Sassy is a workforce management platform (web and mobile app) that helps organisations run attendance, leave, payroll, documents, and related HR operations. This Privacy Policy explains what information the Sassy app and services collect, how it is used, and the choices you have.
We collect only what is needed to run the workforce features your organisation has enabled:
Name, work email, phone number, employee code, profile photo, designation, department, location/branch, and login credentials (passwords are stored only as secure hashes).
Attendance and check-in/out records, leave and shift data, performance and onboarding information, and documents you or your employer upload.
Where your employer requires it for payroll and legal compliance, we process identifiers such as PAN, Aadhaar, UAN, ESIC number, and bank account details.
When enabled by your employer and permitted by you, GPS location for attendance check-in, geo-fence validation, and — if your employer turns it on — work-hour route/field tracking. See section 4.
For selfie check-in and optional Face ID attendance/login, we process facial images and a mathematical face template to verify your identity. See section 5.
Device model, operating system, app version, battery level, network type, IP address, and integrity signals (such as rooted-device or mock-location detection) used to keep attendance trustworthy.
Features used, actions taken, and system logs, to operate and improve the service.
We do not sell your personal data, and we do not use it for third-party advertising.
Each permission is optional at the device level and can be changed in your device settings; some features will not work without the related permission.
Location is collected to record where an attendance action occurs, to confirm you are within an authorised office geo-fence, and, where your employer enables it, to map your route during working hours. Location is linked to your identity and is shared with your employer for these purposes. You can disable location access from your device settings; doing so may prevent GPS-based check-in. Route/field tracking, where used, applies during configured working periods.
If your organisation enables face-based attendance or login, the app captures a facial image and derives a face template used only to verify that it is you. Face data is not used to identify you to third parties or for any unrelated purpose, and it is not sold. Face templates are stored securely and are deleted when you leave the organisation or on a valid request, subject to any legal retention requirements. You can use password-based login instead where available.
We retain your information for as long as your account is active and as your employer instructs, plus any period required by law (for example, payroll and tax records). Location pings are retained for a limited, configurable window and then automatically pruned. Face templates are deleted on exit or valid request, subject to legal limits.
We protect data with encryption in transit (HTTPS), access controls, hashed passwords, and per-organisation data isolation. No method of transmission or storage is 100% secure, but we work to protect your information and to promptly address any issues.
Depending on your location (including under India’s DPDP Act and, where applicable, the GDPR), you may have the right to access, correct, or delete your personal data, and to withdraw consent (for example, by turning off location or using password login instead of Face ID). Because your employer is usually the data controller, please direct such requests to your HR/administrator; Sassy will support them in responding. You may also contact us using the details below.
Sassy is a workplace product and is not directed to, or intended for, anyone under 18 (or the local minimum working age). We do not knowingly collect data from children.
We may update this Privacy Policy from time to time. Material changes will be posted on this page with a new effective date. If you continue to use Sassy after an update, the revised policy applies.
For privacy questions or requests, contact us at privacy@sassy.work.