Privacy Policy

Effective Date: 30 March 2026

GILI (Udyam: UDYAM-TN-02-0460437) ("we", "us", "our") operates the Seyal mobile application and web service. This Privacy Policy explains how we collect, use, and protect your personal information.

1. Information We Collect

We collect the following data when you use our service:

• Phone Number — used for account authentication via OTP (one-time password).
• Location Data — collected during check-in and check-out to verify attendance at designated work sites (geofencing). Location is only captured at the moment of punch-in/punch-out and is not continuously tracked.
• Attendance Records — check-in/check-out times, leave requests, and overtime data.
• Photos (Selfie Punch) — a selfie photo may be captured at the time of attendance punch to verify identity. Photos are stored securely and used solely for attendance verification.
• Employment Information — name, email, employee code, department, designation, and related HR data as provided by your employer.
• Financial Information — bank account details and PAN/Aadhaar numbers for payroll processing, as provided by your employer.

2. How We Use Your Data

Your data is used exclusively for:

• Employee attendance tracking and leave management.
• Payroll processing and statutory compliance (PF, ESI, Professional Tax).
• Generating attendance and overtime reports for your employer.
• Authenticating your identity via OTP login.
• Verifying your physical presence at work sites via geofencing.

3. Data Retention

• Your data is retained for as long as your organization's subscription is active.
• On account deletion (via the app's "Delete Account" feature), all personally identifiable information (PII) is anonymized and soft-deleted within 24 hours.
• Attendance and payroll records may be retained in anonymized form for statutory compliance for up to 8 years, as required by Indian labour law.

4. Third-Party Services

We use the following third-party services to operate:

• Razorpay — for processing subscription payments. Razorpay's privacy policy applies to payment data.
• Amazon Web Services (AWS) — for hosting our servers and database in the Asia Pacific (Mumbai) region.

We do not sell, rent, or share your personal data with advertisers or any other third parties.

5. Data Security

We protect your data using:

• HTTPS/TLS encryption for all data in transit.
• Encrypted database storage (AES-256 at rest via AWS).
• JWT-based authentication with token blacklisting.
• Role-based access control — employees can only view their own data.

6. Your Rights

You have the right to:

• Access your personal data through the app.
• Request deletion of your account and associated data.
• Withdraw consent for location tracking and push notifications via the app settings.

7. Children's Privacy

Our service is intended for use by employees aged 18 and above. We do not knowingly collect data from children under 18.