Privacy Policy for FacilityFlow

Given the need to create a concise privacy policy for an FM solution that collects employee data, and referencing the provided examples, here is a structured and legally-informed draft. This draft incorporates key principles of India's Digital Personal Data Protection Act, 2023 (DPDP Act, 2023), and addresses the specific data types you collect.

FacilityFlow Privacy Policy

This Privacy Policy describes how Techseria ("we," "us," or "our") collects, uses, discloses, and protects your personal data when you use our FacilityFlow mobile application and platform (the "Service"). As an employee using our Service, you are a "Data Principal" under the DPDP Act, 2023.

1. Data We Collect

We collect the following categories of personal data, which we classify as either voluntarily provided by you or automatically collected through your use of the Service:

• Customer Information: This includes contact and billing details of your employer for invoicing and administrative purposes.
• Personal Employee Data: This includes your name, email address, username, securely stored one-way encrypted password, bank details for payroll, and skillset.
• Device and Identifier Data: We collect your Device ID, device information, and OS build to ensure the security and proper functioning of the Service.
• Location Data: We collect your precise location data solely for the purpose of managing shifts and verifying check-ins and check-outs at designated jobsites.
• Biometric Data (Photos): We collect your photo for face recognition to authenticate your identity and facilitate check-in and check-out processes. This is considered sensitive personal data under the DPDP Act, and we will obtain your explicit consent before its collection and use.

2. How We Use Your Data

We use your data for the following specific purposes:

• Service Delivery: To provide and maintain the core functions of our Service, including facilitating employee payroll and managing jobsites and shifts.
• Authentication and Security: To authenticate your identity and ensure the security of your account using your password and biometric data.
• Service Improvement: To analyse usage patterns and improve the functionality and user experience of our application.
• Communication: To send you important notices, updates, or other information related to your use of the Service.

We only process your data for the purposes for which it was collected. We do not use your personal data for any other purpose without your explicit consent.

3. Data Sharing and Disclosure

We will not disclose your personal data to any third party except in the following limited circumstances:

• With Your Employer: We share your relevant personal data, such as attendance, location, and job completion status, with your employer as necessary for the administration of employment-related activities.
• With Service Providers: We may share data with third-party service providers who assist us in providing the Service (e.g., cloud hosting, payment processors). These providers are contractually obligated to protect your data and are prohibited from using it for any other purpose.
• Legal Compliance: We may disclose your data if required by law or to comply with a court order or other legal process.

4. Your Rights as a Data Principal

Under the DPDP Act, 2023, you have the following rights regarding your personal data:

• Right to Access: You have the right to request a summary of your personal data we hold and the processing activities related to it.
• Right to Correction: You have the right to request the correction or update of any inaccurate or incomplete personal data.
• Right to Erasure: You have the right to request the erasure of your personal data when it is no longer necessary for the purpose for which it was collected or if you withdraw your consent.
• Right to Grievance Redressal: You have the right to contact our designated Grievance Officer to report any concerns or grievances.

5. Data Security

We implement reasonable security safeguards, including physical, electronic, and procedural measures, to protect your personal data from unauthorized access, loss, or misuse. We use one-way encryption for all passwords and employ robust security protocols for sensitive data like bank information and biometric data.

6. Data Retention and Deletion

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Upon termination of your employment or as soon as the data's purpose is fulfilled, we will securely delete or anonymize your personal data.

7. Contact Us

If you have any questions or concerns about this Privacy Policy or your personal data, please contact our Grievance Cell below:

Email: