Privacy Policy

GATE Pass — Residential Gate Access Control
Effective date: June 22, 2026
Global Systems ("we", "our", "us") operates the GATE Pass mobile application (the "Service"). This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our Service. By using GATE Pass, you acknowledge that you have read and understood this policy.

1. Information We Collect

Account Information
When you register, we collect your full name, email address, and phone number. Your password is stored exclusively as a one-way cryptographic hash (bcrypt) and is never accessible in plain text.
Authentication Tokens
We issue short-lived JSON Web Tokens (JWT) to maintain your session securely. Tokens are stored on your device using hardware-backed secure storage.
Push Notification Tokens
With your explicit permission, we collect a Firebase Cloud Messaging (FCM) token to deliver security and operational notifications to your device. You may revoke this permission at any time through your device settings.
Access Logs
We record each gate operation: timestamp, gate identifier, action type, and the user account that initiated the action. These logs are used for security auditing and dispute resolution.
Vehicle Data (ANPR)
Our automated number plate recognition cameras capture still images and extract licence plate numbers at the moment of gate operation. This data is linked to the relevant access log entry.

2. How We Use Your Information

Service Delivery
To authenticate you, grant access to gates assigned to your account, and display your access history within the application.
Security & Fraud Prevention
To detect unauthorised access attempts and deliver real-time security alerts to your device via push notification.
Operational Notifications
To notify you of events directly relevant to your gate, such as camera connectivity issues.
Audit & Compliance
To maintain access records that allow residential administrators to investigate security incidents.

3. Legal Basis for Processing

We process your personal data on the following legal grounds: • Contractual necessity — processing required to deliver the gate access service. • Legitimate interests — maintaining security logs and detecting unauthorised access. • Consent — processing push notification tokens, which requires your explicit opt-in permission.

4. Data Retention

Account Data
Retained for the duration your account remains active. Upon account deletion, your personal data is permanently erased within 30 days.
Access Logs & Vehicle Images
Retained for 12 months from the date of capture, then permanently and irreversibly deleted.
One-Time Verification Codes
Expire automatically after 10 minutes and are deleted immediately upon use or expiry.
Push Notification Tokens
Retained while your account is active. Tokens associated with inactive sessions are purged automatically.

5. Data Security

We implement industry-standard safeguards: • All data in transit is encrypted using TLS 1.2 or higher. • Camera credentials are encrypted at rest using AES-256 symmetric encryption. • Passwords are hashed using bcrypt with an adaptive cost factor. • Access to production systems is restricted to authorised personnel only. • Authentication uses time-limited tokens with automatic expiry.

6. Third-Party Service Providers

Firebase Cloud Messaging (Google LLC)
Used to deliver push notifications. FCM tokens are transmitted to Google's servers solely for notification delivery. Governed by the Google Privacy Policy.
Email Delivery Service
Used exclusively to send one-time verification codes and password recovery messages. Only your email address is transmitted for this purpose.
We do not sell, rent, or trade your personal data to any third party under any circumstances.

7. Your Rights

Depending on your jurisdiction, you may have the following rights: • Right of Access — obtain a copy of the personal data we hold about you. • Right to Rectification — request correction of inaccurate or incomplete data. • Right to Erasure — request deletion of your personal data. • Right to Restriction — request that we limit the processing of your data. • Right to Data Portability — receive your data in a structured, machine-readable format. • Right to Object — object to processing based on legitimate interests. • Right to Withdraw Consent — withdraw consent at any time without affecting prior processing. To exercise any of these rights, contact us at: globalsystemssupport@gmail.com

8. Account Deletion

You may permanently delete your GATE Pass account at any time within the application: 1. Open the app and navigate to Settings. 2. Scroll to the bottom and tap "Delete Account". 3. Confirm your decision in the confirmation dialog. Upon confirmation, we immediately and permanently remove your account from all gates, invalidate all active sessions, and delete your personal data (name, email, phone number). Access logs are retained for 12 months for security and audit purposes, then permanently deleted. Account deletion is irreversible.

9. Children's Privacy

GATE Pass is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete such information.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. When we make material changes, we will notify you through the application and update the effective date above.

11. Contact Us

Global Systems Email: globalsystemssupport@gmail.com
Global Systems © 2026