Privacy Policy

At CredoHRMS, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you use our services.

1. Information We Collect

We collect information you provide directly to us, including:

• Account information (name, email, phone, company)
• Employee data uploaded by your organization
• Payment information processed by our payment partners
• Usage data (pages visited, features used, IP address)
• Precise device location, including latitude, longitude and accuracy, when you use location-based attendance or field-tracking features

2. Location Data

CredoHRMS uses precise location to record attendance check-in and check-out locations, verify an office geofence where your organization has configured one, and support field visit and route tracking. Location is associated with your employee account and your organization's HRMS account.

In the Android app, starting a field visit starts background location tracking. While that visit is active, the app can collect and send your location, including when the app is minimized or not on screen, approximately every three minutes. Android displays an ongoing notification while this background tracking service is running. Tracking is stopped when the field visit ends or you log out. Location permission is also used when you submit attendance so the system can record the check-in or check-out location.

Location records are sent securely to CredoHRMS and stored for your organization. The organization's authorized administrators, HR users and managers can access location records for workforce and field-visit management. We do not sell location data or use it for advertising. Your organization controls GPS retention; the default is 90 days, and a retention setting of zero means records are kept indefinitely. Contact your organization for its applicable retention setting. You can revoke location permission in Android Settings, but location-based attendance and field-tracking features will then be unavailable.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain and improve our services
• Process transactions and send related notifications
• Respond to your comments and questions
• Comply with legal obligations under Indian law

4. Data Security

We use industry-standard security measures including encryption at rest and in transit, JWT authentication, multi-tenant isolation and regular security audits to protect your data.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide services. On account deletion, we permanently remove your data within 30 days, except where retention is required by law. A company admin can ask for deletion from My Profile → Delete company account in the app; see credohrms.com/delete-account.

6. Your Rights

Under Indian data protection laws, you have the right to access, correct, export and delete your personal data. Contact us at privacy@credohrms.com to exercise these rights.

7. Contact Us

For any privacy-related queries, write to us at privacy@credohrms.com.