Privacy Policy

Alba Connect (“Alba Connect”, “we”, “us”, or “our”) is a workforce attendance and employee management platform operated by Alba Groups, used by organizations to manage attendance, leave, employee records, and related workforce operations for their employees. This Privacy Policy explains what information we collect through our website and mobile application, how we use it, and the choices and rights you have with respect to that information.

This Policy applies to employees, administrators, and other users (“you”) of the Alba Connect web application and the Alba Connect mobile application, across every organization that uses the platform.

We collect the following categories of information, either provided directly by you or your employer's administrator, or generated automatically as part of using Alba Connect:

• Name - your full name, as recorded in your employee profile.
• Email address - used for account sign-in and important account notifications.
• Employee ID - a unique identifier assigned by your organization.
• Phone number (if applicable) - where your organization records one for you.
• Profile photo (if uploaded) - used for identification within the platform, such as on your profile and employee ID card.
• GPS location - collected only to verify attendance check-in/check-out and confirm you are at an assigned work site (see Location Permissions below).
• Device information - a device identifier used to recognize your trusted device for attendance verification and to detect unauthorized sign-in attempts.
• Attendance and leave records - check-in/check-out times, shift assignments, leave requests and approvals, and related workforce records.

We use the information described above to:

• Authenticate you and keep your account secure.
• Manage attendance, including verifying check-in/check-out location, PIN, and registered device.
• Manage employee records, such as your profile, role, site, and shift assignments.
• Manage leave, including submission, approval, and rejection of leave requests.
• Maintain security and prevent fraud, including detecting mock/spoofed locations, unauthorized devices, and unusual account activity.
• Improve our services, by understanding how the platform is used and diagnosing issues.

Alba Connect requests precise device location only when needed for attendance-related features - specifically, to confirm that a check-in or check-out is happening at an assigned work site (geofencing) and, where your organization has enabled field-employee location tracking, to record periodic location updates during an active shift.

We do not continuously track your location in the background unless your organization has explicitly enabled location tracking for your role (for example, field employees whose job requires site visits), and even then, location is only collected while you are on an active shift. You can decline or revoke location permission at any time through your device settings, though doing so will prevent you from completing attendance check-in/check-out, since location verification is a required part of that process.

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes.

We share information only with trusted infrastructure providers who process it on our behalf to operate Alba Connect, including our database and backend services provider (Supabase), our cloud hosting providers, and, where applicable, Google Play services used to distribute and run the Android application. These providers are contractually restricted from using your information for any purpose other than providing services to us.

Within your organization, your attendance, leave, and profile information is visible to authorized administrators, HR, and supervisors as configured by your organization, in order to carry out normal workforce management functions.

We may also disclose information where required by law, or to protect the rights, property, or safety of Alba Connect, our users, or others.

We take the security of your information seriously and apply multiple layers of protection, including:

• HTTPS/TLS encryption for all data transmitted between your device and our servers.
• Secure authentication, including password requirements, session management, and device verification.
• Role-based access control, so employees, supervisors, HR, and administrators can only access the information appropriate to their role within their own organization.

While we work hard to protect your information, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain your information for as long as your account remains active with your organization, and for a reasonable period afterward as needed to comply with our legal obligations, resolve disputes, maintain accurate business and attendance records, and enforce our agreements. When your organization removes your account, your personal information is deleted or anonymized in accordance with our data retention practices, except where retention is required by law.

You have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information, subject to any legal or legitimate business retention requirements.
• Withdraw location or other device permissions at any time through your device settings.

Because your Alba Connect account is created and managed by your employer, requests to access, correct, or delete your information are generally handled through your organization's administrator or HR team. You may also contact us directly using the details below and we will coordinate with your organization as needed.

Alba Connect is a business application intended for use by employees of our client organizations and is not directed to, or intended for use by, individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to remove it.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the Effective Date at the top of this page. We encourage you to review this page periodically to stay informed about how we protect your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or how your information is handled, please contact us:

• Alba Groups - Hyderabad, India
• Email: operations@albagroups.in
• Phone: +91 8500008632