Privacy Policy
ChronosHR is designed to keep attendance data scoped to the company that owns it. This policy placeholder explains the types of data the system is prepared to process during local development and future VPS deployment.
Attendance evidence
The system stores server timestamps, attendance status, GPS coordinates, accuracy, distance, device metadata, and file paths or URLs for selfie images. Selfie images are not stored as base64 in the database.
Company scope
Employee, attendance, leave, notification, office, and report data are company-scoped. Cross-company access is blocked by service-layer and permission rules.
Local storage
Local development uses filesystem upload paths and PostgreSQL. Future deployments can replace the storage driver with S3 or R2-compatible storage.