Privacy Policy

Effective date: January 1, 2026 This Privacy Policy explains how WorkNest, owned and operated by AstreCode, collects, uses, stores, protects, and shares information when customers and users access WorkNest websites, tenant workspaces, mobile applications, and services. 1. Information we collect We may collect organization information, administrator details, user profile data, employee identifiers, employment data, attendance and shift data, leave and request data, payroll preparation data, recruitment data, uploaded documents, device information, IP address, browser data, mobile device identifiers, push notification tokens, location data when enabled for attendance, face recognition enrollment and verification data when enabled, billing data, payment status, and support communications. 2. How information is used We use information to create and manage tenants, authenticate users, provide HR workflows, process attendance and mobile check-in, manage subscriptions, prepare reports, send notifications, support users, troubleshoot issues, secure the platform, comply with legal obligations, and improve service quality. 3. Customer control Customers configure roles, permissions, modules, branches, departments, shifts, policies, workflows, data access, and employee usage. Customer administrators are responsible for deciding what data is entered, who can access it, and how it is used inside their organization. 4. Location and attendance data When attendance features are enabled, WorkNest may process location coordinates, selected branch, work-from-home address, check-in and check-out times, device data, and attendance notes. This data is used for attendance validation, audit logs, payroll preparation, and compliance with customer policies. 5. Face recognition data Where face recognition is enabled, WorkNest may process face embeddings, liveness metadata, enrollment status, device identifiers, and verification results. Face recognition data is used only for identity verification and attendance-related security flows configured by the customer. 6. Payment information Payment providers process payment details according to their own policies. WorkNest stores payment references, checkout status, subscription status, billing cycle, market, currency, and transaction metadata needed to operate subscriptions. 7. Data sharing We do not sell customer or employee data. Data may be shared with hosting providers, payment processors, email/SMS/push notification providers, map providers, analytics and monitoring tools, support vendors, or legal authorities when required to provide the service, protect the platform, or comply with law. 8. Security WorkNest applies administrative, technical, and organizational safeguards including authentication controls, role-based access, tenant isolation, logging, encryption in transit where applicable, backups, monitoring, and secure development practices. No system is completely risk-free, and customers must protect their credentials and account access. 9. Data retention Customer data is retained while the tenant account is active or as needed for service, legal, accounting, audit, security, and dispute-resolution purposes. Customers may request deletion or export subject to subscription status, legal requirements, and technical constraints. 10. International processing WorkNest may process data using cloud infrastructure and service providers in different countries. By using the service, customers authorize this processing where required to operate the platform. 11. User rights Depending on applicable law, users may have rights to access, correct, delete, restrict, or object to processing of their personal data. Employee requests should normally be directed to the employer or tenant administrator first. 12. Policy updates We may update this Privacy Policy when features, legal requirements, integrations, or security practices change. Updated versions will be published on this page. 13. Contact For privacy questions, contact WorkNest through the Contact Us page.