Privacy Policy

1. Introduction

AttendFlow ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our attendance management platform.

By using AttendFlow, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Company name, contact name, email address, and phone number when you sign up.
• Employee Data: Employee ID, name, role, department, email, phone, and attendance records.
• PINs: Employee PINs are hashed using SHA-256 with a salt and are never stored in plain text.

2.2 Information Collected Automatically

• Usage Data: How you interact with the portal and the Google Form.
• Device Information: Browser type, operating system, and IP address (for audit logging).

3. How We Use Your Information

• To provide and maintain the AttendFlow service.
• To process attendance, leave, overtime, and payroll records.
• To send you administrative emails (e.g., trial expiry, payment reminders).
• To improve our platform and user experience.
• To comply with legal obligations.

4. Data Storage and Security

Your data is stored in Google Sheets and Google Apps Script infrastructure, hosted on Google's secure servers. We implement the following security measures:

• PINs are hashed using SHA-256 with a per-client salt.
• Session tokens are stored in your browser's sessionStorage and expire after 15 minutes of inactivity.
• All communication between your browser and our servers is encrypted using HTTPS.
• Access to client spreadsheets is restricted to service accounts with minimal permissions.

5. Third-Party Services

AttendFlow integrates with the following third-party services:

• Google Workspace (Sheets, Apps Script, Drive): Your attendance data is stored and processed within Google's infrastructure.
• Stripe: Payment processing for subscriptions. We do not store full payment card details.
• Calendarific: If you choose to auto-populate holidays, your selected country and region are shared with Calendarific.

Each third-party service operates under its own privacy policy.

6. Cookies and Analytics

We use minimal cookies to maintain your session. We may use anonymous analytics to understand how our platform is used, but we do not use cookies for advertising or tracking purposes.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your data (subject to legal obligations).
• Export: Request a machine-readable copy of your data.

To exercise these rights, contact us at info@netechintegrated.com. We will respond within a reasonable timeframe.

8. Data Retention

Your data remains stored as long as your account is active. Upon account closure, data may be retained for a period to comply with legal obligations or for audit purposes.

9. Children's Privacy

AttendFlow is not directed at children under 13 (or 16, depending on your jurisdiction). We do not knowingly collect personal information from children.

10. International Data Transfers

Your data may be stored on servers located outside your home country (e.g., Google's servers in the US). We rely on standard contractual clauses and Google's compliance frameworks to ensure adequate protection.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

NeTech Integrated Services
Email: info@netechintegrated.com
Website: netechintegrated.com