Back to home
Attndly

Privacy Policy

Last updated: February 2026

Attndly ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered attendance tracking service.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and password (stored in hashed form). If you sign in via Google OAuth, we receive your name and email from Google.

Employee Data

Organization administrators may upload employee information including names, email addresses, employee IDs, department assignments, and employment details.

Biometric Data (Facial Recognition)

Our service processes facial images from CCTV camera feeds to perform attendance tracking. We collect and store:

  • Facial photographs uploaded during enrollment
  • Facial encoding vectors (mathematical representations derived from photographs)
  • Attendance event timestamps and associated camera/location data

Facial encoding vectors are numerical representations and cannot be reverse-engineered into photographs. Raw CCTV frames are processed in real-time and are not permanently stored.

Usage Data

We automatically collect certain information when you use the service, including IP addresses, browser type, pages visited, and interaction timestamps. We use cookies to maintain your session.

2. How We Use Your Information

  • Provide and maintain the attendance tracking service
  • Authenticate users and manage sessions
  • Process facial recognition for attendance verification
  • Generate attendance reports and analytics
  • Send service-related communications (verification emails, password resets)
  • Improve and optimize our service
  • Detect and prevent fraud or security threats

3. Data Storage and Security

All data is stored on secure, encrypted servers. Facial encodings are stored separately from personal identification information. We implement industry-standard security measures including:

  • Encryption in transit (TLS/HTTPS) and at rest
  • Role-based access controls
  • Regular security audits
  • Secure password hashing

4. Data Retention

We retain your data for as long as your organization maintains an active account. Upon account deletion or at your request:

  • Personal data is deleted within 30 days
  • Facial encodings and photographs are deleted immediately
  • Aggregated, anonymized analytics data may be retained

5. Data Sharing

We do not sell your personal information. We may share data with:

  • Your organization's administrators (as part of the service)
  • Service providers who assist in operating our platform (hosting, email delivery)
  • Law enforcement when required by applicable law

6. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Object to data processing
  • Data portability
  • Withdraw consent for biometric data processing

7. Biometric Data Compliance

We comply with applicable biometric privacy laws including GDPR, BIPA (Illinois), and other relevant regulations. Biometric data processing requires explicit consent from the individual or authorized organizational consent as applicable under local law.

8. Contact Us

For privacy inquiries or to exercise your data rights, contact us at privacy@attndly.com.