Privacy Policy — Sales Companion

Sales Companion (the “App”) is an employer-issued field-sales workflow application published by E-Science Corporation (“E-Science”, “we”, “us” or “our”) and distributed to client organisations whose pharmaceutical or medical sales representatives use it to plan and record their work day.

E-Science Corporation is registered in the Republic of the Philippines and complies with the Data Privacy Act of 2012 (RA 10173) and its implementing rules. Where the App is used by personnel of clients based in other jurisdictions, additional local privacy laws may apply.

This Policy applies to the Sales Companion application available on iOS and Android (and the equivalent progressive web app) and to the backend services it talks to. It does not cover unrelated services or marketing websites operated by E-Science. For those, see the separate corporate website privacy policy.

Sales Companion is a workforce tool. It is not intended for use by the general public, by individuals under 18, or by anyone outside an authorised employer-issued account.

All data collected by the App is scoped to the signed-in representative's tenant (their employer organisation) and is used only to operate the App for that representative.

Account and identity data (required)

• Email address, name, employee role and tenant identifier — required to authenticate the representative and scope their access.
• A unique device identifier and session token — required to prevent fraudulent access and to keep the representative signed in across launches.

Work data (required for app functionality)

• Customer assignments, the call plan, visit history, planned visits and visit outcomes (notes, follow-ups, attached photos and structured tags) — these are the representative's work record and are required to operate the App.
• Detailing assets and AI-generated briefings the representative has reviewed — stored to personalise the workflow.

Location and device data (optional / contextual)

• Precise location — only when the representative records an on-site visit and only after they have granted the Android / iOS location permission. Used to verify the visit location and is never broadcast publicly.
• Approximate location — used only when precise location is unavailable and only for the same visit-verification purpose.
• Photos and files — only when the representative attaches them to a visit or note via the standard camera / file-picker permissions.

Diagnostics (required)

• Crash logs, performance traces and anonymised in-app interaction counts — used to keep the App stable and to fix bugs. We do not associate diagnostic events with individual customer records or visit outcomes.

The App does NOT collect:

• Audio recordings (the App does not record from the microphone).
• Calendar entries or address-book contacts on the device.
• Browsing history, advertising identifiers, or any data for advertising purposes.
• Health information about end-customers (the App is not a health app).
• Payment or financial information (the App contains no financial features).

• To operate the core features of the App for the signed-in representative.
• To synchronise the representative's offline-recorded work to their employer tenant's server when network connectivity returns.
• To prevent fraudulent sign-ins and protect the tenant's data.
• To diagnose crashes and performance issues so we can ship fixes.
• To generate AI-assisted briefings, agenda summaries and coaching prompts the representative can choose to use. These outputs are advisory only; the representative reviews and decides before any action is taken on a real customer.
• To comply with applicable law and respond to lawful requests.

We do not use the representative's App data for marketing, advertising, profiling or training of third-party machine-learning models.

We do not sell personal information. We do not share App data with third parties for their marketing or advertising. The limited sharing we do is:

• With the representative's employer tenant— the App is an employer-issued tool, and the data is the employer's record of the representative's work. Tenant administrators can view, export and delete data within their tenant.
• With cloud infrastructure providers (Amazon Web Services and similar hosting partners) acting strictly as our processors under written data-processing agreements.
• With identity providers (currently AWS Cognito) for sign-in. We do not share device data with these providers.
• With error and diagnostics services, in anonymised form, for the purpose of stabilising the App.
• With law enforcement or regulators, only when required by valid legal process or when necessary to protect users or our services.
• With an acquirer or successor entity in the event of a merger, acquisition or sale of E-Science Corporation, subject to continued compliance with this Policy.

All data transmitted between the App and our servers is encrypted in transit using HTTPS (TLS 1.2 or higher). Authentication tokens are short-lived and bound to the representative's tenant. On-device data is stored in the platform's sandboxed application storage and is scoped to the signed-in tenant. Signing out wipes the on-device data for the previous representative.

No system is perfectly secure. If we discover a personal-data breach that meets the threshold of the Data Privacy Act of 2012 or any other applicable law, we will notify the affected tenant administrators and regulators within the timeframe that law requires.

Subject to local law, the representative has the right to:

• Be informed about how their information is processed (this Policy).
• Access a copy of their information.
• Correct inaccurate information.
• Request deletion of their information when it is no longer required for the purposes set out in this Policy.
• Withdraw an optional permission (location, camera, files) at any time in their device settings without losing the rest of the App's functionality.
• Lodge a complaint with their national data-protection authority (in the Philippines, the National Privacy Commission).

To exercise these rights, contact the representative's tenant administrator (the employer issued the App) in the first instance. They can route the request to E-Science if action by us is required. Tenant administrators can also contact us directly at the address in Section 11.

We retain App data for as long as the tenant's contract with E-Science is active. On termination of the tenant's contract, or on a valid deletion request from a representative, we delete or anonymise the relevant data within 90 days unless a longer retention period is required by law (for example, audit-trail retention obligations).

On-device data is removed when the representative signs out of the App, uninstalls it, or taps “Clear App Data” on the sign-in screen.

Personal information processed by the App may be stored or processed in countries other than the country in which the representative is based, including the United States and other regions where our cloud infrastructure providers operate. When we transfer personal information internationally, we rely on appropriate safeguards (such as the cloud provider's standard contractual clauses) to protect that information.

Sales Companion is intended for users 18 years of age or older. It is not designed for, marketed to, or directed at children, and we do not knowingly collect information from children. If you believe we have inadvertently collected information from a child, please contact us so we can delete it.

Questions about this Policy, requests under Section 7, or notifications of a suspected incident can be sent to E-Science Corporation:

• Email: support@electronicscience.com
• Mail: E-Science Corporation, Metro Manila, Philippines

Tenant administrators wishing to invoke contractual privacy clauses should contact their E-Science account representative.

We may update this Policy from time to time. When we do, we will change the Effective date at the top and, for material changes, give tenant administrators reasonable advance notice. Continued use of the App after a change takes effect constitutes acceptance of the updated Policy.