Privacy Policy
peopleCore (operated by 224 TECH) takes your privacy seriously. This policy explains exactly what we collect, what we do with it, and what we will never do.
Last updated: October 11, 2026
Our promise
- We never sell your data to third parties. Ever.
- We never share your data with advertisers or data brokers.
- We never use your tenant data to train AI models.
- Each tenant's data is logically isolated and never visible to other companies.
What we collect
We collect only what's needed to run the product:
Account information
Name, email, phone, work address, employee role, manager assignment, photo (optional, for the directory and attendance verification).
Operational HR data
Attendance check-ins (timestamp, GPS coordinates when geofence is on, selfie when photo verification is on), leave requests, payroll line items, performance reviews, goal progress, recruitment applicant records.
Authentication metadata
Last sign-in time, IP address (security only), session tokens, failed-login counters for throttling.
Technical telemetry
Error reports, performance metrics, basic usage analytics to improve the product. No individual user is tracked across the web.
How we use it
- Deliver the HR features you signed up for (attendance, payroll, leave, performance, recruitment).
- Authenticate users and prevent unauthorized access.
- Notify the right people (managers, HR) when actions need their attention.
- Improve product quality through aggregated, anonymous metrics.
- Comply with legal requirements (Guinean labour law, tax authorities, court orders if served).
Who can access your data
Access is strictly limited:
You (the tenant)
Admins and HR managers in your workspace see everything for your company. Employees see only their own records plus what HR makes visible (e.g. directory).
Sub-processors
We use a small, audited set of service providers: hosting (Vercel + Neon Postgres), file storage (Vercel Blob), error monitoring (Sentry), email delivery, and authentication. Each is bound by a data-processing agreement and cannot use your data for any other purpose.
Law enforcement
Only on a valid Guinean court order or equivalent legal process. We will notify you unless legally prohibited.
How long we keep it
We keep tenant data for as long as your subscription is active. After cancellation we delete it within 30 days; copies in our database provider's backups expire at the end of that provider's retention window. Payslips and audit logs may be subject to a statutory retention period under Guinean law: before deleting your account we export them to you so you can meet that obligation.
Your rights
- Access - export all your data at any time from the settings page.
- Correct - fix inaccurate information via the app or by writing to us.
- Delete - request permanent deletion of your account or specific records.
- Portability - get your data in a machine-readable format (JSON or CSV).
- Object - opt out of any non-essential processing.
Write to privacy@224tech.com from the email address on your account.
How we secure your data
- Encryption in transit (TLS) and at rest, provided by our hosting and database providers.
- Continuous database backups with point-in-time restore, provided by our managed database host (Neon).
- Tenant data is logically isolated - application queries are scoped to the requesting tenant ID, and this scoping is covered by automated tests.
- Photos and payment proofs sit in private object storage with cuid-based paths (computationally infeasible to guess).
- Multi-factor authentication available for all paid plans.
Where your data lives
Primary storage is a Neon Postgres database hosted on AWS in the United States (us-east-1). Files are stored with Vercel Blob. Because these providers are located outside Guinea and the European Union, using peopleCore involves an international transfer of data, which we cover through our providers' data-processing terms.
Children
peopleCore is a B2B HR product. We do not knowingly collect data from anyone under 16. If you believe we have, write to privacy@224tech.com and we will delete it immediately.
Changes to this policy
We may update this policy as the product evolves. Material changes will be notified by email to admins of every active tenant at least 30 days before they take effect.
Contact
For any privacy question, write to privacy@224tech.com. Postal mail: 224 TECH, Conakry, Republic of Guinea.