This Privacy Policy describes how the Project Monitoring & Tracking System (PMTS), operated by the Balochistan Special Development Initiative (BSDI), collects, uses, stores, and protects information when you access the platform at pmts.bsdi.cloud or related official endpoints.
PMTS is a government information system for monitoring development schemes, bills, financial sanctions, budget ledgers, proposals, contingency claims, budget surrender, analytics, and GIS data across districts of Balochistan. Use of the system is restricted to authorized officials and partners.
1. Who this policy applies to
This policy applies to:
- Registered users with assigned roles (e.g. Engineer, Deputy Commissioner, FME, Program Coordinator, Finance, Admin, and other designated roles)
- System administrators who manage accounts, permissions, and configuration
- Anyone who accesses public pages of the platform (such as the sign-in page and this policy)
2. Information we collect
2.1 Account and profile information
When your account is created or updated, we may store:
- Username, full name, email address, and contact phone number
- Official designation, role, district or regional assignments
- Profile photograph and digital stamp (where uploaded for official workflows)
- Password credentials (stored in hashed form; plain-text passwords are not retained)
- Two-factor authentication settings and TOTP secrets (if you enable 2FA)
- Account status, password-change requirements, and permission overrides
2.2 Operational and project data
Through your use of PMTS, the system processes data you enter or upload, including:
- Project and scheme details (descriptions, costs, phases, progress, locations, WBS codes)
- Bills, supporting documents, review comments, approval history, and vendor payment records
- Financial sanctions, budget ledger entries, contingency claims, and budget surrender statements
- Project proposals, meeting minutes, forwarding letters, and related attachments
- GIS coordinates and map-related project metadata
- In-system notifications and announcements addressed to your role or account
2.3 Technical and security logs
To maintain security and accountability, we automatically record:
- Sign-in sessions and authentication events (including two-factor verification)
- Activity logs describing significant actions (e.g. bill submission, approvals, project updates) linked to your user account
- IP addresses associated with logged actions, where available from the network layer
- Session cookies required for secure login and CSRF protection
- Server and application error logs needed for troubleshooting
2.4 Communications
Where email notifications or OTP delivery is configured, we use the email address on your profile to send system messages. Email content is limited to operational notices relevant to PMTS workflows.
3. How we use your information
We use collected information solely to:
- Authenticate users and enforce role-based access controls
- Operate project monitoring, bill processing, financial tracking, and reporting features
- Maintain audit trails for government accountability and internal review
- Send in-app and email notifications related to approvals, deadlines, and system updates
- Protect the platform against unauthorized access, fraud, and misuse
- Improve reliability, performance, and security of the service
We do not use PMTS data for commercial marketing or unrelated third-party profiling.
4. Legal basis and official purpose
Processing is conducted for official government purposes connected to BSDI program delivery, financial oversight, and public development project monitoring in Balochistan. Access is granted on a need-to-know basis according to your assigned role and district scope.
5. Data sharing and disclosure
We do not sell personal data. Information may be shared only:
- With other authorized PMTS users within your approval chain or oversight role, as permitted by the system
- With hosting or infrastructure providers that operate servers under contract and confidentiality obligations
- When required by applicable law, court order, or lawful government directive
- To investigate suspected violations of these terms or security incidents
6. Data retention
Account, project, financial, and audit records are retained for as long as needed to fulfil program monitoring, financial accountability, and legal record-keeping requirements. Retention periods may vary by record type and applicable government policy. Backups may retain data for a limited period for disaster recovery.
7. Security measures
We implement administrative and technical safeguards appropriate to a government system, including:
- Encrypted connections (HTTPS/TLS) for data in transit
- Hashed password storage and optional two-factor authentication
- Role-based permissions and district-scoped data access
- Activity logging and audit trails for sensitive actions
- Controlled server access and routine security maintenance
No system is completely risk-free; you must also protect your credentials and devices.
8. Your responsibilities
- Keep your username, password, and 2FA device confidential
- Use only your own account; do not share login credentials
- Report suspected unauthorized access or data breaches to your administrator immediately
- Upload only accurate official information you are authorized to submit
9. Your rights
Depending on applicable law and internal policy, you may request correction of inaccurate profile information, clarification about how your data is used, or deactivation of your account through your designated PMTS administrator. Requests are handled in line with government record-keeping rules; some operational logs may need to be retained even after account closure.
10. Cookies and similar technologies
PMTS uses essential session cookies to keep you signed in securely and to prevent cross-site request forgery. We do not use advertising or cross-site tracking cookies on the authenticated application.
11. Children and public access
PMTS is not intended for the general public or minors. Access is limited to authorized personnel involved in BSDI program administration and monitoring.
12. Changes to this policy
We may update this Privacy Policy from time to time. The effective date at the top of this page will reflect the latest version. Continued use of PMTS after updates constitutes acknowledgment of the revised policy where permitted by law.
13. Contact
For privacy-related questions or to report a security concern, contact your PMTS system administrator or BSDI program office through your official departmental channel.
See also our Terms and Conditions and Support.