Depending on how the Application is used and the features enabled by your organization, we may collect the following categories of information.

Personal Information

When you use the Application, we may collect information associated with your account, including:

• Name
• Email address
• Username or employee identifier
• Information associated with your organization or workplace
• Attendance and work-related records submitted through the Application

Location Information

The Application may collect your device's location information, including precise location obtained through GPS, when location-based attendance features are used or when required by your organization.

Location information may be used to:

• Verify your attendance location
• Determine whether an attendance action is performed within an authorized location
• Prevent fraudulent or unauthorized attendance submissions
• Provide location-based attendance functionality

Location information is collected only when required for the relevant Application functionality or enabled by your organization.

Device and Technical Information

The Application may automatically collect certain technical information about the device used to access the Application, such as:

• IP address
• Device type and model
• Operating system and version
• Application version
• Device identifiers where required for Application functionality
• Network and connectivity information
• Application logs and diagnostic information
• Date and time of Application activity

We may use the information collected through the Application for the following purposes:

• To provide and operate the Gass Attendance service
• To authenticate users and manage accounts
• To record and manage attendance
• To verify attendance location where applicable
• To provide attendance and workforce management functionality
• To maintain and improve the Application
• To troubleshoot technical problems
• To detect, prevent, and investigate fraud or unauthorized activity
• To maintain the security of the Application and our services
• To communicate important service-related information
• To comply with applicable legal obligations

Gass Attendance is designed to support employee attendance management. Where enabled, attendance records may include information such as the date and time of an attendance event, attendance status, and location information associated with the event.

Location data is used primarily to verify that an attendance event occurs at an authorized location or within an authorized area.

Attendance and location records may be accessible to authorized administrators or personnel of the organization that uses Gass Attendance for workforce management purposes.

We do not sell your personal information.

We may disclose or provide access to information to the following categories of recipients when necessary to operate the Application:

• Your employer or organization and its authorized administrators, where the Application is provided to you through an organization.
• Service providers that provide hosting, infrastructure, authentication, database, monitoring, security, or other technical services on our behalf.
• Government authorities, regulators, courts, or other parties when disclosure is required by applicable law or legal process.
• Other parties where reasonably necessary to protect our rights, property, security, users, or the public.

Service providers acting on our behalf are expected to process information only as necessary to provide their contracted services and to apply appropriate security measures.

The Application may rely on third-party infrastructure or service providers to provide certain functionality, including hosting, authentication, database services, security, diagnostics, or other technical services.

These third parties may process information on our behalf as necessary to provide their services. We do not authorize third-party service providers to independently use your personal information for purposes unrelated to the services they provide to us, except where otherwise permitted or required by law.

The Application itself does not require traditional browser cookies. However, the Application or its supporting services may use technical mechanisms such as SDKs, logs, identifiers, or similar technologies where necessary to provide functionality, security, diagnostics, or service improvement.

We do not use tracking technologies for purposes unrelated to the operation of the Application unless disclosed to you and permitted under applicable law.

We retain personal information only for as long as reasonably necessary to provide the Application, fulfill the purposes described in this Privacy Policy, resolve disputes, maintain security, comply with contractual or legal obligations, and enforce our agreements.

Retention periods may vary depending on the type of information and the requirements of the organization using Gass Attendance.

When personal information is no longer required, we may delete, anonymize, or securely dispose of it, subject to applicable legal, contractual, or legitimate business requirements.

You may request deletion of personal information associated with your account by contacting us at info@gass.id.

If your Gass Attendance account is managed by an employer or other organization, certain account information and attendance records may be controlled by that organization. In such cases, we may need to coordinate the deletion request with the relevant organization.

We may retain certain information where retention is necessary to comply with legal obligations, resolve disputes, prevent fraud, maintain security, or fulfill legitimate business or contractual requirements.

Depending on applicable law, you may have rights regarding your personal information, including the right to:

• Request access to your personal information
• Request correction of inaccurate information
• Request deletion of your personal information
• Request information about how your personal information is processed
• Withdraw consent where processing is based on consent
• Object to or restrict certain processing where permitted by law

To exercise your rights, please contact us at info@gass.id.

Depending on the infrastructure and service providers used to operate the Application, your information may be processed or stored in a country other than your country of residence.

Where applicable law requires safeguards for international data transfers, we will take reasonable steps to use appropriate and legally recognized safeguards.

We take reasonable technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, loss, or destruction.

However, no method of electronic transmission or storage can be guaranteed to be completely secure. Therefore, while we strive to protect your personal information, we cannot guarantee absolute security.

If we become aware of a security incident or data breach that affects your personal information, we will take reasonable steps to investigate, contain, and remediate the incident.

Where notification is required by applicable law, we will notify affected users, organizations, or relevant authorities in accordance with the applicable requirements.

Gass Attendance is intended for use in an employment or organizational context and is not directed toward children.

We do not knowingly collect personal information from children for purposes unrelated to the legitimate use of the Application. If you believe that a child has provided personal information to us without appropriate authorization, please contact us at info@gass.id.

We may send communications that are necessary for the operation of the Application, such as account-related notifications, security notices, service announcements, and other important information.

We will not use your personal information for unrelated marketing communications unless permitted by applicable law and, where required, with your consent.

We may update this Privacy Policy from time to time to reflect changes to the Application, our practices, applicable laws, or other operational requirements.

When we make changes, we will update the effective date displayed at the top of this Privacy Policy. Where required by applicable law, we will provide additional notice or obtain consent before material changes take effect.