Privacy Policy

We collect account data (name, work email, organization), usage data (feature interactions, device and browser metadata), and — where your organization enables it — attendance data such as check-in timestamps, GPS coordinates at time of check-in, and face-verification data used solely for identity matching and attendance review.

Face verification stores a mathematical face embedding used for matching, plus a photo captured at enrollment and at each face check-in so your organization's administrators can review attendance and confirm identity. All of it is scoped to your organization and never shared with other organizations.

To provide and improve the service, secure accounts, generate the analytics your admins request, and communicate service-related updates. We never sell personal data.

Where GDPR applies, we process employee data under your organization's legitimate interest or contractual necessity as the data controller; Attenzo acts as a data processor on your organization's behalf. See our GDPR page for the full breakdown.

We share data only with sub-processors required to run the service (cloud hosting, email delivery, error monitoring), each bound by a data processing agreement, and never for advertising purposes.

Attendance and payroll records are retained per your organization's configured retention window (default 3 years) or as required by local labor law, whichever is longer. Account data is deleted within 30 days of account closure upon request.

You may request access, correction, export, or deletion of your personal data by contacting privacy@attenzo.com or through your organization's admin. We respond within 30 days.

Data is encrypted in transit (TLS 1.2+) and at rest. See our Security page for details on our practices and certifications.

Questions about this policy can be sent to privacy@attenzo.com.