Privacy Policy

SaaS Service Model

GatePass BD is a Software as a Service (SaaS) platform provided to organizations and their employees to manage attendance, access control and field visit tasks.

• Service provider role. We host and maintain the platform on behalf of your employer. Your employer determines which features are enabled and which data is recorded for your account.
• Enterprise access only. The Application cannot be used without credentials issued by an organization that subscribes to our service.
• Permission-based collection. Camera, location and photo library data are collected only after you grant permission through your device's system prompt. You may withdraw any permission at any time in your device settings.

Information We Collect

2.1 Information you or your employer provides

• Full name
• Official email address
• Employee ID / code
• Department and designation
• Phone number
• Profile photograph

2.2 Information collected while you use the Application

• Attendance records — check-in and check-out times, working duration, break periods and attendance status.
• Location data — your device's precise location at the moment you record attendance or check in to a visit task.
• Leave and visit-task records — leave requests and reasons you write, and visit-task completion data.
• Free-text entries — any text you type into fields such as a leave reason or note.

2.3 Information collected automatically by third-party components

The Application includes the Google Maps SDK to display maps and geo-fence boundaries. Google collects the following from the Application:

• Device identifier
• Crash data and performance data
• Product interaction data

This collection is governed by Google's Privacy Policy . We do not use this data ourselves and it is not used for advertising.

Device Permissions

How Face Verification Works

This section describes an important privacy protection built into the Application.

When you use face verification, the Application converts the captured image into a mathematical representation (an "embedding") and compares it against your stored profile photograph. This comparison happens entirely on your device.

• Only a similarity score is transmitted to our servers, together with whether the match succeeded.
• No face image and no biometric template produced during verification is ever uploaded or stored on our servers.
• Your profile photograph is stored on our servers as an ordinary profile picture so that it can be displayed in the Application and used for on-device comparison.

We do not use face data for any purpose other than verifying your identity for attendance, and we never share it with advertisers or data brokers.

How We Use Your Information

We use the information described above only to:

• Authenticate you and keep you signed in.
• Record and display attendance, breaks, leave and visit tasks.
• Verify that attendance is recorded from an authorized location and by the correct person.
• Generate attendance, leave and salary reports for you and your employer.
• Provide customer support and keep the service secure and reliable.

We do not:

• Sell your personal data.
• Share your data with data brokers.
• Use your data for advertising, or to track you across other companies' apps and websites.
• Use your data to build advertising profiles.

Data Sharing

Your data is accessible to:

• Your employer, through the administrator accounts they control. Your attendance, leave and visit-task records are visible to authorized administrators within your organization.
• Our hosting and infrastructure providers, strictly to operate the service.
• Google, limited to the SDK data described in section 2.3.
• Legal authorities, where we are required by law to disclose information.

We do not otherwise disclose your personal data to third parties.

Data Security

We take reasonable measures to protect your information:

• All communication between the Application and our servers uses encrypted HTTPS connections.
• Access to organizational data is restricted by role-based permissions.
• Face matching is performed on your device, so biometric templates are not transmitted.
• Session credentials are stored within the Application's own private storage area, which the operating system isolates from other applications.

Data Retention

We retain your personal data for as long as your account remains active with your employer, and for as long as necessary to fulfil the purposes described in this policy or to comply with legal obligations.

Because we act as a service provider to your employer, retention and deletion of employee records are primarily governed by your employer's internal policies.

Your Rights and Choices

• Permissions — you can revoke camera, location or photo library access at any time in your device settings. Some features will stop working when you do.
• Access and correction — to see or correct the personal data held about you, contact your organization's administrator in the first instance.
• Deletion — to request deletion of your personal data, contact your employer's administrator or write to us using the contact information in section 11. Where we act on your employer's behalf, we will refer the request to them.

Depending on where you live, you may have additional rights under local data protection law.

Children's Privacy

The Application is an enterprise workplace tool intended for employees. It is not directed at children, and we do not knowingly collect personal data from anyone under 13.

If you believe a child has provided us with personal data, please contact us and we will delete it.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, you can contact:

Project 2morrow Software Limited

Changes to This Policy

We may update this Privacy Policy from time to time. Changes take effect when we post the revised policy and update the Effective Date above.

Where changes are significant, we will make reasonable efforts to notify you or your employer.