Privacy Policy

2. Information we collect

2.1 Account and profile

Name, username, email address, phone number, employee code, designation, department, team, shift, joining date, profile picture and the role assigned to you.

2.2 Attendance, leave and HR records

• Check-in and check-out times, status (on time, late, early leave, overtime), and the office or location they were recorded from.
• Attendance corrections, leave requests and balances, work-from-home requests and activity checks, holidays and shifts.
• Advance, loan and expense requests, including receipts you attach, and related decisions.
• Documents you upload for your employee file.

2.3 Location

• Client Visit tracking (precise location, including in the background). When you start a client visit and accept the in-app consent screen, the app records your precise location and route (GPS position, accuracy, time, battery level and movement or stop information) until you tap End Visit. This continues while the app is closed or your screen is off, and a notification is shown the whole time. We never start tracking automatically.
• Attendance and work from home. When you mark attendance or submit a work-from-home request, the app reads your current location (precise or approximate) once to record where you were and to check it against your registered office location.
• Integrity signals. We check whether location services were turned off, whether permission was revoked and whether a mock-location app is in use, to protect the accuracy of records.
• You can decline the location permission. Features that need it, such as Client Visit tracking, will then not be available.

2.4 Work content

Projects, features, tasks, tickets, leads and their comments and attachments, meetings and minutes, daily plans, personal inbox items you jot down, celebrations and wishes you send or receive, and notifications.

Leads contain business contact details (for example name, company, phone, email and advertising-campaign information) that our sales and support teams handle. These belong to our business customers or prospects and are used only to manage our work with them.

2.5 Messages and files

Chat messages, reactions, read receipts, drafts you have not yet sent and files you share inside the app.

2.6 Photos and files you choose

If you pick a photo, take a picture or attach a file (for a profile picture, receipt, document or chat), the app accesses only that item. It does not read your gallery or files in the background.

2.7 Device and technical information

• A device identifier used to register your device for attendance.
• Device model, operating system and app version, network connection status and battery level.
• Push-notification token, sign-in sessions (including last active time and IP address), and security events such as failed sign-ins.
• Crash reports and diagnostic and usage analytics.
• Server logs of requests to the service, kept for security, auditing and troubleshooting.

Some data is stored on your device to make the app work, for example a secure sign-in token, chat drafts and a short queue of location points that are sent when the connection returns.

3. How we use information

• To run the features you use: attendance, leave, work from home, payroll requests, client visits, projects, tasks, tickets, leads, meetings and chat.
• To verify field work: visit route, distance and time are recorded so managers and HR can confirm that a visit took place.
• To prepare your Daily Hub, reminders, approvals and notifications by push, email and WhatsApp.
• To produce attendance, productivity and sales reports for managers and HR.
• To secure accounts, prevent misuse (for example registered-device checks and mock-location detection), monitor system health and fix bugs.
• To meet legal, payroll, tax, audit and HR obligations.

4. Who can see your information

• Your managers, team leads, directors and HR/admin staff. What each person sees depends on role: leads and directors see their own team, HR and admin see all employees. For client visits they can see your visit location and route.
• Colleagues you work with see the work items you share with them, such as tasks, tickets, meetings, comments, chat messages and your name and picture.
• Authorities and other parties where required by law, or to protect our rights, safety or the safety of others.

We do not sell your personal information and we do not share it for advertising.

Service providers

These providers help us run the service, under contract and only for that purpose.

5. How long we keep it

6. Security

Data is sent over encrypted connections (HTTPS). Passwords are stored hashed and sign-in tokens are kept in the device's secure storage. Access is limited by role and menu permissions, device registration is enforced for attendance, and administrative actions are logged. No system is completely secure, so we cannot guarantee absolute security. If we become aware of a breach affecting your information we will act and notify as required by law.

7. Your choices and rights

• Location: turn the permission off at any time in your phone settings, and end a client visit at any time to stop tracking.
• Notifications: turn them off in your phone settings, or mark them as read in the app.
• Access and correction: you can view and update much of your information in the app. For anything else, ask HR or contact us.
• Deletion: you can ask us to delete your information. We may need to keep some records where the law or payroll requires it.
• Camera, photos and files: the app asks for access only when you use these features.

Depending on where you live, you may have additional rights under local data-protection law, such as the right to object or to complain to a regulator. Contact us to exercise them.

8. International transfers

Our service providers may process data in other countries. Where this happens we rely on appropriate safeguards required by applicable law.

9. Children

Orio Connect is a workplace tool and is not directed to children. We do not knowingly collect information from anyone under the legal working age.

10. Changes to this policy

We may update this policy. The new version will be posted on this page with a new effective date, and we will tell you in the app if the changes are significant.

11. Contact

Questions or requests about this policy or your information: rajaammar@getorio.com, D-63/1 Block 4, Gulshan-e-Iqbal, Karachi, Closest landmark is Disco Bakery.