How this business management, logistics, and financial tracking system processes system information, user access, and operational records

1. Scope

This Privacy Policy applies to all data handled within the Talyougo application ecosystem. This includes how the system processes and protects daily operational records, customer sales data, transport logs, vehicle expenses, regional debt tracking registers, and internal employee profile records. This document describes how the software operates, including its login security, user access restrictions, and data protection rules.

2. Information Handled at the Login Gate

To use the application, staff members must enter their credentials on a secure login screen.

Account Credentials The system processes account credentials, which consist of registered business email addresses or usernames along with securely encrypted passwords.

Login Security Monitoring To safeguard accounts against unauthorized access, the system actively monitors login security and tracks login frequency.

Security Guard The login feature enforces a strict security rule that restricts traffic to a maximum of 60 attempts per minute. Exceeding this limit triggers an automatic, temporary lock on that connection to protect system accounts from brute-force password guessing.

3. Limited External Features (QR Code and PDF Invoices)

The application permits specific, limited interactions without requiring a login to allow essential business verification. Scanning a system-generated QR code opens a secure web page showing verified receipt information, which confirms to the viewer that the transaction is real and recorded in the system. Additionally, specific secure links allow users to generate and download print-ready PDF invoices or receipts. The system also displays verified company identity and contact information on relevant customer documents during these interactions.

4. System Security and State Management

Talyougo uses modern, secure technology to manage user connections and safeguard data as it moves across the network. When an authorized user logs in, the system issues a temporary digital token to their device. This token acts as a secure passkey, validating the user's identity for every action they perform so they do not have to re-enter their password constantly during a shift. The application also uses strict connection boundaries to ensure that data can only be requested by approved business domains, preventing outside malicious websites from hijacking a live session.

5. Data Managed by Authorized Staff

Once logged in, authorized employees handle operational data within distinct system modules designed for day-to-day business tracking.

Point-of-Sale (POS) & Inventory Management Staff process records of customer purchases, sales vouchers, pricing details, fulfillment statuses, and goods receipts, which document incoming stock and reference originating supplier orders.

Logistics & Fleet Tracking The system processes delivery management data, including records of trip stocks, assigned drivers, delivery timelines, vehicle registration numbers, operational trip expenses, and automated fleet financial summaries.

Finance & Regional Debt Ledgers Employees manage dedicated registers for customer outstanding balances, featuring segmented regional lists like the Yangon Debt Ledger, alongside built-in reporting tools used to compile complex financial sheets and export them into static Excel files for company bookkeeping.

6. Access Hierarchy and Record Protection

The system organizes user capabilities using a clear permission matrix that protects the integrity of business data by separating daily work from high-risk database alterations. The platform enforces a strict three-tier hierarchy.

User (Basic Staff) is authorized for restricted, read-only or limited operations, such as viewing assigned logistics trips or checking personal profile data, but completely barred from modifying or creating core organizational metrics.

Admin (Standard Staff) is authorized for general operations, meaning they can add orders, track deliveries, update management rules, and log stock records, but they are strictly denied the ability to perform destructive actions.

Super admin (Management) holds elevated permissions to permanently delete or reverse core records, such as deleting vouchers, removing financial statements, or erasing user accounts.

7. Third-Party Connections

To fulfill core business workflows, the Talyougo system shares specific data packages with trusted external technical services. The system securely communicates transaction details with the Dinger payment gateway to verify that digital client payments have successfully cleared the banking network. Additionally, operational alert strings and messaging data are routed through a secure SMS gateway to dispatch text notifications directly to relevant business contacts and customers.

8. Data Retention and Automated Maintenance

The application divides data lifecycles into distinct retention pathways based on business continuity and system health. Because this platform acts as an official company ledger, core data such as financial history, debt tracking, and fleet records are kept indefinitely to maintain consistent long-term business reports. Records are only permanently removed if a verified Super admin manually selects an explicit delete command. On the other hand, technical maintenance records, including background system reports, application error diagnostic logs, and connection timestamps, are managed on an automated, rolling schedule that purges these old files every 30 to 90 days to keep system performance fast and efficient.

9. Changes to This Policy

As the software receives ongoing updates, system modules expand, or new security integrations are added, this Privacy Policy will be revised accordingly. Any structural modifications to user permissions, data handling, or integrated services will be reflected in the updated timestamp located at the top of this document. The Talyougo Administration and Technology Group maintains this policy to ensure secure business operations, access control integrity, and transparent data management.