Haqqman Agency(“we”, “us”, “our”) operates Attendwave. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using Attendwave, you consent to the practices described here.
1. Information We Collect
- Account Information: Name, email address, phone number, and company name provided during registration.
- Employee Records: Names and phone numbers of employees added to your entity by your managers.
- Attendance Data: Clock-in and clock-out timestamps, location scanned, and device/browser metadata.
- Billing Information: Invoice records, payment status, and employee activation dates. Payment processing is handled by Paystack — we do not store card details.
- Usage Data: Pages visited, features used, and interaction logs for product improvement.
2. How We Use Your Information
- To provide and operate the attendance tracking Service.
- To generate invoices and process subscription billing.
- To communicate with you about your account, updates, and support.
- To improve our product through aggregated, anonymised analytics.
- To comply with legal obligations.
3. Legal Basis for Processing (NDPR)
We process personal data in accordance with Nigeria's National Data Protection Regulation (NDPR). Our legal bases include: (a) Performance of contract — to deliver the Service you've subscribed to; (b) Legitimate interests — to operate and improve our business; (c) Consent — where you have explicitly agreed, such as receiving marketing emails.
4. Data Sharing
We do not sell your personal data. We may share data with:
- Firebase / Google Cloud: Our infrastructure provider for data storage and authentication.
- Paystack: Our payment processor for billing and invoicing.
- Legal Authorities: Where required by law, court order, or regulatory authority.
5. Data Retention
We retain your data for as long as your account is active. Upon account deletion, your data is retained for 30 days for recovery purposes, then permanently deleted — unless we are legally required to retain it longer. Billing records may be retained for up to 7 years for audit compliance.
6. Cookies and Local Storage
Attendwave uses browser local storage to maintain your login session and entity preferences. We do not use third-party tracking cookies. You may clear local storage at any time via your browser settings, which will log you out of the Service.
7. Security
We implement industry-standard security measures including Firebase Firestore security rules, HTTPS encryption, and role-based access control. However, no transmission over the internet is 100% secure. You are responsible for keeping your login credentials confidential.
8. Your Rights
Under the NDPR, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data (subject to retention requirements).
- Object to or restrict certain processing activities.
- Lodge a complaint with the Nigeria Data Protection Bureau (NDPB).
9. Employee Data (Controllers & Processors)
When your organisation uses Attendwave to track employee attendance, you act as the data controller for your employees' personal data. We act as the data processor, handling data only as instructed by you and as described in this Policy. You are responsible for ensuring a lawful basis and appropriate employee consent.
10. Children's Privacy
Attendwave is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or an in-app notice at least 14 days before they take effect. Continued use of the Service constitutes acceptance of the updated Policy.
12. Contact Us
For privacy enquiries, data access requests, or complaints, contact our Data Protection Officer at hello@haqqman.com or write to: Haqqman Agency, Lagos, Nigeria.