Privacy Policy
Effective Date: October 1, 2026 • Version 3.2
1. Introduction & Overview
ManobHR Technologies Inc. (“ManobHR”, “we”, “our”, or “us”) operates the enterprise workforce management and payroll platform. We understand the paramount importance of data privacy when managing human capital, payroll transactions, biometric records, and confidential organizational intelligence. This Privacy Policy details how we collect, process, protect, and handle data when enterprises and their authorized employees use our cloud platform, mobile applications, and biometric sync listeners.
2. Information We Collect
We process data under the instruction of our customer organizations (the Data Controllers). Information processed includes:
- Employee Profile Records: Names, national identification (NID/Passport), date of birth, blood group, emergency contacts, bank details, and mobile financial services (bKash/Nagad/Rocket) accounts.
- Attendance & Biometric Sync Events: Biometric verification timestamps, terminal IDs, device serial numbers, and 3-second GPS mobile geofence coordinates for verified punches.
- Compensation & Tax Data: Monthly gross wages, deductions, loan amortization ledgers, overtime hours, and Bangladesh NBR tax withholding records.
- Recruitment Documents: Resumes, CVs, interview scorecards, and digital offer letter signatures processed via Google Gemini AI ATS.
3. Biometric Data & Hardware ADMS Protection
ManobHR terminals (ZKTeco, SpeedFace, FaceID, Fingerprint) process mathematical algorithmic templates rather than storing raw biometric images. These templates are strictly utilized for punch authentication. ManobHR will never sell, lease, commercialize, or transfer employee biometric identifier data to any third party under any circumstances.
4. Data Security & Storage
All data at rest is encrypted using AES-256 standard encryption. All data in transit between mobile applications, web browsers, biometric listeners, and our cloud cluster is secured using TLS 1.3 encryption. Uploaded documents (appointment letters, NID scans) are isolated in private buckets and accessed exclusively via short-lived signed URLs.
5. Compliance with Bangladesh ICT Act & International Standards
ManobHR operates in strict compliance with the Information and Communication Technology (ICT) Act 2006 of Bangladesh, Bangladesh Labor Act regulations, and international GDPR privacy standards for data portability, rectification, and right to erasure upon contract termination.
6. Contact Data Protection Officer
If you have questions regarding this Privacy Policy or wish to exercise data subject rights, please contact our Data Protection Team at [email protected] or write to:
