Images:

• Faceviz collects and stores images captured by Users through the mobile app. These images contain facial features and unique identifiers and are considered personal data.

• The Organisation’s secure server infrastructure, which houses the Faceviz database, exclusively stores these images.

• Access to the stored images is strictly limited to authorized personnel within the User’s Organisation who are responsible for attendance management.

• The collection of images is solely for the purpose of attendance management and ensuring accurate identification of Users.

• The images are retained for as long as necessary to fulfill the intended purposes, ensuring compliance with legal obligations and the Organization’s policies.

Location Data:

• In addition to images, Faceviz also collects and retains location data of Users.

• The collection of location data is aimed at enhancing the functionality of Faceviz and ensuring accurate tracking of Users’ attendance.

• The Organization takes utmost care to comply with all applicable laws and regulations governing the collection, use, and storage of location data.

• For instance, in accordance with Rule 3(h) of the Intermediary Rules and the IT RSP Rules in India, the storage and protection of location data are carried out in a secure manner.

• Access to the stored location data is restricted solely to authorized personnel within the User’s Organization, who require access to perform attendance management duties.

• The location data is retained for as long as necessary to fulfill the purposes for which it was collected, taking into account the Organization’s policies and legal requirements.

Data Retention:

• The personal data collected by Faceviz, including images and location data for geofencing, geo-verification, and geotracking purposes, is retained for as long as necessary to fulfill the intended purposes, primarily related to attendance management.

• The collection of data is solely under the permission of user or the organisation or both

User Consent and Organization Authorization:

• Users explicitly provide their consent for the collection and use of personal data, including images and location data, when utilizing the Faceviz application.

• The Organization, as the responsible entity, authorizes and controls the collection, access, and use of personal data within the scope of its subscription to Faceviz.

• Access to collected personal data, including images and location data, is strictly limited to authorized personnel within the Organization who require such information for attendance management purposes.

User Rights:

• Users have the right to view, rectify, or delete their personal data collected through Faceviz. They can exercise these rights by contacting their Organization’s designated privacy contact. The Organization will provide information about the personal data collected, the purposes of processing, and any third parties to whom the data has been disclosed.

• Users may request the correction or update of their personal data if they believe it to be inaccurate, incomplete, or outdated. The Organization will promptly review and rectify any verified inaccuracies in the data.

• Users have the right to request the deletion of their personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected or if the processing is based on their consent and they withdraw that consent. The Organization will comply with such deletion requests unless there are legal obligations or legitimate interests that require the retention of the data.

• Users may have the right to restrict or object to the processing of their personal data in specific situations, such as when they contest the accuracy of the data or believe the processing to be unlawful. The Organization will review and assess such requests and will cease processing the data unless there are compelling legitimate grounds for continuing the processing.

• Users have the right to data portability, which allows them to receive their personal data in a structured, commonly used, and machine-readable format. This right applies to personal data that is processed based on their consent or for the performance of a contract.

Organization Rights:

• The Organization has the right to continue, stop, extend, upgrade, or transfer the subscription plan for the Faceviz application. These decisions are made based on the organization’s operational requirements and business needs.

• The Organization has the right to elevate or de-elevate the user category at any time. This may involve granting additional privileges or restricting certain functionalities based on the user’s role, responsibilities, or changes within the organization.

• The Organization has the right to add, delete, or temporarily hold any users within the Faceviz application. This allows the organization to manage user accounts effectively, ensuring that only authorized individuals have access to the application.

• The Organization has the right to view, edit, or delete users’ data within the Faceviz application. This access is necessary for the organization to fulfill its administrative and attendance management responsibilities, ensuring data accuracy and adherence to organizational policies.

• The Organization has the right to file a complaint and take necessary action against a user in the event of any misuse of the Faceviz application for illegal or unauthorized purposes. This includes actions to protect the security and integrity of the application and its data, as well as to enforce compliance with applicable laws and regulations.

• The Organization may use aggregated and anonymized data derived from the Faceviz application for analytical purposes, internal reporting, or improving the overall functionality of the application. However, such data will not personally identify individual users.

• The Organization may disclose personal data, including images and location data, to third parties if required by law or if authorized by the user or relevant legal authorities.

• The Organization may transfer the responsibility of managing the Faceviz application, including data storage and processing, to a trusted third-party service provider. In such cases, the Organization will ensure that appropriate data protection measures are in place to safeguard personal data.

• The Organization will make reasonable efforts to ensure that all actions taken with regard to the Faceviz application and user data are in compliance with applicable laws and regulations, as well as in alignment with the principles of privacy and data protection.

Data Security and Confidentiality:

• Faceviz employs industry-standard security measures to protect personal data against unauthorized access, disclosure, alteration, or destruction.

• The Organization is responsible for maintaining the security and confidentiality of personal data collected through Faceviz, including implementing appropriate access controls and data protection measures.
• Faceviz complies with applicable data protection laws and regulations to ensure the proper handling and processing of personal data.

• Faceviz does not disclose personal data, including images and location data, to any third parties unless required by law or authorized by the Organization.

• Personal data collected through Faceviz is not sold, rented, or shared with external parties for marketing or commercial purposes.

Updates to the Privacy Policy:

• This Privacy Policy may be revised periodically to reflect changes in technology, legal requirements, and business practices.

• Users and the Organization will be notified of any significant updates to the Privacy Policy through email or other appropriate means.

• By continuing to use the Faceviz application, Users and the Organization indicate their acceptance of the Privacy Policy and any subsequent revisions.

• It is recommended that Users and the Organization review this Privacy Policy regularly to stay informed about the collection, use, and retention of personal data by Faceviz.