This policy explains what data IT-Stuff Attendance (attendance.it-stuff.in) collects and how it is used. It is written to align with India's Digital Personal Data Protection Act, 2023.
| Data | Why |
|---|---|
| Organization details (name, address, admin email, phone, logo) | Account creation, billing, branding your attendance pages |
| Employee name, ID, phone, class/department (entered by the organization's admin) | Identifying who marked attendance and sharing their personal link |
| GPS coordinates at the moment of marking | Verifying the person is inside the allowed premises — location is captured only when the person taps to mark, never tracked continuously |
| Device fingerprint (a browser identifier, not device contents) | Preventing attendance links from being shared between people |
| Optional check-in photo (when photo attendance is used) | Manual verification by the organization's admin |
| Payment details (order ID, plan, amount) | Subscription management — card/UPI details are handled entirely by Cashfree and never touch our servers |
Each organization's data is isolated: only that organization's admin can see its employees and attendance. Employees see only their own status. We (the operator) access data only for support and maintenance.
Data is stored on servers in a managed hosting environment, transmitted over HTTPS, with passwords stored as one-way hashes and payment webhooks cryptographically verified.
Data is retained while the organization's account is active. Organizations can delete employees (and their links) at any time from the admin panel. On account termination, data is deleted after a 30-day export window. Employees who want their data corrected or removed should contact their organization's admin, who controls that data; we assist on request.
We use browser local storage only to keep you signed in and remember settings. No third-party advertising or analytics cookies.
For any privacy question or complaint: IT-Stuff, India — billing@it-stuff.in. We respond within 30 days.