Privacy policy

1. Who we are

"Naskon" is a cloud system for companies to manage attendance and payroll. "We" in this policy means Naskon, and "the company" means a company subscribed to the system.

2. The data we keep

• Company data: name, phone number, country, contact person and email.
• User data: name, email, password (encrypted, nobody can read it), role and permissions, and the time and device type of the last sign-in.
• Data the company enters about its employees: personal and job details, attendance and punches, leave, pay, allowances, advances and violations, contracts, and uploaded documents and files.
• Activity log: who did what in the system and when.

3. Punching from the phone

• When an employee punches from their phone, we keep the time, their location at that moment and its distance from their branch, and a photo (selfie) if the company requires it.
• The fingerprint or face never leaves the employee's phone: the phone only confirms its owner, and we keep no fingerprint at all.
• The location is asked only at the moment of the punch; employees are never tracked at any other time. Photos are deleted automatically after 90 days.

4. Why we use it

We use the data only to run the service: working out attendance and pay, showing reports, sending system messages (such as a password reset link), and support. We do not sell the data, use it for advertising, or share it with anyone unless the law requires us to.

5. Who owns the data

Employee data belongs to the company, which is responsible for its accuracy and for informing its employees. Naskon keeps and processes this data on the company's behalf and following its instructions.

6. Who sees the data

• Each company is fully separated; no company can see another company's data.
• Inside a company, each user sees only what their permissions allow, which can be limited to one branch or department.
• Naskon's team looks at a company's data only when needed for support or account management.

7. Protecting the data

Connections to the system are encrypted, passwords are encrypted, an account is locked for a while after repeated wrong sign-ins, and permissions are checked on the server on every request.

8. Backups

A backup of each company's data is taken every day; the last 7 days and the last 4 weeks are kept. The company's system admin can download and restore them.

9. Keeping and deleting data

We keep the data for as long as the subscription runs. If a subscription ends and is not renewed, we keep the data for 90 days from the end date, after which it may be permanently deleted. A company may ask for its data to be deleted at any time.

10. Cookies

We use one cookie to keep you signed in and to protect forms. We use no tracking or advertising cookies.

11. Your rights

The company has the right to see its data, download a copy, correct it, and ask for it to be deleted. The company's system admin can do most of this inside the system, or by contacting us.

12. Changes

We may update this policy when needed; the date of the last update shows at the top of the page.

13. Contact

For any privacy question, contact us on the number shown on the help page.