Privacy policy
Updated 1 October 2026 · Version 2.0
IB Advisory operates SalesTOS. This policy covers salestos.com, SalesTOS apps and tenant workspaces, including Turbolux and Turbolux Sales. Tenants decide how their employee and customer records are used; IB Advisory processes those records to provide, support and secure the platform. Processing varies by enabled features, permissions and integrations.
1. Information and purposes
We process account/contact details, employee identifiers, date of birth where supplied, roles and reporting relationships; attendance, leave, visits, location and photos; customer/dealer contacts and addresses; products, pricing, orders, invoices, tax details, payments, bank/UPI/cheque references and evidence; expenses, targets, incentives and performance; messages, support requests and enabled AI inputs/outputs. Website enquiries, subscriptions and billing also use the details you submit. Device/app information, IP addresses where logged, authentication, audit and sync records support access, security and troubleshooting.
Information comes from users, tenant administrators, business interactions, permitted device access and connected systems. It supports workforce management, sales, collections, reporting, communications and service delivery. Tenants must provide applicable workplace notices and establish the required consent or other lawful basis.
2. Location, camera and permissions
Enabled field apps collect precise/background location for attendance, visits, routes and distance reporting, even when closed or not in use while a work-tracking session remains active. Closing the screen may not end tracking; use End Day and confirm completion. Offline points can upload later; route gaps may produce estimates. Authorised managers can view permitted work records.
Attendance selfies may undergo on-device face detection; photos and validation results can still be uploaded for review. This detection checks for a face, rather than matching an identity database. Camera, location, selected files/photos and notification permissions support enabled workflows. Revoke permissions in device settings; related features may stop working. Location and attendance photos are used for work operations, not advertising.
3. SAP, ERP and other synchronisation
Authorised SAP connections can import customers, contacts, products, prices, credit terms, sales, invoices, credit notes and outstanding balances. ERPNext can import employee profiles and, when enabled, receive attendance check-ins and process leave applications/status. Other ERP, HR, accounting, API, webhook and Excel/CSV workflows exchange configured records. Outbound posting occurs only through an enabled workflow; a local save does not guarantee ERP receipt.
Manual/scheduled sync retains source references, mappings, job status and relevant payloads/errors for reconciliation and retries. Corrections or deletion may need action in both systems: an unchanged source can repopulate local data. Disconnection does not erase earlier transfers.
4. Sharing, communications and AI
Access is provided to authorised tenant personnel, IB Advisory support/operations and providers needed for the service: hosting/storage (including Cloudflare R2), maps/routing, payment, messaging, telephony, speech and AI. Depending on configuration, Exotel/Sarvam process calls or speech and OpenAI or another configured provider processes prompts and relevant business context. Enabled calls may retain recordings, transcripts, summaries and outcomes; applicable recording/automated-call notices and consent are required. AI outputs can be inaccurate; request human review of disputed results.
Authorised exports, business recipients and lawful disclosures may also receive records. Providers have their own processing terms and may operate internationally; India-only storage or identical provider retention is not promised. Ask your administrator about the services enabled for your tenant.
5. Storage, security and retention
Authentication, role/tenant access controls, HTTPS and audit records help protect information; no system is completely secure. Browser/app storage may keep sessions, preferences, cached records and offline queues. Sign out on shared devices and confirm sync before clearing storage.
Retention depends on operational, employment, accounting/tax, contractual, security and dispute requirements. Photos, GPS, recordings and logs may have different retention needs. Ask for the period applicable to your records. Logout, uninstalling, account deactivation or integration disconnection does not erase uploaded data. Deletion requests are reviewed against lawful retention needs; backups, ERP copies, exports and provider records may require separate handling.
6. Choices and requests
Contact us or your tenant administrator for access, correction, deletion, account closure, consent withdrawal where applicable, or a grievance. Include your tenant, employee/customer reference and requested action; never send passwords or OTPs. Identity verification may be necessary. Rights, response periods and exceptions depend on applicable law; retained records may not be immediately erasable. Withdrawing permission or consent may affect the related service.
SalesTOS business workspaces are intended for authorised adults. Report mistakenly submitted children's data or suspected security incidents. Policy changes will appear here; new purposes may require additional notice or consent. This policy does not replace required in-app disclosures.
Privacy and grievance contact
IB Advisory · reach@ibadvisory.com1st Floor, Innerspace, Residents Lane, Changampuzha Park,
Edappally, Kochi - 682025