Privacy Policy Overview

1. Introduction
   VeriTrack Systems ("we," "our," or "us") respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal data in compliance with applicable African data protection laws (Ghana’s Data Protection Act, Nigeria’s NDPR, Kenya’s Data Protection Act).
2. Data We Collect
   • Personal Data
     • Employee Information: Name, Staff ID, department, email.
     • Live Photo Data: Liveliness check scans (processed for verification, not stored).
     • Location Data: GPS coordinates during check-in/out to verify attendance.
     • Device Data: IP address, browser type, operating system.
   • Attendance & Performance Data
     • Check-in/out timestamps.
     • Overtime hours, punctuality records.
     • Recognition awards (e.g., "Perfect Attendance").
3. How We Use Data

   Purpose	Legal Basis
   Workforce attendance tracking	Contractual necessity
   Payroll processing	Legal obligation (labor laws)
   Fraud prevention	Legitimate interest
   Employee recognition programs	Consent (where required)
   System improvements	Legitimate interest

4. Data Sharing & Third Parties
   • Employers/HR: Access attendance records for workforce management.
   • Service Providers: Google Cloud (data hosting), Paystack (payments).
   • Legal Compliance: Disclosed only if required by law.
5. Data Security
   • Encryption: Data transmitted via TLS 1.2+.
   • Access Controls: Role-based permissions restrict data access.
   • Photo Protection: Facial data is processed in real-time; stored photos are secured.
6. Data Retention

   Data Type	Retention Period
   Attendance records	5 years (labor law compliance)
   Liveliness check photos	30 days (archived unless needed for disputes)
   System logs	1 year

7. Your Rights (Employees)
   • Access: Request a copy of your data.
   • Correction: Update inaccurate records.
   • Deletion: Request removal (subject to legal retention requirements).
8. Cross-Border Data Transfers
   Data is stored in secure cloud servers (location specified in contracts).
   For international transfers, we use Standard Contractual Clauses (SCCs) or equivalent safeguards.
9. Cookies & Tracking
   We use session cookies for login security. No third-party advertising trackers.
10. Policy Updates
    Changes will be communicated via email or System notifications.