Privacy Policy

Benagon Technologies Private Limited (“Benagon”, “we”, “us”), trading as Clockify, provides attendance and shift-tracking software to organizations (“Customers”) and their staff (“Users”). This policy explains what we collect through the Clockify web console, kiosk devices, and mobile app, and how it is used, stored, and protected.

Account data: name, email, phone number, role, and organization/site assignment, provided by the Customer administrator or by you at sign-up.

Attendance evidence: each punch may include a timestamp, device or kiosk identifier, GPS location, and a verification selfie captured on-device, depending on how your organization has configured capture methods (shared device, NFC card, or QR code). This location is read once, at the moment of the punch, and is never collected as a continuous stream.

Optional workplace geofencing: if your organization enables this feature for a workplace, and you grant the additional background location permission it requires, your device monitors that workplace’s location boundary using your phone or tablet’s built-in geofencing capability. We are notified only when you enter or leave the boundary, not your location in between, and we do not track or store a continuous location trail. Depending on how your organization has configured this feature, an entry or exit may be logged for review, or may automatically clock you in or out. This feature is off by default; you may decline the background location permission and continue using manual clock-in/out instead.

Device & usage data: IP address, browser/app version, and log data generated when you use the console, kiosk, or mobile app.

We use this data to record and verify attendance, generate timesheets and reports, detect anomalous or fraudulent punches, operate the service (billing, support, security), and comply with legal obligations. We do not sell personal data to third parties.

Verification selfies are retained for 180 days by default, unless a different retention period is configured, and are then automatically deleted. Timesheet and attendance records are retained for as long as the Customer’s account is active, plus any period required by applicable labour or tax law. Geofence entry/exit events are retained on the same schedule as location data captured at a punch, and only the transition itself is kept, not a location trail.

Attendance data is visible to the Customer organization that employs or engages you, and to sub-processors who help us run the service (cloud hosting, email delivery). We require these sub-processors to protect your data under terms at least as strict as this policy. We may also disclose data where required by law or to protect the rights, safety, or property of Benagon, our Customers, or others.

Data in transit is encrypted, access to attendance records is scoped to authorized roles within each Customer account, and kiosk/device codes rotate every 30 seconds to limit replay. No system is completely secure; we encourage reporting suspected issues to support@clockify.in.

Subject to the Digital Personal Data Protection Act, 2023 (DPDPA) and other applicable law, you may request access to, correction of, or erasure of your personal data by contacting your organization’s administrator or Benagon directly. Some records may be retained where required for legal, payroll, or audit purposes.

To delete your account and personal data, see Delete Your Account, which sets out both the in-app route and the email route, what is removed, and what your employer is required to keep.

We may update this policy from time to time. Material changes will be notified through the console or by email before they take effect.

Benagon Technologies Private Limited, Elanjimattom Road, Amaravathy PO, Kumily, Kerala 685509, India. Email: support@clockify.in