Enterprise Privacy Policy

1. Multi-Tenant Architecture & Data Ownership

ManRiq provides a multi-tenant Software-as-a-Service platform. Every corporate tenant maintains exclusive legal ownership of its organizational data, including employee lists, timesheet dossiers, client visit records, and financial receipts. ManRiq enforces single-database row-level isolation via mathematically scoped tenant keys (tenant_id) and never uses customer telemetry to train public models or sell to third parties.

2. WFH Employee Telemetry & Privacy Safeguards

Our Electron desktop client tracks employee productivity strictly while clocked in. We enforce strict privacy protections:

• No Continuous Video or Audio Recording: Tracking captures only periodic interval screenshots as configured by the employer.
• Smart Blurred Screenshots: Employers can enforce tenant-wide blurring of screenshot captures so sensitive financial data or personal windows are obscured.
• No Keystroke Logging: We record aggregate counts of keyboard and mouse activity to compute productivity intensity percentages; individual characters or passwords are NEVER logged.
• Clear Visual Indicator: The desktop client provides an active system tray widget indicating when tracking is running.

3. Field Employee Location & GPS Policy

Our Flutter mobile tracking app collects GPS location coordinates strictly for authorized field duty and attendance validation:

• Punched-In State Only: Background geolocation runs solely when the field employee punches in for the day and terminates upon punch-out.
• Geo-fence Validation: GPS fixes are compared against designated client coordinates to confirm on-site presence.
• Speedometer & Odometer Watermarks: Camera captures embed timestamp and odometer readings to prevent attendance fraud.

4. Data Storage, Cloudflare R2 & Encryption

All stored media, including inspection photos and screenshots, are stored in encrypted Cloudflare R2 S3-compatible object buckets. Media access is gated by short-lived signed URLs with Redis token verification. Data at rest is encrypted with AES-256 and all in-transit communications utilize TLS 1.3 encryption.

5. Data Retention & Automatic Purging

Tenants can configure automated retention schedules (e.g. auto-purge screenshots older than 30/60/90 days). Once purged, files and database rows are permanently deleted across our storage clusters.

6. Contact Us Regarding Privacy

For any privacy inquiries or Data Protection Officer (DPO) requests, contact our compliance team at privacy@manriq.com.