business can view them.
These providers process data on our behalf and are not permitted to use it for their own purposes.
7. Who we share data with
Tag records and delivery confirmations are shared with the subscribing business that owns the tags. Apart from the service providers listed above, we share personal data with no one else, except where we are required to by law or valid legal process.
We do not sell personal data, and we do not share it for cross-context behavioral advertising.
8. Data retention
We keep data for as long as the subscribing business's subscription is active, or until deletion is requested. After that, records are deleted or anonymized within a reasonable period, unless we are required to keep them by law.
9. Deleting an operator account
Operators can delete their account from inside the app at Account → Delete account. This permanently removes the login and the operator profile.
Tag and delivery records are retained by the subscribing business, because they are that business's records of its own mail. If you want those records removed as well, contact the business you work for, or email us at david@allsynccrm.com and we will help coordinate the request.
10. Security
Data is transmitted over encrypted connections and stored with our providers using their encryption and access controls. Access to production data is limited to the people who need it to run the service, and accounts are protected by authentication. No system is perfectly secure, but we take reasonable steps to protect information against loss, misuse, and unauthorized access.
11. Children
JagTrace is a business tool and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, email us and we will delete it.
12. Your rights
You may ask us to access, correct, or delete the personal information we hold about you. Email david@allsynccrm.com and we will respond. We may need to verify your identity before acting on a request, and we will not treat you differently for making one.
California residents. Under the CCPA/CPRA you have the right to know what personal information we collect and how we use it, to request its deletion or correction, and to opt out of sale or sharing. As stated above, we do not sell or share personal information.
EU/UK residents. Under the GDPR you have the right to access, correct, delete, restrict, or object to the processing of your data, and to data portability. For operator accounts we rely on the contract with the subscribing business and our legitimate interest in operating the service; for recipient location we rely on your consent, which you may withdraw at any time by declining the permission. You also have the right to complain to your local data protection authority.
13. International data transfers
Our providers store data in the United States. If you use JagTrace from outside the United States, your information will be transferred to and processed there.
14. Changes to this policy
If we change this policy, we will update the effective date at the top of this page and post the revised version here. For significant changes we will also notify subscribing businesses by email so they can inform their operators. Continued use of JagTrace after a change means you accept the updated policy.
15. Contact us
AllSync Solutions
JagTrace
david@allsynccrm.com