Privacy Policy

SatGuard Security is operated by Sport Star Management LLC (OOO «Sport Star Management», OGRN 1097746525898), a company registered in the Russian Federation, with its registered office at 34 Verkhnyaya Krasnoselskaya Street, Moscow, 107140, Russia (“we”, “us”). We are the operator of personal data within the meaning of Federal Law No. 152-FZ “On Personal Data”; where the UK or EU General Data Protection Regulation applies to you, we are the data controller.

The company that invited you to the platform (your employer or the security company you contract with) is the operator of the data it collects about its staff. We process that data on its behalf and under its instructions, and we are the operator only of the data needed to run the platform itself: your account, device and crash data.

Questions, requests and complaints: privacy@highglossy.com.

• Your company is in charge of your data. The security company that invited you decides what to collect from its staff and for how long; we run the platform on its behalf and under its instructions.
• We collect what a shift needs. Your name, phone and email, the documents your company requires, your schedule, tasks and, during a shift, your location.
• Location is collected only while you are on shift and only if you grant the permission; it is used for routes, task check-ins and telemetry that your company sees.
• No ads, no selling of personal data, no tracking across other apps.
• The job market is opt-in. Your profile is visible to companies only after you publish it, and you can unpublish it at any time.

Every category we hold, why we hold it, the lawful basis and how long we keep it:

• Profile: name, phone number, email, photo where you add one, position — To register you with your company and let its managers reach you. Basis: Performance of the agreement with you (Art. 6 of Federal Law No. 152-FZ). Kept: while your company keeps you on the platform, then 1 year.
• Documents: identity and qualification documents your company requires, with their expiry dates — To confirm you are allowed to take a shift and to warn before a document expires. Basis: Legal obligation. Kept: while your company keeps you on the platform, then as labour law requires.
• Schedule, shifts and tasks: assignments, check-ins, task status, your feedback — To run the work your company assigns. Basis: Performance of the agreement with you (Art. 6 of Federal Law No. 152-FZ). Kept: while your company keeps you on the platform, then 3 years.
• Location during a shift: GPS coordinates and route telemetry, only while a shift is active and the permission is granted — To show routes, confirm task check-ins and give your company telemetry on the shift. Basis: Your consent (Art. 6 and 9 of Federal Law No. 152-FZ). Kept: 12 months.
• Messages: chats with your company and colleagues inside the app — To deliver them. Basis: Performance of the agreement with you (Art. 6 of Federal Law No. 152-FZ). Kept: while your company keeps you on the platform, then 1 year.
• Training: materials opened and tests completed — To record the training your company requires. Basis: Performance of the agreement with you (Art. 6 of Federal Law No. 152-FZ). Kept: while your company keeps you on the platform, then 3 years.
• Push tokens (only if you allow notifications) — To tell you about schedule changes, new tasks and emergency requests. Basis: Your consent (Art. 6 and 9 of Federal Law No. 152-FZ). Kept: until the token is revoked or goes stale.
• Crash and error reports: stack traces, device model, OS version, app version — To find and fix defects. Basis: Our legitimate interests in security and reliability (Art. 6 of Federal Law No. 152-FZ). Kept: 90 days.
• Job market profile (only if you publish one): qualification grade, employment preferences, transport, distance filter, applications and reviews you leave — To show you vacancies and show your profile to companies you apply to. Basis: Your consent (Art. 6 and 9 of Federal Law No. 152-FZ). Kept: until you unpublish the profile or delete the account.

We do not collect an advertising identifier, we do not track you across other apps or websites, and we run no advertising SDK. Your company sees the data above in its web cabinet; what it does with it is governed by its own policies and by labour law.

We use a small number of processors. Each is bound by a data processing agreement and may use the data only to provide the service to us.

• Our hosting provider in the Russian Federation — runs the servers holding accounts and records.
• Google Firebase Cloud Messaging / Apple Push Notification service — delivery of push notifications. Receive the notification token and the notification text.
• Crash reporting (Sentry, hosted in the European Union) — receives stack traces, device model, OS and app version. Crash reports carry no IP address and no user identifier.

We also disclose data where we are legally compelled to: to comply with a legal obligation, to protect our rights or property, to investigate possible wrongdoing in connection with the app, or to protect the safety of users or the public.

The security company that invited you is not a processor but the operator of your data: it sees your profile, documents, schedule, shift telemetry and messages, and it may share them with its own clients where a site contract requires it. On the job market, a company you apply to sees your published profile and application.

We do not sell personal data, and we do not share it for cross-context behavioural advertising.

The section above gives the retention period for each category. Your company decides when to remove you from the platform; the periods above run from that moment. When you delete your account yourself, we remove what identifies you and keep only what labour or tax law obliges your company to retain, on its behalf.

Personal data of citizens of the Russian Federation is recorded, stored and processed on servers located in the Russian Federation, as Federal Law No. 152-FZ requires. Some processors listed above operate outside Russia; they receive only the data named there. If you are located outside the Russian Federation and use the app, you consent to your data being transferred to and processed in the Russian Federation. Where the UK or EU GDPR applies, cross-border transfers rely on the Standard Contractual Clauses or an adequacy decision.

Wherever you live, you can ask us to:

• Give you a copy of the personal data we hold about you, in a portable format.
• Correct anything inaccurate.
• Delete your data. You can do this yourself in the app; we will also do it on request.
• Restrict or object to processing we carry out on the basis of legitimate interests.
• Withdraw consent, for example for notifications by turning them off in your device settings, without affecting what we did before you withdrew it.

Write to privacy@highglossy.com. We respond within 30 days (within 10 business days where Federal Law No. 152-FZ requires it).

Because your company is the operator of most of this data, we will forward a request that concerns its instructions to it and help it respond. Requests about the platform itself we answer directly.

In the Russian Federation you may also complain to Roskomnadzor, the authority for the protection of the rights of personal data subjects. If you are in the UK or the EEA, you may complain to your data protection authority.

SatGuard Security is not directed to children and is not intended for anyone under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with data, write to privacy@highglossy.com and we will delete it.

Data in transit is protected with TLS. Access to our systems is limited to the people who need it to run the service and is logged. No system is perfectly secure, and we will not claim otherwise; if a breach affects your personal data, we will notify you and the competent authority as the law requires.

We will update this policy when what we do changes. The date at the top always reflects the current version. If a change materially reduces your rights or widens what we collect, we will tell you in the app before it takes effect.

Sport Star Management LLC, 34 Verkhnyaya Krasnoselskaya Street, Moscow, 107140, Russia

Support: support@highglossy.com · Privacy: privacy@highglossy.com