ASL Municipal Privacy Notice
This notice covers ASL Municipal, the native Android companion from AutoSecureLogin.com, and the Auto Secure Login municipal demonstration and Sugar City evaluation. Sugar City is evaluating the software and is not yet an Auto Secure Login client. Neither site is an official municipal service.
Your selected organization
The Android app connects directly to the compatible HTTPS portal you select. Your organization is responsible for its account, employment, billing, retention, and access policies. Consult the privacy and support links for that portal. This notice describes AutoSecureLogin-operated evaluation services; it does not grant any organization government status or permission to bill real residents.
Information used
- Sign-in identity, email address, display name, assigned organization, and staff role.
- Test utility records entered by evaluators, such as customer, meter, route, work-order, billing, and time-clock data.
- Device location and accuracy while an authorized field employee is clocked in and location permission is granted.
- Security and diagnostic records such as access time, network address, request identifier, and audit events.
How location is used
Location supports on-duty clock-in verification, field routes, and the dispatcher’s live crew map. The server rejects field-location updates when the employee is clocked out. In the Android app, starting or resuming reporting requires an in-app disclosure and precise-location permission. A foreground location service may continue while the app is minimized. Android displays its service indicator; notification permission enables the notification drawer controls. Stop GPS only stops device reporting without ending the server-side shift. Clock out while connected to confirm the end of the shift. Signing out stops GPS, and relaunch never silently resumes it. Location is not used for advertising or sold.
On your Android device
Passwords are sent over HTTPS for sign-in or password change and are not saved by the app. Session credentials are encrypted using Android Keystore and excluded from Android backup. Account records are displayed in memory, not kept as an offline cache. A failed GPS upload retains only the newest unsent coordinate in memory for retry. Sign-out removes the local session even when the server cannot be reached; server logout or clock-out cannot be confirmed offline. No advertising or analytics SDK is included.
Retention and access
Live location history is automatically limited to 30 days. Other records remain while the system is in use or until the account owner requests removal. Access is role-based and restricted to approved accounts. Testers must use test data only and must not enter real customer billing or payment information.
Service providers and security
The system uses controlled hosting, Auto Secure Login identity services, and map tiles needed to display the dispatcher map. Reasonable technical safeguards are used, but no system can be guaranteed risk-free.
Your choices
Location permission can be denied or removed in device settings, but field clock-in and live dispatch features will not work. The app does not create accounts. Your organization creates and manages your access. To request access, correction, deletion of an account, or deletion of particular data, contact the support team with your portal address and account email. Do not send your password. We verify ownership and explain any records that must be retained for security, audit, or applicable legal requirements. For another organization's portal, contact that organization directly.
Contact
Email contact@autosecurelogin.com. This address is for software privacy and support; it is not an official Sugar City government contact.