MerchTrack

Privacy Policy & Terms of Use

Last updated: 04 October 2026 · MerchTrack is an internal work system operated by CPM IT for the company's field merchandising teams.

1. What this system is

MerchTrack is a company tool used by merchandisers (MRs) and their managers (AM, ASM, RSM, DTM and Admin) to record daily field work: attendance, outlet visits, display photos and drive campaigns. Using MerchTrack is part of your work duties. It is not a public or social app.

2. Information we collect

Account details — your name, login username/email, phone number, role and Business Partner (BP) location, created by your admin.
Attendance selfies — a photo at check-in and check-out, with the server date & time stamped on the image.
Work photos — before/after display photos and drive-campaign photos you take at outlets, watermarked with outlet, date, time and your name.
Location (GPS) — captured only at the moment of check-in/check-out and outlet visits, to confirm the visit location. MerchTrack does not track your location in the background or outside working actions.
Usage records — login times, visit counts, task completion and submitted reports.

2a. Face verification (profile picture & face template)

Your first-login profile selfie is kept as your profile picture, and a face template (a list of 128 numbers describing the face — not a photo) is stored with your account. At each check-in, check-out and selected outlet selfies, your phone compares the new selfie with this template and sends the match result (pass / fail and a similarity score) to the server. The comparison runs on your phone; the template is used only to confirm that attendance is marked by the account holder, is never shared outside the company, and is deleted when the admin resets your photo or your account is removed. For Delink accounts, a template is stored for each of the two members.

3. How the information is used

To verify attendance, working hours and outlet coverage.
To let your managers (AM / ASM / RSM / DTM / Admin) review field work, photos and daily reports for your BP, area or region only.
To send automatic daily summary emails to management.
To improve merchandising quality (e.g. before/after display reviews and drive campaigns).

4. Who can see your data

Access is role-fenced: an AM sees only their BP, an ASM their area, an RSM/DTM their region, and Admin the full system. Other MRs cannot see your records. Data is never sold or shared with outside companies. Photo links shared by you (e.g. to WhatsApp) use signed links that cannot be guessed or enumerated.

5. Where data is stored & how it is protected

Data is stored on the company's server (Hostinger, under cpmohamed.com) over HTTPS.
Photos are re-encoded on upload (hidden file data, including phone GPS metadata inside the photo file, is stripped — only the visible watermark remains).
Passwords are stored as one-way encrypted hashes. Logins are rate-limited against guessing.
Uploads cannot be opened directly from the web — they stream only through protected, signed links.

6. How long we keep it

Work records and photos are kept for as long as the company needs them for operations, performance review and audit, and are removed when no longer required or when an account is deactivated and purged by the admin.

7. Your responsibilities (Terms of Use)

Keep your username and password private. You are responsible for activity on your login.
Take photos only of outlet displays and your own attendance selfie — never of unrelated people or private places.
Enter true information. Do not attempt to falsify attendance, GPS or photos.
Do not attempt to access other users' data or to interfere with the system.
Use the system only for company work.

8. Your choices

Camera and location permissions are requested by your browser only when you use those features. If you believe a record about you is wrong, or you have any question about your data, contact your manager or the admin (CPM IT).

9. Changes

If this policy changes in a meaningful way, the updated version will be shown here and you may be asked to accept it again.

‹ Back