Privacy Policy
Introduction
TLA-Softwares ("we", "us", or "our") operates the Smart HRM Attendance mobile application and website (hrm.tringuyencse.com). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By using our Service, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
We collect several types of information for various purposes to provide and improve our Service.
Personal Information
When you register or use our Service, we may collect personally identifiable information, including but not limited to:
- Full name
- Email address
- Phone number
- Employee ID
- Department and position
- Profile photo
Location Data (GPS)
We collect precise location data when you check in or check out for attendance purposes. This includes:
- GPS coordinates (latitude and longitude)
- Timestamp of location capture
- Network information (IP address, WiFi details)
- Device information
Location data is used solely for attendance verification and ensuring employees are at designated work locations during check-in/check-out.
Biometric Data
With your explicit consent, we may collect biometric data for authentication purposes:
- Fingerprint data (stored locally on your device)
- Face ID data (stored locally on your device)
Important: Biometric data is stored locally on your device and is never transmitted to our servers. It is used only for local authentication.
Usage Data
We automatically collect certain information when you access our Service:
- Device type and operating system
- App version
- Time and date of access
- Features used
- Crash reports and error logs
2. How We Use Your Information
We use the collected information for the following purposes:
- To provide and maintain our Service
- To verify employee attendance and work hours
- To process leave requests and overtime applications
- To generate attendance reports and analytics
- To send notifications about attendance, approvals, and updates
- To detect and prevent fraud or unauthorized access
- To improve our Service and user experience
- To comply with legal obligations
3. Data Storage and Security
Data Storage
Your data is stored on secure servers located in Vietnam and may be transferred to and processed in other countries where our service providers operate.
Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Attendance records are typically retained for 5 years for legal and accounting purposes.
Security Measures
We implement industry-standard security measures to protect your data:
- End-to-end encryption for data transmission
- Secure HTTPS connections
- Role-based access control (RBAC)
- Regular security audits
- Encrypted database storage
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
4. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:
- With your employer: Attendance data, work hours, and leave requests are shared with your organization's administrators
- Service providers: We may share data with trusted third-party service providers who assist in operating our Service (e.g., cloud hosting, analytics)
- Legal requirements: We may disclose your information if required by law or in response to valid legal requests
- Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred
5. Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data (subject to legal retention requirements)
- Objection: Object to processing of your personal data
- Data portability: Request transfer of your data to another service
- Withdraw consent: Withdraw consent for biometric data collection at any time
To exercise these rights, please contact us at support@smarthrm.com
6. Children's Privacy
Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
7. Third-Party Services
Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.
Third-party services we use:
- Firebase Cloud Messaging (push notifications)
- Google Maps (location services)
- Cloud storage providers
8. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.
You are advised to review this Privacy Policy periodically for any changes. Changes are effective when posted on this page.
9. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Email: support@smarthrm.com
Website: https://hrm.tringuyencse.com
Address: Vietnam
GDPR Compliance
For users in the European Union, we comply with the General Data Protection Regulation (GDPR). You have additional rights under GDPR, including the right to lodge a complaint with a supervisory authority.