Privacy Policy

AIHR BD provides HR, payroll and attendance tools on the web and in its Android and iOS apps. Your employer controls employment records in its workspace; AIHR BD processes those records to provide the service. AIHR BD also handles account security, support and service operations. Contact us at info.aihrbd@gmail.com.

Depending on the features your organisation uses and the information you provide, we collect:

• Account and employee information: name, email, user ID, phone, address, date of birth, gender, identity documents, employment and emergency contact details. Optional profile fields include religion and blood group.
• Financial information: bank or mobile payment account details, salary, payslips, tax, benefits, loans, salary advances, claims and transaction records.
• Attendance, leave, shifts, visits, tasks, requests, comments and other information you or your employer enter.
• Photos and files you upload, including profile photos, attendance selfies, receipts, HR documents and medical certificates where a workflow requires them.
• Approximate or precise location for attendance, geofencing, visits, and optional live tracking.
• Messages sent to the optional AI assistant, including conversation context needed to answer your request.
• Device and browser identifiers, push notification tokens, sign-in records, IP addresses, error logs and diagnostic information for service delivery, security and troubleshooting.
• Where enabled by your employer, workplace safety information and camera-derived mood readings. These are workplace records, not medical diagnoses.

Location verifies attendance or visit locations and supports geofencing. Optional live tracking sends location points to your company's workspace only after you agree to the in-app disclosure and grant location permission. Your employer's authorised users can view those points. Live tracking operates while the employee home is visible and the app is active; it stops when you leave that screen, background the app, sign out or turn tracking off. It does not use Android background-location access.

Camera access is used when you choose to scan a QR code or take a photo. The system picker lets you select individual photos or documents; the app does not need broad access to your photo library. Storage is used for user-selected files and downloads. Notifications and reminders require the relevant device permissions.

Fingerprint or face unlock for app sign-in is handled by the operating system. AIHR BD does not receive those biometric templates. Uploaded attendance photos and records from employer-configured attendance devices are separate from device sign-in biometrics.

We use data to authenticate and manage accounts, provide HR and payroll features, verify attendance, process requests, send service notifications, answer assistant questions, maintain audit records, prevent abuse, diagnose errors and improve the service. Required account details are needed to sign in. Additional data depends on the feature you use and your employer's policies. We do not sell your personal data.

Authorised people in your organisation access workforce records according to their roles. We use Lovable Cloud/Supabase for hosting, authentication, database and file storage, Firebase Cloud Messaging for opted-in mobile push notifications, and service providers for email, security and infrastructure. AI-assistant messages are sent through Lovable's AI gateway to its configured model provider to generate a reply. Do not send passwords or information you are not authorised to share.

Your employer may connect attendance devices, payment providers or other integrations. Information needed for a requested action may be sent to that provider. Providers may process data outside Bangladesh. We may disclose information where required by law. We do not claim that data remains only on your device.

The public marketing website uses Google Analytics, Microsoft Clarity and Ahrefs analytics to understand visits and website interactions. These providers may receive IP-derived approximate location, browser identifiers and usage events. Marketing analytics and session recording are disabled in the native app. On the web, analytics can operate during website navigation, including workspace pages; do not enter sensitive information into public marketing forms. Service security and diagnostic logs remain in use. Device advertising IDs are not used by the native app, and the app does not display third-party ads.

App connections use HTTPS. Database row-level security and role-based access separate company workspaces. Only authorised users should access workplace records. Device permissions can be changed in your device settings. No storage or transmission system can guarantee absolute security.

Workforce data is kept while needed to provide the service and meet your employer's lawful employment, payroll, tax and recordkeeping obligations. Retention can differ by record type and employer. After a verified deletion request, account data and associated personal data are reviewed for deletion; legally required records may be retained with restricted access. Backup copies are removed under the hosting provider's backup retention cycle. We explain applicable exceptions and the expected completion date when processing a request rather than promising an unverified fixed backup or legal retention period.

Request access, correction, account deletion or deletion of particular personal data at info.aihrbd@gmail.com. Send the request from your registered email and include your company name. Do not include your password. We verify identity and coordinate with your employer where necessary.

In the app, open Settings → Account or My Profile → Privacy & account deletion. You can also follow the public account and data deletion instructions without installing or signing in to the app. Optional live tracking can be stopped from the employee home; you may also revoke device permissions.