An HR system holds national ID numbers, salaries and leave records that can imply health information. This page says where that data sits, who can reach it and where it goes.
As a processor acting for a customer company, the personal data in the system is determined and supplied by that customer: employee names and contact details, national ID or resident certificate numbers, hire and termination dates, department and position, clock records and hours worked, leave records and types, salary composition and net pay, insurance bands and tax withheld, and performance review content.
This data is used only to provide the HR functions the customer asked for: computing hours and overtime, deriving leave entitlement, calculating pay and statutory deductions, and producing pay slips and statutory filings. We do not use a customer's employee data for marketing, and we do not sell it or supply it to third parties for commercial purposes.
Within a customer company, access is decided by the roles and permissions that company configures; self-service pages reach only the signed-in person's own records. On our side, access is limited to what operations and customer-requested technical support require. Each company's data lives in its own database schema.
There are three paths out of the system, all triggered by the customer: downloading a statutory filing, generating a pay slip PDF, and the API tokens and webhook endpoints the customer configures. A webhook pushes events to an address the customer nominates — what happens at that address is outside our control.
Customer data is retained for the duration of the service. Export options and deletion timelines after termination are governed by the contract. (Formal terms to be added.)
An employee's rights of access and correction over their own personal data are generally exercised against their employer — the customer company — because the employer is the controller that determined the purpose. If you are an employee of a customer and have a question about your data, please contact your own HR department first. (Formal procedure to be added.)
Questions about this policy go to support@fincosoft.com