Privacy and Policy
Last Updated: April 26, 2026 • Version 2.4 • Applicable to allEVO HR Tenants
1. Introduction & Scope
Welcome to AttendOS. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how AttendOS collects, processes, stores, and protects employee attendance, location, and scheduling information on behalf of our enterprise clients (the "Tenants").
As a processor, AttendOS processes personal data strictly in accordance with the instructions of our Tenants (your employer), who act as the data controllers. This system is designed to comply with global privacy standards as well as local regulatory requirements.
2. Data We Collect & Process
To administer workforce schedules, verify punch-in locations, and provide accurate attendance reporting, AttendOS processes the following categories of data:
Workforce Records
Shift logs, leaves, late records, holidays, and exception flags.
Location & Geofencing
GPS coordinates during punch- in/out to verify workspace zones.
Identity Data
Full name, employee ID, department, email address, and job title.
Important Geolocation Notice: Continuous location tracking is never enabled. AttendOS only requests location access momentarily during active punch-in or punch-out events to confirm alignment with designated work zones.
3. Purpose of Data Processing
Data processed within AttendOS is strictly used for operational employer needs, including:
Generating payroll-ready attendance reports and tracking timesheets.
Reviewing and approving exceptions, late states, and leaves.
Enforcing workplace geofencing settings to maintain operational compliance.
Sending push notifications and alerts regarding shift updates and policy changes.
4. Regulatory Compliance & Regional Standards
Because AttendOS operates globally and administers regional office clusters (including HQ Riyadh, Jeddah, and Dammam branches), we fully comply with regional privacy framework laws:
Saudi Arabia Personal Data Protection Law
All data processed for Saudi Arabian entities is hosted locally within certified local cloud infrastructure, compliant with regulatory mandates overseen by SDAIA.
General Data Protection Regulation Compliance
Our strict data-minimization, user access rights, and transfer restriction mechanisms align with European GDPR standards for EU-based remote staff.
© 2026 EVO HR Inc. All rights reserved.