Privacy Policy

• Profile: name, employee code, contact details, date of birth, gender, blood group, address, photo and emergency contact.
• Employment: designation, department, branch, manager, joining date and role.
• Statutory and bank details: PAN, Aadhaar, PF, ESI, UAN, bank account and IFSC -- used only for payroll and compliance.
• Payroll, leave, expenses with their bills, and documents you or your employer upload.
• Attendance: punch time, location and a punch photo.
• Feed posts, helpdesk tickets, and performance and exit records your employer keeps.
• The IP address and time of each sign-in.

• Location is read only when you punch in or out with the app open. There is no background tracking.
• The punch photo uses on-device face detection only to check that a face is in frame. There is no face recognition, and no biometric data is created or stored.
• The camera is also used when you choose to photograph a bill or a picture for a post.
• The app has no microphone, contacts, SMS or photo-library access. It only receives files you pick yourself.

Only to run HR for your employer: attendance, leave, payroll, expenses, records, notifications and security. No ads, no analytics trackers, and we never sell your data.

• You see your own data. Managers see their team's leave and attendance. Your company's Admin sees all of your company's records and can give specific people specific access (for example payroll).
• Colleagues see only your directory card: name, work email, designation, department, photo and birthday (day and month).
• If an older ID card printed with a QR code is scanned, it shows only your name, photo, designation, company and whether you are an active employee.
• No other company can see your data.

Amazon Web Services, Mumbai (servers and file storage -- your data is stored in India); Google (sending emails, and address lookup and fonts on your phone); OpenStreetMap (map images); Grafana Labs (technical metrics with no personal data). We share data with no one else unless the law requires it.

HTTPS connections, hashed passwords, sessions that expire after 24 hours, private encrypted file storage and rate-limited sign-in. "Remember me" keeps your session in the browser or your phone's encrypted storage until you sign out.

As long as your employer needs it. Payroll, attendance and statutory records may have to be kept for some years after you leave, under Indian law.

• You can ask to see, correct or delete your data, nominate someone to act for you, or raise a grievance. Ask your HR or Admin first, or email us.
• Your account is created by your employer, so ask your Admin to close it. If you cannot, email us from your work email with your company code and employee code. We delete everything the law does not require us to keep.

The app is for employees and is not meant for anyone under 18.

If this policy changes, we update it here and change the date above.

Email info@a3mcontracts.com. We reply within 30 days. If you are not satisfied, you can complain to the Data Protection Board of India.