Privacy Policy

We collect information you provide directly when you create an account, use our services, or contact us for support. This includes: • Account information: name, email address, company name, job title, and password. • Employee data: attendance records, leave requests, shift schedules, and biometric verification data (Face ID) processed on your behalf as a data processor. • Usage data: log data, IP addresses, browser type, pages visited, and feature interactions. • Payment information: billing address and payment method details, processed securely through our payment partners.

We use the information we collect to: • Provide, maintain, and improve the ZYHR platform and its features. • Process transactions and send related information, including purchase confirmations and invoices. • Send technical notices, updates, security alerts, and administrative messages. • Respond to comments, questions, and support requests. • Monitor and analyze usage patterns to improve user experience. • Comply with legal obligations and enforce our agreements.

We do not sell, trade, or rent your personal information to third parties. We may share information in the following circumstances: • Service providers: Third-party vendors who perform services on our behalf (cloud hosting, analytics, payment processing) under strict confidentiality agreements. • Legal requirements: When required by law, regulation, or valid legal process such as a court order or subpoena. • Business transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice provided. • With your consent: We may share information for any other purpose with your explicit consent.

We retain your personal data for as long as your account is active or as needed to provide services. Employee data processed on your behalf is retained according to your organization's configuration and applicable legal requirements. Upon account termination, we will delete or anonymize your data within 90 days, unless we are required by law to retain it longer.

We implement industry-standard security measures to protect your data, including TLS encryption in transit, AES-256 encryption at rest, role-based access controls, and regular security audits. Biometric data (Face ID) is processed locally on device where possible and is never stored in raw form on our servers. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Depending on your location, you may have the following rights regarding your personal data: • Access: Request a copy of the personal data we hold about you. • Correction: Request correction of inaccurate or incomplete data. • Deletion: Request deletion of your personal data, subject to legal obligations. • Portability: Receive your data in a structured, machine-readable format. • Objection: Object to processing of your data for direct marketing purposes. To exercise any of these rights, please contact us at privacy@zyhr.app.

We use cookies and similar tracking technologies to enhance your experience. Please refer to our Cookie Policy for detailed information on the types of cookies we use and how to manage your preferences.

ZYHR is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information promptly.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via a prominent notice within the platform at least 30 days before the changes take effect. Your continued use of ZYHR after the effective date constitutes acceptance of the updated policy.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: ZYHR, Inc. Email: privacy@zyhr.app Address: [Company Address]