Clear, professional
privacy standards.

01 — Overview

Scope of this policy

AstraPeople is an HR and workforce operations platform used by organizations to manage employee records, attendance, communication, payroll-linked workflows, and related administrative functions.

This Privacy Policy explains what information is collected through the platform, why it is processed, how it is protected, and what choices are available to users and client organizations.

In most cases, your employer or the organization using AstraPeople acts as the primary data controller, and AstraPeople acts as a service provider processing information on their behalf.

02 — Data Collection

Information we collect

We collect information that is required to operate the platform — profile details, employment information, attendance records, leave activity, uploaded documents, and support communications.

Depending on your organization configuration, this may include identity details, contact information, department and reporting structure, payroll-related references, and policy acknowledgements.

For field operations and attendance verification, the platform may process device-based metadata such as location, timestamps, and device session activity when those features are enabled.

03 — Location

How location data is used

Location information is used only where your organization has enabled attendance verification, geofencing, or field tracking workflows.

Foreground location may be used during clock-in and clock-out events to validate work presence. Background tracking, if enabled for approved roles, is limited to active work sessions and is expected to stop after clock-out or task completion.

Location data is not used for advertising and is processed solely for business operations, auditability, compliance, and authorized workforce management.

04 — Processing

Why information is processed

We process information to provide core HRMS functionality, maintain account security, support attendance and leave operations, generate reports, and meet lawful business or statutory requirements.

Processing may also support internal analytics, issue resolution, fraud prevention, platform reliability, and role-based administrative access for authorized personnel.

05 — Disclosure

When information may be shared

Information is shared on a limited basis with authorized client administrators, managers, or HR personnel who require access to perform legitimate operational responsibilities.

We may also use trusted infrastructure or service providers that process data under confidentiality and security obligations. We do not sell personal information or share it for unrelated marketing use.

Information may be disclosed where required by law, regulation, court order, or a valid governmental request.

06 — Security

How data is protected

AstraPeople applies technical and organizational safeguards designed to protect confidentiality, integrity, and availability of platform data.

These measures may include access controls, encryption in transit, protected storage, audit logging, environment restrictions, and operational monitoring appropriate to the service.

No internet-based platform can guarantee absolute security, but we maintain reasonable controls and continuously review risks as part of ongoing operations.

07 — Retention

How long records are kept

Information is retained for as long as necessary to provide the service, satisfy client instructions, and comply with employment and financial recordkeeping obligations.

Retention periods can vary by data category, organization policy, and applicable legal requirements. Once information is no longer required, it is deleted, anonymized, or archived according to operational policy.

08 — Your Rights

Your choices and rights

Subject to applicable law and the role of your organization as controller, you may request access to your records, correction of inaccurate information, export of eligible data, or deletion where retention is no longer required.

You may also control certain device permissions, such as location or media access, through your device or browser settings where supported by the platform.