Privacy Policy & Data Security
Effective Date: January 1, 2026
1. Information We Collect
StaffMitra collects business and employee data strictly necessary for providing staff attendance, geofencing, shift management, and salary calculations:
- Business Information: Store/Company name, business type, category, address, city, state, and pincode.
- Employee Details: Staff name, mobile number, designation, department, base salary, and assigned security PIN hash.
- GPS & Geofencing Data: Temporary device latitude and longitude coordinates captured exclusively during check-in and check-out to verify 100m workplace radius. Continuous background location tracking is NEVER performed.
- Live Camera Selfie Proof: Real-time front-camera image captured during attendance check-in. Gallery uploads are strictly disabled.
- Salary & Payroll Information: Attendance timestamps, late minutes, overtime hours, salary advances, and generated payslips.
2. How We Use Your Data
All collected information is used solely to calculate working hours, verify workplace presence, generate payroll reports for business administrators, and send service notifications. We do NOT sell, rent, or trade your business or employee data to third parties.
3. Data Storage & Security
Data is stored securely on encrypted cloud infrastructure powered by Supabase PostgreSQL with SSL/TLS encryption in transit and AES encryption at rest. Passwords and employee security PINs are protected using bcrypt cryptographic hashing algorithms.
4. Camera & Location Permissions
Employees grant location and camera access solely when punching attendance. Location data is compared against the workplace geofence radius and is not stored or shared beyond attendance logs.
5. Contact Data Privacy Officer
For data deletion requests or privacy inquiries, please contact our Data Protection Officer at support@staffmitra.com.