Privacy Policy

Within the service we collect only the data required for employee time and attendance: identity and contact details, clock-in/out and leave/shift records, location verification at the moment of clock-in, and device/IP information for account security.

We do not collect biometric data and do not perform continuous location tracking.

We use data only to provide the service, ensure the accuracy of attendance records, maintain security and fulfil legal obligations. We do not sell your data for advertising purposes.

Point PDKS runs on a multi-tenant architecture. Every query is automatically isolated by organization; one business's data cannot be viewed by another. This isolation is a core part of the application infrastructure.

Your data is encrypted in transit with SSL/TLS. Passwords are stored in an irreversibly hashed form. Critical actions are recorded in an audit log together with IP, device and change information. Access is restricted through role-based authorization.

We work with a limited number of infrastructure providers to operate the service:

• Vercel — website hosting.
• NetGSM — sending one-time SMS codes solely for password reset.

You may request a copy of your data to be exported or have it deleted. Your account deletion request, outside of legal retention obligations, is processed within a reasonable time. For your requests, you may write to info@cnutlabs.com.