Data protection

The company using Workfence decides why and how its workforce data is processed; Workfence processes it on the company's instructions to provide the service. Requests from workers about their data are directed to their employer, who can act on them in the product.

The product records what attendance and payroll need and stops there: no location outside a shift, no on-site movement where the site has switched it off, no face data leaving the phone, no address-book access.

Tracking is disclosed in-app before it starts and is visible throughout a shift. Workers can see their own attendance, route history and the permissions they have granted.

Configured by the company in its tracking policy. Location points older than the retention window are purged automatically; the product's default is 90 days.

Access, correction, export and deletion are supported through the company's administrator tools, including a full data export. The company handles the request; Workfence supports it.

Live deployments store data in a managed Postgres database with row-level security. Details of hosting region and sub-processors are provided to the company in the signed agreement.