A person, not an automatic penalty.
Off-network Punches are always Needs Review. GPS is supporting evidence. Items needing Review are never automatically accepted or rejected.
Privacy is a product decision
Attendance, with boundaries.
Enough information to make a fair decision. Clear limits on how it is collected and who can see it.
No background tracking. Ever.
Presence captures location only at a Punch. It never follows a phone throughout the day, asks for selfies, or collects device fingerprints.
Know what you share
A moment, not a movement history.
| Data | When | Why |
|---|---|---|
| GPS position and accuracy | Only when you Punch | Evidence for a human Review |
| Network address | Recorded with a Punch; checked on Today | Verify the Office Network before and at a Punch |
| Punch times | Check in, breaks and check out | Calculate worked hours and Day Status |
| Requests and Review notes | When submitted or reviewed | Explain and record attendance changes |
Access follows responsibility.
Employees see their records. Managers see their team. Admins manage the organisation. Microsoft 365 sign-in and server-side authorization control access.
A record of every change.
Attendance changes are audited in the same database transaction. The log is append-only, and the database prevents self-review.
Current retention policy.
Location Data is erased after 12 months. The current attendance-record retention policy is 3 years, subject to HR and accounting confirmation. Periods are configurable Rules; record rows are retained.
Location stays out of the audit log.
Punch coordinates, accuracy and network addresses are excluded from audit values so location erasure is not defeated by a permanent copy.
Consent before the first Punch.
Employees see a collection notice and record consent before punching or submitting Requests. They can see their own attendance edit history.
Clear about what is still being confirmed.
Data location
The hosting region will be confirmed before rollout. We do not currently make a data-residency guarantee.
Designed around privacy principles, with review still required
Presence is designed around privacy principles found in laws such as GDPR and India’s DPDP Act: data captured only at a Punch, recorded consent, limited retention, role-based access and an audit log. These are product choices, not a claim of certification or legal compliance. The written privacy notice and retention periods still require HR, legal and accounting sign-off.
Questions about privacy?
Use our contact form to discuss your organisation’s requirements.
Dublin, Ireland
Use our contact formA better start to the workday
Make attendance feel fair.
Join the waitlist and tell us about your team. We’ll reply to talk it through.