Privacy Policy

Effective Date: 3 October 2026

GILI (Udyam: UDYAM-TN-02-0460437) ("we", "us", "our") operates the Seyal mobile application and web service. This Privacy Policy explains how we collect, use, and protect your personal information.

1. Information We Collect

We collect the following data when you use our service:

• Phone Number — used for account authentication via OTP (one-time password).
• Location at Punch — collected during check-in and check-out to verify attendance at designated work sites and client sites (geofencing).
• Live Location While Punched In — where your employer has turned on live tracking, your location is recorded at an interval your employer chooses (every 5 to 60 minutes) while you are punched in for work. Nothing is recorded while you are punched out. For field staff, travel between client visits is also recorded; it is deleted if you do not punch in again that day. See section 5b.
• Attendance Records — check-in/check-out times, client site visits, leave requests, and overtime data.
• Photos (Selfie Punch) — a selfie photo is captured at the time of attendance punch. It is stored securely and forms part of your attendance record. Where your employer has enabled face verification, this photo is also compared against your reference photo — see section 5a.
• Face Reference Photos — where your employer has enabled face verification, up to three reference photographs of you are stored. These are either uploaded by your manager or captured from your first attendance selfie. They are used only to verify that a punch selfie is you.
• Face Comparison Results — where face verification is enabled, each punch produces a similarity score and a result. These are stored against the attendance record and are visible to your manager.
• Device Identifier — the app generates a random identifier on first use and stores it against your account. This happens for everyone, whether or not your employer has enabled device binding. This identifier contains no information about your device, its hardware, or you. Where your employer has enabled device binding, it is used to confirm that a punch comes from the phone registered to your account. It is not used for any other purpose.
• Email Address — used to send your one-time login code where your phone number is registered outside India, to send reports your employer has scheduled, and for HR records as provided by your employer.
• Employment Information — name, email, employee code, department, designation, and related HR data as provided by your employer.
• Financial Information — salary details, bank account details and PAN/Aadhaar numbers for payroll processing, as provided by your employer.

2. How We Use Your Data

Your data is used exclusively for:

• Employee attendance tracking and leave management.
• Payroll processing and statutory compliance (PF, ESI, Professional Tax).
• Generating attendance, leave and overtime reports for your employer, including reports your employer schedules by email.
• Authenticating your identity via OTP login.
• Verifying your physical presence at work sites and client sites via geofencing.
• Showing your employer where field staff are during working hours, where your employer has turned on live tracking.
• Verifying that an attendance punch was made by you, where your employer has enabled face verification.
• Confirming that a punch comes from the phone registered to your account, where your employer has enabled device binding.
• Sending notifications about leave requests, approvals, attendance corrections and subscription status.

3. Data Retention

• Your data is retained for as long as your organization's subscription is active.
• Attendance selfies may be deleted automatically after a retention period set by your employer, typically 30 or 90 days. Your attendance record itself — the date, times and status — is kept.
• Live location history recorded while you are punched in is deleted automatically after 90 days. Travel recorded between client visits is deleted the same day if you do not punch in again that day.
• Face reference photos are deleted within seven days of you withdrawing your consent to face verification. Face comparison stops immediately on withdrawal, not when the deletion occurs. If you re-enrol within those seven days, the deletion is cancelled.
• On account deletion (via the app's "Delete Account" feature), all personally identifiable information (PII) is anonymized and soft-deleted within 24 hours.
• Attendance and payroll records may be retained in anonymized form for statutory compliance for up to 8 years, as required by Indian labour law.

4. Third-Party Services

We use the following third-party services to operate:

• Amazon Web Services (AWS) — for hosting our servers, database and file storage in the Asia Pacific (Mumbai) region.
• AWS Rekognition — for face comparison, where your employer has enabled it. Images are processed in the Asia Pacific (Mumbai) region. AWS does not retain them and does not use them to train its models.
• Brevo — for delivering emails, including one-time login codes and reports your employer has scheduled.
• 2Factor.in — for delivering one-time login codes by SMS to Indian phone numbers.
• Google Firebase — for push notifications, crash reporting and usage analytics. Analytics data is aggregated and is not used to identify you.
• Razorpay — for processing subscription payments and, where your employer uses it, salary payouts. Razorpay's privacy policy applies to payment data.

We do not sell, rent, or share your personal data with advertisers or any other third parties.

5. Data Security

We protect your data using:

• HTTPS/TLS encryption for all data in transit.
• Encrypted database storage (AES-256 at rest via AWS).
• Signing out ends your session on our servers, not just on your device. If your access is removed, you cannot sign in again and any session already open stops working within minutes.
• Access controls that limit who can see your records — you see your own, your manager sees the people who report to them directly or indirectly, and the owner of your organisation sees the whole organisation. No one else in your organisation can see your records, whatever their job title.

5a. Face Verification and Biometric Data

Some employers choose to enable face verification. When it is on, the selfie you take at each punch is compared against a reference photograph of you, to confirm the punch was made by you and not by someone else.

When your employer turns it on, it is a condition of punching in. Face verification is off unless your employer turns it on. When it is on, the app asks for your agreement before your first punch, and no comparison happens until you have agreed. If you do not agree, you cannot punch in through the app while it is on; please speak to your employer.

What we store

• Up to three reference photographs of you, either uploaded by your manager or captured from your first selfie.
• For each punch, a similarity score and a result.

How it is processed

• Comparison is performed by AWS Rekognition, in the Asia Pacific (Mumbai) region.
• AWS does not retain the images sent for comparison and does not use them to train its models.
• We do not use your photographs for any purpose other than verifying your attendance punches.
• We do not share them with any other organization.

If a comparison fails

A failed comparison never blocks your punch. Your attendance is recorded normally and the result is flagged for your manager to review. Lighting, a changed appearance, or a poorly framed photo can all cause a failed comparison — it does not mean you have done anything wrong.

Withdrawing your consent

• You can withdraw your consent at any time from within the app.
• Face comparison stops immediately.
• Your reference photographs are deleted within seven days.
• While your employer keeps face verification on, withdrawing means you cannot punch in through the app.
• Your attendance records are not affected.

5b. Live Location Tracking

Some employers choose to see where their staff are during working hours, typically for field staff who travel between sites. Live tracking is off unless your employer turns it on.

When your employer turns it on, it is a condition of punching in. The app explains it and asks for your agreement before your first punch. If you do not agree, you cannot punch in through the app while it is on; please speak to your employer.

What is recorded

• Your location, at an interval your employer chooses (every 5 to 60 minutes), only while you are punched in.
• Nothing is recorded while you are punched out.
• For field staff, travel between client visits is also recorded. It is deleted if you do not punch in again that day.
• While tracking is running, your phone shows an ongoing notification, so you always know it is on.

Who can see it

The same people who can see your attendance records — see section 5. No one outside your organisation sees it, and we never sell or share it.

5c. Device Binding

Some employers choose to require that you punch in and out from a single registered phone. The app generates a random identifier the first time you use it and stores it against your account. This happens for everyone, whether or not your employer has turned that requirement on — what the setting changes is whether the identifier is checked when you punch.

This identifier is a random string. It contains no information about your phone, its hardware, or you, and it cannot be used to identify your device outside our service. Where the requirement is on, it is used to confirm that a punch comes from the phone registered to your account. It is not used for any other purpose.

If you change phones or reinstall the app, your manager can clear the registration so that your new phone can be registered instead.

6. Your Rights

You have the right to:

• Access your personal data through the app.
• Request deletion of your account and associated data.
• Withdraw consent for face verification, live location tracking and push notifications. Where your employer has made face verification or live tracking a condition of punching in, withdrawing means you cannot punch in through the app while that setting is on.

7. Children's Privacy

Our service is intended for use by employees aged 18 and above. We do not knowingly collect data from children under 18.