Contents
1Scope
This policy applies to the Services the Company provides through its official website, the AUTOROSTER applications (employee app, manager app, and clock-in feature), and related APIs. Where the Services integrate with third-party platforms, those third parties' own privacy policies govern the data they collect independently.
2Data We Collect
- Account and contact data: name, company name, email, phone number, job title, and similar information.
- Operational and working-time data: schedules, clock-in times, geolocation / WiFi connection verification, working hours, leave and shift swaps, and other records generated through your use of the Services.
- Device and usage logs: IP address, device identifiers, browser, activity logs, cookies, and similar data.
- Camera and photos: when you actively take a photo for clock-in verification or upload an attachment, we access photos captured by the camera or selected by you from your photo library; we do not capture any images without your action.
- Payment data: subscription plan and billing information (actual card details are handled by third-party payment providers; the Company does not store full card numbers).
Unless we obtain your explicit consent or are otherwise permitted by law, the Company does not collect special (sensitive) categories of personal data.
3Cookies and Tracking Technologies
We use cookies and similar technologies to maintain your login session, remember preferences, and analyze usage. By purpose, cookies can be categorized as strictly necessary, functional, and analytics cookies. You can adjust or block cookies through your browser settings, though doing so may affect certain features.
4How We Use Data
- To provide, maintain, and improve the Services, including scheduling, clock-in, working-hours aggregation, and compliance checks.
- Billing, invoicing, and subscription management.
- Customer support, notifications, and service announcements.
- System security and prevention of fraud and abuse.
- Marketing and product promotion, where lawful and subject to any required consent.
- Compliance with legal obligations and requests from competent authorities.
5Sharing and Disclosure
The Company does not sell your personal data. We share data only in the following circumstances: (a) service providers that support our operations (such as cloud hosting, payments, and communications); (b) third-party platforms you choose to integrate with; (c) affiliates within our corporate group; (d) as required by law or by regulatory or judicial authorities; and (e) in connection with a merger, acquisition, or reorganization, provided the recipient agrees to abide by this policy.
6Roles Regarding Customer Data
When the Company's business customers (employers) use the Services to manage their employees, the customer is the controller of its employees' personal data, and the Company acts as a processor, processing the relevant data on the customer's instructions. Employees wishing to exercise their rights should, as a rule, address their requests to their employer.
7Cross-Border Transfers
To provide the Services, your data may be stored and processed in different regions where the Company or its service providers are located. When we carry out cross-border transfers, we will implement contractual and technical measures to ensure a standard of protection no lower than that required by this policy.
8Data Retention
We retain your data only for as long as necessary to fulfill the purposes described in this policy, taking into account needs such as contract performance, tax, auditing, and dispute resolution. Once the retention period expires, data will be deleted or de-identified.
9Data Security
We protect data through measures such as encryption in transit and at rest, access controls, encryption of biometric data (we do not store the original images), server time calibration, and regular audits. However, no internet transmission can be guaranteed to be absolutely secure, and we will continue to strengthen our safeguards.
10Your Rights
To the extent permitted by applicable law, you have the right to inquire about, access, obtain a copy of, correct, supplement, request the cessation of collection, processing, or use of, or delete your personal data. You may submit a request through the contact details at the bottom of this page, and we will respond within a reasonable period.
11Children's Privacy
The Services are intended for businesses and their employees and are not designed for minors. If we learn that we have collected a minor's data without appropriate consent, we will delete it as soon as possible.
12Third-Party Links
The Services may contain links to third-party websites or services, which have their own privacy policies. The Company is not responsible for their content or practices.
13Changes to This Policy
We may revise this policy from time to time. Any revisions will be posted on this page and take effect upon posting. For material changes, we will provide notice by reasonable means. Your continued use of the Services after a change takes effect constitutes acceptance of the revised policy.
14Contact Us
If you have any questions about this policy or your personal data, please contact:
AUTOPOS TECHNOLOGY PTE. LTD.
Email: wilson@autopos.co · Contact form
※ This document is a template. Before going live, we recommend having it reviewed and adjusted by your legal counsel or local legal advisor in accordance with the applicable jurisdiction (such as relevant personal data protection laws).