Overview

CFSPL360 HRMS is a human-resource management application provided by chetana financial services private limited for use by its employees and authorised staff. This policy explains what data the app collects, why, how it is used and shared, how it is protected, and the choices and rights available to you. The app is intended for use by employees of the organisation as part of their employment.

Information we collect

• Account & profile data — name, employee code, email address, mobile number, designation, department, branch and profile photo, used to identify you and operate HR features.
• Location data (including background location) — when you are checked in for attendance/field work, the app records your GPS location to verify attendance and, for field roles, to log your travel/route. Location is collected in the background only while a tracking session is active and a persistent notification is shown.
• Camera / photos — the app uses your camera to capture a selfie for attendance verification and to set your profile photo. Images are uploaded to our servers as proof of attendance.
• Device & notification data — a push-notification (FCM) token, device platform, app version, and basic device/browser information, used to deliver notifications and to support the app.
• HR activity data — attendance, leave, tasks, training enrolments, test answers/scores, feedback, documents and messages you create within the app.

How we use your information

• Record and verify attendance (including selfie and GPS check-in).
• Track field-staff location and travel during active work sessions.
• Manage employee profiles, leave, tasks, payroll inputs and training.
• Send work-related notifications, reminders and greetings.
• Maintain security, prevent misuse and comply with legal obligations.

We do not sell your personal data, and we do not use location or camera data for advertising.

Sensitive permissions

• Location (foreground & background) — used solely for attendance verification and field-staff travel logging while you are checked in. You can deny or revoke this permission in your device settings; attendance/tracking features that rely on it will then be limited.
• Camera — used only when you choose to capture an attendance selfie or update your profile photo.
• Notifications — used to deliver work updates; can be disabled in the app or device settings.

Sharing & processors

We share data only with service providers that help us run the app:

• Google Firebase Cloud Messaging — push notification delivery.
• Google Maps / Google Calendar (Meet) — maps, route display and meeting links.
• Amazon Web Services (S3) — secure file/image storage.
• FlexiWABA / WhatsApp — sending work messages and OTPs where enabled.
• Authorised HR/administrators within your organisation, for HR purposes.

We may also disclose information where required by law. We do not sell personal data to third parties.

Data retention

We retain your data for as long as your employment/account is active and as needed for legitimate business and legal requirements. Attendance, location and HR records are kept per the organisation's retention policy and applicable law, after which they are deleted or anonymised.

Security

Data is transmitted over encrypted connections (HTTPS) and stored on access-controlled infrastructure. Access is restricted to authorised personnel on a need-to-know basis. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.

Your rights & account / data deletion

You may request access to, correction of, or deletion of your personal data. As the app is provided to you through your employer, some records must be retained for employment, payroll and legal compliance even after a deletion request.

To request deletion of your account and associated personal data, email from your registered email with the subject "Data deletion request". We will respond within 30 days and delete data that we are not legally required to retain.

Children

The app is for use by employees and is not directed to children under 16. We do not knowingly collect data from children.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected here with an updated effective date.