Effective Date: April 29, 2024 Last Updated: November 20, 2024 Your privacy is important to us. We are committed to protecting your personal data in compliance with the Personal Data Protection Act (PDPA) of Thailand. This Privacy Statement explains how we collect, use, disclose, and safeguard your personal information when you create an account and use the HR App (“Madii”). By creating an account and using the app, you agree to the practices described in this Privacy Statement. 1. Information We Collect 1.1 Personal Information We may collect the following personal data to provide and enhance our services: - Name, email address, phone number, and other contact details. - Employee details (e.g., Employee ID, job title, department, employment status). - Payroll data (e.g., salary, tax information, bank account details, provident fund contributions). - Attendance records, including check-in and check-out times and locations. 1.2 Device and Usage Information We collect technical data such as: - Device type, operating system, app version. - IP address and usage analytics to improve your app experience. 1.3 Location Information If enabled, we may collect geolocation data to support features like location-based check-ins and check-outs. 1.4 Additional Information We may also collect data you voluntarily provide, such as feedback, inquiries, or survey responses. 2. How We Use Your Information We use your personal data to: - Deliver and improve app functionalities (e.g., payroll management, attendance tracking, employee directory). - Ensure secure user authentication and account management. - Support compliance with labor laws and organizational policies. - Communicate system updates, notifications, and support services. - Generate aggregated insights for operational and strategic planning (without identifying individuals). 3. Sharing and Disclosure of Information We do not sell your personal data. However, we may share it in the following cases: 3.1 With Service Providers We engage third-party vendors (e.g., cloud hosting, analytics, payment processors) who are contractually obligated to protect your data. 3.2 With Employers HR administrators within your organization may access your data to manage payroll, attendance, and other employment-related functions. 3.3 For Legal and Regulatory Compliance We may disclose your information as required to comply with applicable laws, regulations, or legal processes. 4. Data Security We implement robust security measures, including: - Encryption: Data is encrypted during transmission and storage. - Authentication: Secure login mechanisms protect account access. - Monitoring: Regular audits and vulnerability assessments. However, no system is completely secure, and we cannot guarantee absolute security. 5. Your Rights Under Thailand’s PDPA You have the following rights regarding your personal data: - Right to Access: Request a copy of the personal data we hold about you. - Right to Correction: Request corrections to inaccurate or incomplete data. - Right to Deletion: Request deletion of your data, subject to legal or contractual obligations. - Right to Withdraw Consent: Withdraw your consent where applicable. - Right to Object: Object to processing for specific purposes (e.g., direct marketing). To exercise your rights, contact us at admin@pandasoft.co.th. 6. Data Retention We retain personal data only as long as necessary to fulfill the purposes described in this policy or as required by law. After the retention period, we securely delete or anonymize the data. 7. Children’s Privacy The app is not intended for users under 18. We do not knowingly collect data from minors. If we discover such data, we will take steps to delete it. 8. Updates to This Privacy Statement We may update this Privacy Statement to reflect changes in our practices or legal requirements. The updated version will be posted in the app with the “Last Updated” date. Continued use of the app indicates your acceptance of any updates. 9. Use of TrueDepth API Our app uses the TrueDepth API alongside a Liveness Detection SDK for liveness verification during check-in and check-out. - Collection and Usage: We do not use the TrueDepth API for Face ID authentication or facial recognition. The data is used only to detect facial movements for liveness verification, confirming the user is a real person (not a static image or video). No personally identifiable information (PII) is collected, stored, or processed from the TrueDepth API. - Disclosure and Sharing: Facial data from the TrueDepth API is neither stored nor shared with external servers, third parties, or cloud services. All processing is done in real-time on the user’s device. - Data Retention: No facial data is retained after the liveness verification process is completed. - Security and Privacy: TrueDepth API data is strictly used for liveness verification, not for marketing, advertising, analytics, or unrelated purposes. 10. Contact Us If you have any questions, concerns, or feedback, please contact: PandaSoft & Development Co., Ltd Email: admin@pandasoft.co.th Phone: 02-007-5257, 086-885-0475 Address: 37/131, Moo 9, Tiwanon Road, Bang Phut Subdistrict, Pak Kret District, Nonthaburi 11120, Thailand By creating an account and using the HR App “Madii,” you acknowledge that you have read, understood, and agreed to this Privacy Statement.