Privacy Policy

1. Scope and roles

This policy applies to:

• Administrators and managers who use the 2bHRMS web portal
• Employees and other authorized users who use the 2bHRMS mobile applications for attendance, leave, work-from-home requests, regularization requests, and related reports

In most cases, your employer or contracting organization (the "Organization") decides why and how employment-related data is processed in 2bHRMS. The Organization is typically the data controller. 2b Innovations processes that data as a service provider to deliver the Services under its agreement with the Organization.

2. Information we process

The categories of information we process depend on how the Services are configured and how you use them. They may include:

• Account and profile information. Name, work email address, employee identifier, designation, department, Organization details, and assigned role.
• Attendance and time records. Clock-in and clock-out events, shift assignments, attendance status, and related timestamps.
• Location information (mobile).Approximate or precise device location collected when you perform attendance actions such as clock-in or clock-out, if the Organization enables location-based attendance. Location data is used to validate attendance according to the Organization's settings. It is not used for advertising.
• Request and workflow information. Leave applications, work-from-home requests, regularization requests, approvals, comments, and status history.
• Device and technical information. Device type, operating system, application version, IP address, and diagnostic or crash data needed to operate, secure, and support the Services.
• Support communications. Information you provide when you contact us for help.

3. How we use information

We use personal information to:

• Provide, operate, maintain, and improve the Services
• Authenticate users and enforce role-based access controls
• Record attendance, process workforce requests, and generate reports for the Organization
• Send operational notifications related to account activity or approvals, where enabled
• Detect, prevent, and investigate security incidents, fraud, or misuse
• Comply with applicable law and respond to lawful requests

We do not sell personal information. We do not use attendance location data for marketing or advertising.

4. Mobile permissions

The employee mobile applications may request device permissions, including location, notifications, network access, and, where enabled by the Organization, camera access for profile or verification features.

You can change permissions in your device settings. If you deny a permission, features that depend on it may be unavailable. For example, clock-in may fail if the Organization requires location validation and location access is disabled.

5. Sharing of information

We may share information with:

• Your Organization. Authorized administrators, managers, and other users, according to roles and permissions configured in 2bHRMS.
• Service providers. Vendors that provide hosting, infrastructure, monitoring, or support services and process data only on our instructions.
• Authorities and legal recipients. When disclosure is required by law, or when reasonably necessary to protect rights, safety, or the security of the Services.

6. Retention

We retain personal information for as long as necessary to provide the Services to the Organization, meet contractual retention requirements, resolve disputes, and comply with legal obligations.

When an Organization ends its use of the Services, or when an authorized deletion request is submitted, we delete or anonymize data in accordance with our retention practices and applicable law, except where continued retention is required for legal, security, or legitimate operational reasons.

7. Security

We implement administrative, technical, and organizational measures designed to protect personal information. These measures include access controls, encryption in transit (HTTPS/TLS), and authentication safeguards.

No system is completely secure. Users should use strong, unique passwords and keep credentials confidential.

8. Your rights and choices

Depending on applicable law and your Organization's policies, you may have rights to request access to, correction of, or deletion of personal information, or to raise questions about processing.

Because your Organization typically controls employment-related data, employees should first contact their HR or IT administrator. You may also contact us through the channels listed in Section 13 and on our Support page.

9. Account deletion

2bHRMS accounts are created and managed by the Organization. To request deletion of your account and associated personal data, contact your Organization administrator. You may also request assistance through Support.

We will coordinate with the Organization's authorized contact to process deletion or deactivation requests, subject to retention obligations that may apply to employment, payroll, audit, or compliance records.

10. Children

The Services are intended for workforce use by adults authorized by an Organization. They are not directed to children under 16 years of age, or the equivalent minimum age under applicable law.

11. International processing

Personal information may be processed in countries where 2b Innovations Innovations or its service providers operate. Where required by law, we use appropriate safeguards for cross-border transfers.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Where required, we will provide additional notice. Your continued use of the Services after an update constitutes acknowledgment of the revised policy to the extent permitted by law.

13. Contact

For privacy questions about 2bHRMS, contact 2b Innovations at privacy@2binnovations.com or through our Support page.