Data & Security

Last updated: September 21, 2026

This page gives a plain-language overview of security controls used around Easy E-Detailing. We intentionally do not publish secret keys, internal infrastructure details or information that would make the service easier to attack.

Account authentication

Account access requires supported authentication. Authentication/session information is used to determine who is signed in and which role, team and entitlements apply.

Role-based Manager/MR access

Manager and MR functions are separated by role. Team-level information is shown only through supported role/account relationships. Managers may see supported MR business activity, while MR accounts are restricted from Manager-only controls.

Device and session controls

Device or installation identifiers and device-access state may be used to enforce permitted access, revoke/reactivate devices, sign out sessions and reduce unauthorized account sharing.

Payment and entitlement verification

Supported purchases are verified by the backend/payment channel before a paid entitlement, validity period or MR capacity is treated as active. Browser-calculated prices are not intended to be the source of truth for a payment order.

Network protection

Supported website/API traffic is sent over encrypted HTTPS/TLS connections. Third-party services use their own security controls for data handled on their systems.

Local and offline project data

Some detailing files and app data may be stored locally so presentations can work in low-connectivity conditions. Users should secure the device with appropriate screen lock and operating-system updates because local data is also protected by the security of that device.

Backup, restore and transfer

Backup/restore and transfer features may create copies of project/content data. Users should confirm that a backup/restore operation completed successfully and should remove obsolete copies from storage providers they control.

Attendance photos and location

Attendance/location data is treated as account-linked business activity. Where enabled, access to camera and location is permission-controlled by Android. Managers should use attendance/photo/location information only for legitimate business purposes and in accordance with applicable law.

Doctor and follow-up records

Doctor/HCP work records, visit outcomes, follow-ups, pending actions and related business data are protected through authenticated, role-aware access where stored online. Users remain responsible for not entering unauthorized or unnecessary sensitive information.

AI, voice and transcription

AI/voice features may process typed prompts, transcribed speech or audio required for the selected feature. Users should review generated/transcribed content before saving it as a business record and should not submit credentials, payment PINs or unnecessary patient data.

Security logs and abuse prevention

We may retain limited login, device, payment-verification, administrative and audit information to investigate misuse, enforce access controls and maintain service security.

Data deletion and retention

Deletion requests and retention rules are described in the Privacy Policy and Account & Data Deletion page. Local files and user-exported backups may require separate deletion by the user.

Responsible disclosure

If you believe you found a security issue, email webry2026@gmail.com with enough information to reproduce it safely. Please do not publicly disclose a vulnerability before we have had a reasonable opportunity to investigate.

No security system can guarantee absolute protection. We continuously aim to reduce risk using appropriate access, verification and operational controls.