Privacy Policy

1. What data we collect

1.1 Account data

When you create a StaffAround account, we collect:

• Your name and email address or phone number.
• A hashed password (never stored in plain text).
• Your country, detected from your network request to display the correct currency — your currency preference is saved to your account.

1.2 Staff and attendance data

You enter this data yourself. It includes staff member names, roles, monthly salary, working schedules, daily attendance records (Present/Absent/Half Day), cash advances and repayment records, and notes you attach to attendance entries. This data belongs to you. We store it securely to sync it across your devices and provide the service.

1.3 Usage data

We collect standard technical logs: app version, operating system, device type, error traces (via Firebase Crashlytics), and anonymised usage events. This data helps us fix bugs and improve the app. It is never tied to individual staff records.

1.4 Push notification tokens

With your permission, we store your device's FCM (Firebase Cloud Messaging) token to deliver server-sent alerts such as monthly salary reminders and subscription notifications. Daily attendance reminders are scheduled locally on your device and do not require this token. You can revoke push notification access at any time from your device notification settings or from Settings → Notifications in the app.

1.5 Payment data

Payments are processed by Razorpay (India) or Dodo Payments (international). We do not store your card number, CVV, or bank account details. We only retain a transaction reference and subscription status.

2. How we use your data

• To provide, operate, and maintain the StaffAround service.
• To sync your attendance and salary data across your devices.
• To send attendance reminders and salary alerts you have opted into.
• To process subscription payments and manage your plan.
• To troubleshoot errors and improve app performance.
• To comply with applicable legal obligations.

We do not use your data to show third-party advertising. We do not sell your data to any third party.

3. Staff data — your responsibilities

All staff records in StaffAround are entered and controlled by you. You are the data fiduciary for the personal information of your staff members. You are responsible for:

• Informing your staff that their attendance is being recorded digitally.
• Handling their data in compliance with applicable privacy law in your jurisdiction.
• Ensuring the data you enter is accurate and used only for legitimate payroll purposes.

4. Country detection and currency

We detect your approximate country from your network request (IP geolocation) when you first use the app to display the correct local currency and route you to the appropriate payment provider (Razorpay for India, Dodo Payments for other countries). Your detected billing country is saved to your account so that pricing remains consistent across sessions and devices. Billing country is system-controlled and cannot be changed in self-service checkout flows.

5. Third-party services

StaffAround uses the following third-party services, each with their own privacy policy:

• Firebase (Google) — authentication, crash reporting, push notifications, and cloud storage
• Razorpay — payment processing for users in India
• Dodo Payments — payment processing for users outside India
• MSG91 / Resend — OTP and transactional email delivery

We only share data with these services to the extent necessary to deliver the functionality described above.

6. Data retention

Your data is retained for as long as your account is active. If you delete your account, your personal data and all staff records are permanently and immediately deleted. Certain transaction records may be retained for longer periods as required by applicable tax or financial regulation.

7. Your rights

Depending on where you are located, you may have the right to access, correct, or delete your personal data; object to or restrict certain types of processing; and receive a copy of your data in a portable format. To exercise any of these rights, contact us at support@staffaround.com.

You can delete your account directly from the app at Settings → Delete My Account. Deletion is permanent and cannot be undone.

8. Data security

All data in transit is encrypted with TLS. Data at rest is encrypted using industry-standard encryption. Access to production data is restricted to authorised personnel only. We implement reasonable organisational and technical controls to prevent unauthorised access, disclosure, or modification.

9. Jurisdiction-specific notices

India (DPDP Act 2023)

We process personal data in accordance with India's Digital Personal Data Protection Act 2023. You may raise a complaint with the Data Protection Board of India if you believe your rights have been violated.

United Kingdom (UK GDPR)

If you are in the UK, you may raise concerns with the Information Commissioner's Office (ICO) at ico.org.uk.

Singapore (PDPA 2012)

If you are in Singapore, you may raise concerns with the Personal Data Protection Commission (PDPC) at pdpc.gov.sg.

10. Children

StaffAround is intended for users aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, please contact us immediately.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, the "Last Updated" date at the top of this page will change. For material changes, we will notify you by push notification or email at least 14 days before the change takes effect.

12. Contact us

For any privacy-related questions or requests, contact us at: support@staffaround.com

Sanora Technologies
India