Privacy Policy

1

Introduction

Craftsman Automation Limited ("Company", "we", "our", or "us") operates the Craftsman Connect mobile application ("Application"). The Application is designed for enterprise use and assists organizations in managing employee-related activities such as attendance tracking, leave management, on-duty requests, and identity verification.

This Privacy Policy explains how we collect, process, use, store, and protect personal and device information when users access or use the Application.

By accessing or using the Application, users acknowledge that they have read, understood, and agreed to the collection and processing of information in accordance with this Privacy Policy and applicable data protection laws.

This Privacy Policy applies specifically to the Craftsman Connect mobile application and supplements the general privacy practices of Craftsman Automation Limited.

2

Information We Collect

To provide HR management and employee verification services, the Application may collect the following categories of information.

2.1 Personal Information

The Application may collect employee-related information including but not limited to:

  • Employee Name
  • Employee ID
  • Email Address
  • Department or Designation
  • Attendance Records
  • Leave and On-Duty Request Details

Such information may be provided directly by the organization (employer) or entered by the employee while using the Application.

2.2 Authentication Information

The Application may collect and process authentication-related information including employee code, date of birth (DOB) verification details, and one-time passwords (OTP) generated or received during the login or verification process. Such information is used solely for secure authentication, identity verification, and prevention of unauthorized access to the Application.

2.3 Biometric / Face Authentication Data

  • The Application may use face authentication technology for secure employee verification.
  • Facial data may be captured using the device camera during attendance check-in or check-out.
  • This data is used solely for identity verification and authentication purposes.
  • Facial data is not used for marketing, profiling, advertising, or commercial resale.
  • Biometric information is processed and stored securely in accordance with applicable security practices and organizational policies.
  • Where required by law, biometric data processing will occur only with explicit consent or authorization from the user's employer or the user.
  • Camera access is used strictly at the time of face registration or face-based login for identity verification purposes and is not used for background recording, surveillance, or any purpose unrelated to authentication.

2.4 Device Information

To improve functionality and maintain system security, we may collect limited device-related information such as:

  • Device model
  • Operating system version
  • Application version
  • Device identifiers
  • Network information

This information helps us ensure compatibility, improve performance, and diagnose technical issues.

2.5 Application Diagnostics and Usage Data

The Application may collect diagnostic and usage information such as application performance data, crash logs, error reports, and system activity to identify issues, improve functionality, ensure security, and enhance user experience. Such data does not include the content of communications or personal files stored on the device.

2.6 Log Data

When users access the Application, certain information may be automatically recorded including:

  • Internet Protocol (IP) address
  • Date and time of access
  • Device and application activity logs
  • Application crash reports
  • System diagnostics and performance data

Log data is collected for security monitoring, debugging, and system optimization.

3

How We Use the Information

The information collected is used strictly for legitimate business purposes including:

  • Employee identity verification
  • Attendance check-in and check-out processing
  • Leave and On-Duty request management
  • Generating attendance and HR reports
  • Maintaining operational records
  • Improving application performance and reliability
  • Providing technical support and troubleshooting
  • Detecting and preventing fraud, misuse, or unauthorized access
  • We do not sell, rent, or trade personal data to third parties.
4

Location Information

The Application may collect location data at the time of attendance check-in or check-out for the limited purpose of verifying workplace presence or authorized work locations. Location information is collected only during attendance actions and is not tracked continuously or used for monitoring employee movement beyond attendance verification.

5

Data Sharing and Disclosure

We may disclose information only in the following circumstances:

  • To the user's employer or organization for HR management and workforce administration.
  • To authorized service providers who assist in operating, maintaining, or securing the Application (such as cloud infrastructure or authentication providers).
  • To comply with legal obligations, court orders, regulatory requirements, or lawful government requests.
  • To protect legal rights, safety, or property of the Company, users, or other parties.
  • All third-party service providers are contractually required to maintain confidentiality, security, and restricted usage of the data.

Access to personal data within Craftsman Automation Limited is restricted to authorized personnel on a need-to-know basis for HR administration, IT support, compliance, and security operations. Internal access is governed by confidentiality obligations and internal data protection policies.

6

Data Protection and Privacy Assurance (DPPA Compliance)

Craftsman Automation Limited is committed to maintaining strong data protection and privacy safeguards. In accordance with applicable data protection regulations and internal compliance standards:

  • Personal data will be collected only for specified, explicit, and legitimate purposes.
  • Data collection will follow the principle of data minimization, ensuring only necessary information is processed.
  • Sensitive data, including biometric information, will be protected using appropriate technical and organizational safeguards.
  • Access to personal data is restricted to authorized personnel only.
  • Data processing activities are conducted in compliance with applicable data protection laws and corporate security policies.
  • Unauthorized access, misuse, or disclosure of personal information is strictly prohibited.
7

Data Security

We implement industry-standard security measures designed to protect personal information, including:

🔒
Secure Server Infrastructure
🔐
Encrypted Data Transmission
🛡
Role-Based Access Control
📊
Security Monitoring & Logging
🔍
Periodic Audits & Assessments
Despite these safeguards, no electronic system or internet-based service can be guaranteed to be completely secure. Users acknowledge that data transmission over the internet carries inherent risks.
8

Data Retention

Personal data will be retained only for as long as necessary to:

  • Provide HR and workforce management services
  • Comply with contractual, organizational, or legal obligations
  • Maintain operational and audit records

Organizations using the Application may request modification, correction, or deletion of employee data in accordance with their internal policies and applicable regulations.

9

User Rights

Subject to applicable laws and organizational policies, users may have the right to:

  • Request access to their personal information
  • Request correction of inaccurate or incomplete data
  • Request deletion or restriction of personal data processing
  • Withdraw consent where processing is based on consent

Requests should generally be directed through the user's employer or HR department. Users may also contact the Company directly.

10

Third-Party Services

The Application may integrate with trusted third-party service providers including:

  • Cloud hosting providers
  • Authentication and identity verification services
  • Analytics and crash reporting tools

Such services operate under their own privacy policies, and we recommend reviewing their policies where applicable.

11

Children's Privacy

The Application is designed exclusively for enterprise employee use and is not intended for individuals under the age of 13.

We do not knowingly collect personal information from children. If such data is inadvertently collected, it will be promptly deleted upon discovery.

12

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of personal data under the Craftsman Connect mobile application, please contact:

✉
Privacy Policy Inquiries

Email: [email protected]

13

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in:

  • Legal or regulatory requirements
  • Technical infrastructure
  • Business or operational practices

Any updates will be posted on the official website or within the Application. Continued use of the Application after such updates constitutes acceptance of the revised policy.

14

Limitation of Liability

While we implement commercially reasonable safeguards to protect user data, the Company shall not be held liable for damages resulting from:

  • Unauthorized access beyond our reasonable control
  • Network failures or external cyber incidents
  • User negligence or misuse of the Application