Privacy

Who is responsible

Org360 is software that employers (“your organisation”) use to manage people, pay, time and leave. Your organisation decides what information about you is kept in Org360 and who can see it. We host and run Org360 for them and handle your information only to provide the service to them, under our agreement with them.

What information is involved

• Your sign-in: work email, role, password (stored only in scrambled form) and optional two-factor sign-in.
• Your employment records added by your organisation, for example job, pay, leave, attendance, documents and training.
• What you add yourself, for example leave requests, timesheets, expense receipts and profile details.
• Location when you clock in or out: Org360 asks your phone or browser for your location at that moment so your organisation can see you were at the right site. You can decline, and it is never tracked in the background.
• Security and technical records: sign-in times, network (IP) address, the type of browser or device, and an audit log of important changes.
• Usage statistics: counts of which features are used and how quickly pages respond, so we can plan maintenance and improve Org360. They never include what you type, the content of records or keystrokes.

How it is used

To provide Org360 to your organisation, keep it secure, back it up, give support when your organisation asks for it, and improve the service. We don’t sell your information, show advertising, or track you across other apps or websites.

Where it is kept and who can see it

Information is stored on Google Cloud servers in the region chosen for your organisation (for example Mumbai, India), sent only over encrypted connections (HTTPS), and backed up daily; backups are kept for 90 days. People in your organisation see what their role allows. Our support staff open your organisation’s workspace only when it asks for help, and every such session is recorded in its audit log. Service providers we rely on (such as Google Cloud for hosting, and the email service your organisation connects) handle information only to run Org360.

The Org360 mobile app

The app opens your organisation’s Org360 workspace securely in Chrome. On your phone it keeps only your organisation’s address and your signed-in session. It uses the camera, files, location or notifications only when you choose to (for example to attach a receipt or clock in), and it doesn’t collect your contacts or track your location in the background.

Your choices, and deleting your information

You can see and update much of your information in your profile. For corrections, copies or deletion of your information, ask your organisation’s Org360 administrator — they control your records and can remove them, subject to the records employers must keep by law. You can also contact us at the contact details on your organisation’s sign-in page and we’ll pass your request to your organisation. Uninstalling the app removes the address and sign-in it saved on your phone.

How long it is kept

For as long as your organisation uses Org360 and as long as the law requires employment records to be kept. When an organisation stops using Org360, its information is deleted as agreed with it; backups expire after 90 days. Detailed usage statistics are deleted after 90 days and summaries after 13 months.

Privacy laws

Depending on where you are, you may have rights under privacy laws such as Australia’s Privacy Act 1988, India’s Digital Personal Data Protection Act 2023 or the GDPR. Your organisation handles those requests, and we help it do so.

Questions and changes

Questions or concerns: the contact details on your organisation’s sign-in page. If we change this page, the date below changes too. Org360 isn’t intended for children.