1. Information We Collect

Employee and Account Information

The app may process information associated with an employee or authorized user, including:

• Name
• Employee ID or employee code
• Email address
• Phone number, where applicable
• Designation
• Department
• Role
• Reporting manager
• Assigned shift
• Assigned office or project/site
• Account status
• Work-related profile information

Employee accounts are created and managed by authorized Rayzon Global LLP administrators; users cannot independently create accounts.

Attendance and Location Information

The Rayzon app uses device location for attendance and certain work-related activities.

Location may be requested when a user intentionally performs an action such as:

• Check-in or attendance punch
• Check-out
• Site attendance punch
• Field attendance punch
• Sales visit or meeting punch
• Other location-dependent work actions

When such an action is performed, the app may record:

• Latitude and longitude
• Location/GPS accuracy
• Date and time
• Attendance or visit information
• Assigned office, site, or project
• Device identifier used for app/device verification

For office attendance, location may be used to determine whether the employee is within the permitted attendance area or geofence.

For field, site, and sales activities, the location associated with the user-initiated punch or visit may be stored as part of the work record.

Location information is used for workforce and attendance-related purposes and is not used for advertising.

Leave and Attendance Regularization

When employees use leave or attendance regularization features, we may process:

• Leave dates
• Leave type
• Reason or comments
• Regularization requests
• Approval status
• Reviewer comments
• Approval or rejection details
• Date and time of the request or decision

Expenses, Advances and Reimbursements

When employees submit work or project expenses, the app may collect:

• Expense category
• Expense amount
• Expense date
• Description or remarks
• Project or site details
• Payment source or payment type
• Receipt or invoice images
• Approval information
• Advance amounts
• Reimbursement information
• Settlement information

Uploaded receipt or invoice files may be stored using Rayzon Global LLP's configured file or object-storage infrastructure.

Device and Security Information

To operate and secure the application, we may process information such as:

• Device identifier
• Device binding information
• Login activity
• Authentication information
• IP address
• Browser or app user agent
• Date and time of access
• Security and audit events
• Administrative actions
• Application errors and technical logs where applicable

Passwords are not stored in plain text by the application backend. Authentication credentials are protected using appropriate password-hashing mechanisms.

Information Stored on the Device

The app may temporarily store information on the user's device that is required for normal application operation, including:

• Authentication/session token
• Basic user profile information
• Device identifier
• Application configuration
• Selected API/server information
• Recent attendance state
• Other temporary application data

Such information may be removed when the user signs out, clears application data, or uninstalls the application, depending on the type of data and device operating system.

Server-side employment and business records are not automatically deleted when the application is uninstalled.

2. How We Use Information

Information collected or processed through the Rayzon app may be used to:

• Authenticate employees and authorized users
• Protect accounts against unauthorized access
• Bind authorized employee accounts to permitted devices
• Record employee attendance
• Validate office attendance against permitted locations
• Record site, field, and sales visits
• Maintain attendance history
• Manage employee leave and attendance regularization
• Assign employees to offices, projects, and sites
• Process work and site expenses
• Manage employee advances and reimbursements
• Review and approve expense submissions
• Maintain supporting receipt and invoice records
• Generate attendance, expense, project, and management reports
• Send work-related in-app notifications
• Maintain security and audit records
• Detect misuse, unauthorized access, or fraudulent activity
• Investigate technical or operational errors
• Meet applicable employment, accounting, audit, tax, regulatory, and legal requirements

We do not use employee precise location information for advertising.

3. Location Permission

Location access is an important part of certain Rayzon app functions.

When the user selects a feature that requires location, such as making an attendance punch or recording a site or sales visit, the application may request location permission from the device.

Users may deny or disable location permission through their device settings. However, features requiring location verification may not function without this permission.

The application is designed to request location only when required for the relevant feature.

The Android application does not require continuous background location tracking for normal attendance operations.

4. How Information Is Shared

Rayzon Global LLP does not make employee information publicly available through the app.

Information may be accessible internally to authorized personnel based on their job responsibilities and system permissions. This may include authorized:

• Administrators
• HR personnel
• Project managers or project heads
• Reporting managers
• Finance or accounts personnel
• Sales management personnel
• Other employees specifically authorized to perform administrative or operational functions

Access is intended to be limited according to the employee's role and the information necessary for their work.

For example, authorized personnel may need access to attendance, punch location, leave, project assignment, expense, approval, or audit information in order to perform their duties.

5. Service Providers

Rayzon Global LLP may use third-party infrastructure and service providers to operate the application. Depending on the production configuration, these may include providers used for:

• Server hosting
• Database hosting
• Object/file storage
• Backups
• Email delivery
• Map services
• Application infrastructure
• Security and monitoring

Where configured, Cloudflare R2 may be used to store files such as expense receipts and supporting documents.

Map functionality may use map data or tiles provided by OpenStreetMap or related map infrastructure. When map resources are requested, technical information such as the device's IP address and the requested map area may be transmitted to the map service as part of normal internet communication.

These providers may process limited information necessary to provide their respective services.

Rayzon Global LLP does not authorize service providers to use employee information for their own advertising purposes solely because it is processed through the Rayzon application.

6. Data Retention

Rayzon Global LLP retains employee and application records only for as long as reasonably necessary for the purposes for which the information was collected and for applicable operational, employment, accounting, taxation, audit, security, contractual, and legal requirements.

Different types of information may have different retention periods. Records may include:

• Employee profile records
• Attendance records
• Attendance location records
• Site and field visit records
• Leave records
• Expense records
• Advances and reimbursement records
• Receipts and invoices
• Security and audit logs
• Approval history

When employment or authorized access ends, the user's application access may be disabled while relevant historical employment or business records may continue to be retained where necessary for legitimate business, accounting, audit, dispute-resolution, or legal purposes.

Data that is no longer required will be deleted, anonymized, or otherwise handled in accordance with Rayzon Global LLP's applicable data-retention practices and legal requirements.

Backup copies may remain for a limited period as part of routine backup and disaster-recovery processes.

7. Access, Correction and Deletion Requests

Employees may contact Rayzon Global LLP if they believe information associated with their account is incorrect or if they wish to request access, correction, or deletion of eligible personal information.

Certain information may not be deleted immediately where it is necessary to maintain:

• Attendance or employment records
• Financial or accounting records
• Expense and reimbursement records
• Statutory records
• Security and fraud-prevention records
• Audit records
• Records required for legal claims or compliance obligations

Requests will be reviewed in accordance with applicable law and Rayzon Global LLP's employment and record-retention requirements.

Privacy requests can be submitted using the contact information provided in the Contact Us section below.

8. Security

Rayzon Global LLP uses reasonable administrative, technical, and organizational safeguards intended to protect information processed through the application. Measures may include:

• Password hashing
• Authentication controls
• Role-based access controls
• Device binding
• Restricted administrative access
• HTTPS-encrypted communication
• Server and database access controls
• Audit logging
• Backup and recovery procedures
• Infrastructure security controls

However, no electronic storage or internet transmission method can be guaranteed to be completely secure.

Users are responsible for protecting their login credentials and should immediately report suspected unauthorized access to Rayzon Global LLP.

9. Employee Monitoring

The Rayzon app is a workforce management application.

Attendance, site visits, sales visits, expenses, leave activity, device information, and related records submitted through the app may be accessible to authorized Rayzon Global LLP personnel for legitimate workforce, operational, financial, compliance, and security purposes.

The application is not intended to provide continuous background surveillance of employees.

10. Children's Privacy

The Rayzon application is intended for authorized employees and workforce users and is not intended for children.

Rayzon Global LLP does not knowingly provide this application for independent use by children for consumer purposes.

11. Advertising

The Rayzon app is an internal/workforce application.

Employee personal information and precise location collected through the application are not used for targeted advertising.

12. Sale of Personal Information

Rayzon Global LLP does not sell employee personal information collected through the Rayzon application.

13. Changes to This Privacy Policy

Rayzon Global LLP may update this Privacy Policy when application functionality, operational practices, service providers, or applicable requirements change.

When material changes are made, the updated Privacy Policy will be made available through the applicable public privacy-policy webpage and the effective or last-updated date above will be revised.

Where appropriate, users may also be informed of significant changes through the application or internal company communication.

14. Contact Us

For questions about this Privacy Policy, personal information processed through the Rayzon app, or requests relating to access, correction, or deletion, contact: