Privacy Policy

1. Introduction

ADRO Log ("we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our workforce management platform and related services (the "Service").

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide to us, including:

• Account Information: Name, email address, phone number, job title, company affiliation
• Profile Data: Profile photos, emergency contact information, employee ID numbers
• Authentication Data: Login credentials, security questions, multi-factor authentication settings
• Communication Data: Messages, feedback, support requests, and correspondence with us

2.2 Workplace Data

Through your use of our Service, we collect:

• Time Tracking Data: Clock-in/out times, break periods, work schedules, overtime records
• Location Information: GPS coordinates when clocking in/out (with your consent)
• Project Information: Project assignments, task details, work locations, progress reports
• Document Uploads: Photos, files, and documents you upload through the Service
• Performance Data: Productivity metrics, attendance records, work quality assessments

2.3 Technical Information

We automatically collect certain technical information, including:

• Device Information: Device type, operating system, browser type, device identifiers
• Usage Data: Pages visited, features used, time spent, click patterns
• Log Data: IP addresses, access times, error logs, performance metrics
• Cookies and Tracking: Session tokens, preference settings, analytics data

3. How We Use Your Information

3.1 Service Provision

• Provide and maintain the workforce management platform
• Process time tracking and attendance data
• Generate reports and analytics for employers
• Facilitate project management and coordination
• Enable document storage and sharing

3.2 Business Operations

• Verify user identity and prevent fraud
• Process payments and manage billing
• Provide customer support and technical assistance
• Conduct system maintenance and security monitoring
• Comply with legal obligations and regulatory requirements

3.3 Communication and Marketing

• Send service updates and important notifications
• Provide training materials and user guides
• Conduct user surveys and collect feedback
• Send promotional materials (with your consent)

4. Information Sharing and Disclosure

4.1 Authorized Sharing

We may share your information with:

• Your Employer: Work-related data is shared with your employer or project managers as part of workforce management
• Service Providers: Third-party vendors who provide cloud hosting, analytics, payment processing, and other services
• Integration Partners: Platforms like Procore and CMiC when you authorize data sharing
• Business Associates: Partners involved in providing or improving our services

4.2 Legal Requirements

We may disclose information when required by law or to:

• Comply with legal processes, court orders, or government requests
• Protect our rights, property, or safety, or that of our users
• Investigate potential violations of our terms of service
• Respond to claims of illegal activity or policy violations

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

5. Data Security

5.1 Security Measures

We implement comprehensive security measures including:

• Encryption: Data is encrypted in transit using TLS and at rest using AES-256
• Access Controls: Role-based permissions and multi-factor authentication
• Infrastructure Security: Secure cloud hosting with regular security audits
• Monitoring: 24/7 system monitoring and incident response procedures
• Compliance: SOC 2 Type II compliance and regular penetration testing

5.2 Data Breach Response

In the event of a data breach, we will:

• Investigate and contain the breach immediately
• Notify affected users within 72 hours when required
• Report to relevant authorities as mandated by law
• Implement additional security measures to prevent future incidents

6. Data Retention

6.1 Retention Periods

• Active Accounts: Data retained while your account is active
• Inactive Accounts: Data retained for 3 years after last activity
• Time Tracking Records: Retained for 7 years for payroll and tax purposes
• Financial Records: Retained according to applicable accounting standards
• Legal Hold: Data preserved longer if required for legal proceedings

6.2 Data Deletion

We securely delete data when retention periods expire, using industry-standard data destruction methods to ensure information cannot be recovered.

7. Your Privacy Rights

7.1 Access and Control

You have the right to:

• Access: Request a copy of your personal information
• Rectification: Correct inaccurate or incomplete data
• Deletion: Request deletion of your personal information
• Portability: Export your data in a machine-readable format
• Restriction: Limit how we process your information
• Objection: Object to certain types of processing

7.2 Consent Management

Where processing is based on consent, you can:

• Withdraw consent at any time
• Modify your communication preferences
• Control location tracking settings
• Manage cookie preferences

8. International Data Transfers

8.1 Cross-Border Processing

Your information may be processed in countries other than your own. We ensure adequate protection through:

• Standard contractual clauses approved by regulatory authorities
• Adequacy decisions by relevant data protection authorities
• Binding corporate rules and certification mechanisms
• Specific consent for transfers where required

9. Cookies and Tracking Technologies

9.1 Cookie Usage

We use cookies and similar technologies for:

• Essential Cookies: Required for basic service functionality
• Performance Cookies: Analytics and service optimization
• Functional Cookies: Remembering your preferences and settings
• Advertising Cookies: Delivering relevant promotional content (with consent)

9.2 Cookie Management

You can control cookies through your browser settings or our preference center. Note that disabling certain cookies may affect service functionality.

10. Children's Privacy

Our Service is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will delete it immediately.

11. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected and how it's used
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising privacy rights

12. European Privacy Rights (GDPR)

If you are in the European Union, you have additional rights under the General Data Protection Regulation, including those outlined in Section 7 above, as well as the right to lodge a complaint with your local data protection authority.

13. Third-Party Services

13.1 Integrations

Our Service integrates with third-party platforms like Procore and CMiC. These integrations are subject to the privacy policies of those respective services. We recommend reviewing their policies to understand how they handle your data.

13.2 Analytics and Advertising

We may use third-party analytics services to understand how our Service is used. These services may collect information sent by your browser and may use cookies to provide their services.

14. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will:

• Post the updated policy on our website
• Update the "last modified" date
• Notify users of material changes via email or service notifications
• Provide a comparison document highlighting key changes

15. Contact Information

If you have questions about this Privacy Policy or want to exercise your privacy rights, please contact us:

16. Definitions

• Personal Information: Information that identifies, relates to, or could reasonably be linked with you
• Processing: Any operation performed on personal information, including collection, storage, use, and deletion
• Service: The ADRO Log platform, including web and mobile applications
• Data Controller: The entity that determines the purposes and means of processing personal information
• Data Processor: An entity that processes personal information on behalf of a data controller

Your trust is important to us. We are committed to being transparent about our data practices and protecting your privacy. If you have any concerns or questions about how we handle your information, please don't hesitate to contact us.