Privacy policy
HRSuite is provided by Technocity Solutions. This policy explains what the service holds, why, and how it is protected. Where a customer organisation processes its employees' data through the service, that organisation is the data fiduciary and we are its processor; questions about a specific organisation's handling go to that organisation's HR.
What the service holds
- Account details of the people the customer invites: name, work email, role, sign-in events.
- Employee records the customer keeps: personal, contact, statutory and bank details, documents, attendance, leave, salary, reviews, training and the like.
- Punch data: time, location where the work policy asks for it, and a photo or a face descriptor where the policy asks for that, with the consent recorded at enrolment.
- Billing details of the customer: billing email, plan, invoices; card details are held by the payment provider, never by us.
Why
To provide the service the customer signed up for: running attendance, leave, payroll, statutory filings and the other HR processes it chooses to use, and to bill for it. We do not use the data for advertising and we do not sell it.
Where and how it is protected
Data is stored in a managed Postgres database and on the application server. Identifiers, face templates and personal files are encrypted at rest; traffic is encrypted in transit; access to a person's file or sensitive document is logged; sessions expire on inactivity. Backups are taken daily and kept encrypted.
Who can see it
Within the customer organisation, what each person sees is decided by their role: employees see their own record, managers their team, HR the organisation, and an auditor everything read-only. Technocity Solutions staff access customer data only to provide support the customer asked for or to keep the service running, and that access is logged.
Retention
Data is kept for as long as the customer's organisation exists on the service and for ninety days after the subscription ends, then deleted. Punch photos are deleted after the retention period the customer sets; face templates are removed on request or after exit. An individual's rights to access or correct their data are exercised through their organisation's HR, and the service gives HR the tools to do so.
Contact
Questions about this policy go to the provider.