Privacy Policy

• We never sell your data to third parties. Ever.
• We never share your data with advertisers or data brokers.
• We never use your tenant data to train AI models.
• Each tenant's data is logically isolated and never visible to other companies.

We collect only what's needed to run the product:

• Account information

  Name, email, phone, work address, employee role, manager assignment, photo (optional, for the directory and attendance verification).

• Operational HR data

  Attendance check-ins (timestamp, GPS coordinates when geofence is on, selfie when photo verification is on), leave requests, payroll line items, performance reviews, goal progress, recruitment applicant records.

• Authentication metadata

  Last sign-in time, IP address (security only), session tokens, failed-login counters for throttling.

• Technical telemetry

  Error reports, performance metrics, basic usage analytics to improve the product. No individual user is tracked across the web.

• Deliver the HR features you signed up for (attendance, payroll, leave, performance, recruitment).
• Authenticate users and prevent unauthorized access.
• Notify the right people (managers, HR) when actions need their attention.
• Improve product quality through aggregated, anonymous metrics.
• Comply with legal requirements (Guinean labour law, tax authorities, court orders if served).

Access is strictly limited:

• You (the tenant)

  Admins and HR managers in your workspace see everything for your company. Employees see only their own records plus what HR makes visible (e.g. directory).

• Sub-processors

  We use a small, audited set of service providers: hosting (Vercel + Neon Postgres), file storage (Vercel Blob), error monitoring (Sentry), email delivery, and authentication. Each is bound by a data-processing agreement and cannot use your data for any other purpose.

• Law enforcement

  Only on a valid Guinean court order or equivalent legal process. We will notify you unless legally prohibited.

We keep tenant data for as long as your subscription is active. After cancellation we retain a backup for 30 days (for accidental restore), then permanently delete it. Payslips and audit logs are kept for the statutory period required by Guinean law (typically 5 years) even after account deletion, in a separate archive.

• Access - export all your data at any time from the settings page.
• Correct - fix inaccurate information via the app or by writing to us.
• Delete - request permanent deletion of your account or specific records.
• Portability - get your data in a machine-readable format (JSON or CSV).
• Object - opt out of any non-essential processing.

Write to privacy@224tech.com from the email address on your account.

• Encryption in transit (TLS 1.3) and at rest (AES-256).
• Daily encrypted backups, retained for 30 days.
• Tenant data is logically isolated - every database query scopes to the requesting tenant ID; cross-tenant access is impossible at the data layer.
• Photos and payment proofs sit in private object storage with cuid-based paths (computationally infeasible to guess).
• Multi-factor authentication available for all paid plans.

Primary storage is in AWS (us-east-1, Neon Postgres). Backups are encrypted and replicated across regions. We do not transfer data to jurisdictions with weaker protections than the EU GDPR baseline.

peopleCore is a B2B HR product. We do not knowingly collect data from anyone under 16. If you believe we have, write to privacy@224tech.com and we will delete it immediately.

We may update this policy as the product evolves. Material changes will be notified by email to admins of every active tenant at least 30 days before they take effect.

For any privacy question, write to privacy@224tech.com. Postal mail: 224 TECH, Conakry, Republic of Guinea.