Privacy Policy

1Introduction & Scope

MR Facility is designed for workforce governance, facility site operations, biometric attendance validation, and automated payroll calculations. We recognize the sensitive nature of employee identity data and operational information. We are committed to upholding strict standards of confidentiality, transparency, and data privacy in accordance with applicable data protection legislation.

2Information We Collect

To deliver our workforce and facility management services, we may collect and process the following categories of data:

• Organization & Administrator Details: Business name, registered address, authorized representative contact details, billing contacts, and site operational hierarchies.
• Employee & Personnel Data: Full legal name, employee identification numbers, department, role tier (white-collar, blue-collar), shift schedules, contact telephone numbers, and work email addresses.
• Facial Verification Templates: Mathematical biometric vector templates generated during enrollment for identity verification. We do not store raw unencrypted video streams.
• Location & Geofence Coordinates: Precise GPS coordinates captured exclusively at the moment of attendance check-in/check-out to verify on-site presence against assigned facility geofences. Continuous background tracking is strictly disabled unless explicitly required by an active high-security patrol task.
• Operational Logs: Task completion timestamps, service audit checklists, supervisor digital approvals, and payroll calculation records.

3How We Use Your Data

All processed data is utilized strictly for authorized enterprise facility operations, including:

4Biometric & Security Safeguards

We apply state-of-the-art technical, physical, and administrative measures to safeguard client data:

• Encryption at Rest & Transit: All databases, biometric vector models, and client documents are encrypted using AES-256 encryption at rest and TLS 1.3 encryption in transit.
• Zero Selling of Data: We never sell, rent, monetize, or broker personal, biometric, or location data to third-party advertisers or data brokers under any circumstance.
• Strict Role-Based Access (RBAC): Access to personnel data is partitioned by organization role permissions. Super admin, supervisor, and client portal privileges are strictly logged with audit trails.

5Data Retention & Deletion

We retain enterprise data only for the duration of the active SaaS enterprise agreement. Upon termination of service or upon written request from the client organization's authorized administrator, all operational databases and biometric templates will be permanently expunged or provided in a standard portable archive in accordance with contract terms.