Privacy Policy

Scope of This Policy

This policy applies to all users of the Empeasy platform, including administrators, employees, and any individual who accesses or uses our services.

Data We Collect

• Account Data
  Name, email address, phone number, company name, role, and permissions.
• Employee Data
  Employee records, departments, designations, attendance logs, leave records, payroll information, and contracts managed through the platform.
• Billing Data
  Payment amount, payment method, and invoice number. We do not store full card details; payments are processed through a certified payment gateway.
• Technical Data
  Login records, IP address, browser type, device information, and cookies used to improve performance and user experience.
• Biometric Data
  Facial recognition data used for attendance tracking, processed securely and stored in encrypted form.

How We Use Your Data

• Operating and delivering the Empeasy platform services as per our service agreement.
• Improving platform performance, features, and user experience through analytics.
• Regulatory compliance within the Kingdom of Saudi Arabia, including accounting and tax obligations.
• Communicating with you about technical updates, billing, and support inquiries.
• Processing payroll, attendance, and leave management on behalf of your organization.

Third-Party Sharing

We share only the minimum necessary data with:

• Hosting and server providers to operate the platform infrastructure.
• Payment gateways to process transactions securely.
• Support providers (if applicable) under confidentiality and data processing agreements.

We never sell your personal data to third parties.

Storage & Security

We implement robust security measures including TLS/HTTPS encryption for data in transit, role-based access controls, regular security audits, and automated daily backups. While we strive for maximum security, no system can guarantee absolute protection over the internet.

Data Retention

We retain your data for the duration of your active subscription. After cancellation, data is kept for a reasonable period to fulfill accounting and legal obligations before being securely deleted.

Your Rights

You have the right to:

• Access your personal data held by us.
• Request correction or update of inaccurate data.
• Request deletion of your data (where it does not conflict with legal obligations).
• Restrict processing of your data.
• Withdraw consent for optional marketing communications.
• Export your data in a portable format.

International Data Transfers

Your data is stored on secure servers. If any data transfer outside the Kingdom of Saudi Arabia is required, it will be conducted in compliance with applicable data protection regulations and with appropriate safeguards in place.

Cookies

We use essential and functional/analytical cookies to improve your experience. You can manage cookie preferences through your browser settings. Disabling certain cookies may affect some platform features.

Employee Data Responsibility

Empeasy is designed for businesses to manage their workforce. When entering employee data into the platform, the organization is responsible for obtaining necessary consents and ensuring compliance with applicable privacy laws and regulations.

Policy Updates

We may update this policy from time to time. The updated effective date will be posted at the top of this page. Continued use of the platform after changes constitutes acceptance of the updated policy.