Overview

Welcome to Peoplo, All Peoplo Inc. ("Peoplo," "we," "us," or "our"), we are committed to protecting your privacy and handling your personal and business information with the utmost care and transparency. This Privacy Policy describes in detail how we collect, store, process, share and protect your data when you use our workforce intelligence platform, including Peoplo HRM, Peoplo Lens, Peoplo Tracker, and any associated websites, mobile applications, or services (collectively, the "Services").

This Privacy Policy applies to all individuals who interact with our Services, including registered users, account administrators, employees whose data is managed through the platform, website visitors, prospective customers, and business partners. By accessing or using Peoplo's Services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

If you are using Peoplo on behalf of an organization - for example, as an HR administrator or company owner - both you and your organization must have the authority to agree to this policy on behalf of the employees and users whose information is being processed.

We encourage you to read this document carefully. If you have questions or concerns about anything described here, please reach out to us at support@peoplo.io before using our Services.

Our commitment

Peoplo has been built on a foundation of trust, security and transparency. We firmly believe that your data belongs to you, and we are committed to keeping it that way. We do not sell, rent or trade your personal information to third parties for advertising, marketing, or any commercial purposes unrelated to the delivery of our Services.

We operate on the principle of data minimization - we collect only what is necessary to deliver the functionality you use. We are transparent about which internal data governance protocols, and access to personal data is limited to authorized personnel with a legitimate need to access it as part of their role.

Peoplo is designed for use by modern, distributed and hybrid teams around the world. We understand the sensitivity of workforce data - including attendance, productivity metrics and remote access logs - and we treat all such information with the highest level of care. Our infrastructure is built on AWS, and we use bank-grade AES-256 encryption to protect data at rest and in transit.

We continuously review and update our security practices, internal policies and technical measures to stay ahead of emerging threats and to comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) where applicable, and other regional and national privacy frameworks.

Information we collect

1.1 Information you provide directly

When you register for an account, set up your workspace, or contact us for support, you voluntarily provide us with certain information. This includes your full name, email address, phone number, company name, billing address, and any information you choose to include when filling out forms on our platform or communicating with our team.

If you are an administrator adding employees to the platform, you may also provide employee information such as names, email addresses, department assignments, new designations, employment start dates, and other role-related data. You are responsible for ensuring that you have the appropriate authorization and legal basis to provide this information to Peoplo.

1.2 Information collected automatically

When you interact with our website or platform, we automatically collect certain technical and usage data. This includes your IP address, browser type and version, operating system, device model and identifiers, referring URLs, pages visited, session duration, and clickstream data. This information is collected through standard web technologies including log files, cookies, and analytics scripts.

For users of Peoplo Tracker, our productivity monitoring module, screenshots of active work sessions are stored in secure, encrypted cloud storage and are accessible only to authorized administrators within your organization. Peoplo does not independently review or use these screenshots for any purpose other than delivering the monitoring functionality to your organization.

For users of Peoplo Lens, our face-attendance module, biometric facial data may be processed to verify employee identity during check-in or check-out. Facial recognition data is sensitive personal information and is handled with the highest level of security. This data is not used for any purpose beyond attendance verification and is deleted or de-identified in accordance with applicable retention schedules and as configured by your organization.

For users of Peoplo Connect, our remote desktop access module, session data - including connection timestamps, device identifiers and connection duration - may be logged. This data is retained temporarily and is primarily used for security, troubleshooting and audit purposes, and is not accessible beyond that necessary connection.

1.3 Information from third parties

We may receive information about you from third-party services when you choose to connect them to Peoplo. For example, if you sign in via Google or LinkedIn to log in or authenticate, we receive basic profile information from those providers, such as your name, email address, and profile picture. We use this information only to complete the account you initiated, and to communicate with you as necessary.

We may also receive information from payment processors, identity verification services, or integration partners in the course of providing our Services. Any third-party data we receive is handled in accordance with this Privacy Policy and any applicable agreements with those third parties.

How we use information

2.1 Service delivery

The primary purpose for which we collect data is to deliver, operate and maintain the Peoplo platform and all of its modules. This includes creating and managing your account and workspace, processing HR records, enabling attendance tracking via Peoplo Lens, facilitating remote-access sessions via Peoplo Connect, and logging productivity data via Peoplo Tracker.

2.2 Communication

We use your contact information to send you service-related communications, including account confirmations, billing receipts, password reset alerts, and notices about material changes to our terms or policies that are relevant to your use of our Services. You may opt out of non-essential communications at any time by clicking the unsubscribe link in any marketing email.

2.3 Analytics and platform improvement

We analyze aggregated and anonymized usage data to understand how users interact with our platform, identify areas for improvement, diagnose technical issues, and develop new features. This analysis is conducted on an aggregate basis and does not involve identifying any individual user for profiling. Our goal is to build a better product for all our users based on real usage patterns and feedback.

2.4 Legal compliance and fraud prevention

We may use your information to comply with applicable laws, regulations, legal processes, or government requests. We also use it to enforce our Terms of Conditions, detect and prevent fraudulent activity, protect the rights and safety of Peoplo, our users, and third parties, and respond to claims of illegal activity or violations of third-party rights.

2.5 Business operations

We use certain information internally to carry out our business operations, including billing and payment processing, account administration, financial reporting, and responding to legal inquiries. We may use anonymized and aggregated data for business planning, benchmarking, and industry research.

Sharing & disclosure

3.1 Trusted service providers

We may share data with carefully selected third-party service providers who assist us in operating our platform and delivering our Services. These providers include cloud infrastructure providers (such as Amazon Web Services), payment processors, email delivery services, and customer support tools. All such providers are required to sign data-processing agreements and are contractually prohibited from using your data for any purpose other than performing the services they provide to us.

3.2 Within your organization

Peoplo is a business platform. Data associated with your organization's account - including employee records, attendance logs, productivity reports and HR data - is accessible to authorized administrators within your organization according to the permissions you configure. Peoplo facilitates this access but does not independently control how your organization uses this data. Your organization, as the data controller, is responsible for defining appropriate access policies.

3.3 Business transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred to the acquiring entity as part of that transaction. If such a transfer occurs, we will provide notice on our website and, where required by applicable law, notify affected users and offer choices regarding their data.

3.4 Legal requirements

We may disclose your personal information if we believe in good faith that such disclosure is required or permitted by law, including to comply with a subpoena, court order, or other legal process; to respond to government agency requests; to protect the rights and safety of Peoplo, our users or third parties; or to prevent imminent harm to a person or property.

3.5 No sale of personal data

Peoplo does not sell, rent, or lease your personal information to any third party for commercial or advertising purposes. We do not engage in data brokerage. Your data is not an asset we trade - it is information entrusted to us for the purpose of providing our Services, and we treat it accordingly.

Cookies & tracking technologies

Peoplo uses cookies, web beacons, pixels, and similar technologies to operate our website and platform effectively. Cookies are small text files that are stored on your browser and allow us to recognize your browser or device and remember certain preferences or session information.

Types of cookies we use

• Essential cookies - strictly necessary for the platform to function. These enable core functions such as authentication, session management, and security. Without them, our Services cannot be delivered.
• Functional cookies - remember your preferences and settings, such as your language selection, display preferences, or saved configurations. These improve your experience by personalizing the platform to your needs.
• Analytics cookies - help us understand how visitors interact with our website and platform. This helps us understand which features are most used, identify navigation issues, and improve the overall user experience. We use tools such as Google Analytics for this purpose.
• Marketing cookies - we may use certain cookies to understand the effectiveness of our marketing campaigns. These cookies do not track your personal identity and are used only in aggregate.

Data retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements. The specific retention period for different categories of data depends on the type of data, the context in which it was collected, and applicable legal requirements.

For active accounts, we retain your data for the duration of your account subscription. If you close your account or request deletion, we will delete your personal data or de-identify it, except where retained records may be required for up to seven years in compliance with accounting and tax regulations.

Productivity screenshots captured by Peoplo Tracker are stored according to the retention window configured by your organization's administrator. Our default retention window is 90 days for screenshots, unless a longer or shorter retention period has been configured by your administrator.

Biometric data processed by Peoplo Lens is retained only for the duration required to operate the attendance function. Administrators can define the biometric retention window for employee offboarding.

International data transfers

Peoplo serves customers in multiple countries. As a result, your personal information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that differ from the laws of your country.

Our primary data infrastructure is hosted in Amazon Web Services (AWS) regions, and data centers configured for performance and compliance with our global customer base. We select data centers with consideration for applicable data residency requirements and will accommodate data residency requests where technically feasible.

Security

The security of your data is critically important to us. Peoplo implements a comprehensive set of technical and organizational security measures designed to protect your personal and business information against unauthorized access, disclosure, alteration, or destruction.

Our security measures include AES-256 bit encryption for data at rest and in transit, encrypted session protocols for Peoplo Connect, secure private cloud infrastructure on AWS, industry-standard access control (RBAC) to limit internal data access, multi-factor authentication (MFA) options for platform login, and regular security reviews of our infrastructure. Our platform is hosted on AWS infrastructure, which publishes its own uptime and security certifications independently of Peoplo.

We maintain a SOC 2-aligned set of internal controls and are working toward formal third-party certification. Our internal security practices include monitoring our systems for suspicious activity, and we will notify affected users and relevant authorities in accordance with applicable data protection laws, including within the timeframes required by GDPR (72 hours) where applicable.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users in accordance with applicable data protection laws, including within the timeframes required by GDPR (72 hours) where applicable.

While we take every reasonable precaution to safeguard your data, no system of electronic storage is completely secure. We encourage you to protect your own account by using a strong, unique password, enabling multi-factor authentication where available, and notifying us immediately at support@peoplo.io if you suspect any unauthorized access to your account.

Children's privacy

Peoplo's Services are intended for use by businesses and professionals and are not directed at children under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children.

If we become aware that we have inadvertently collected personal information from a child without appropriate parental or guardian consent, we will take steps to delete that information as promptly as possible. If a child has provided us with personal information, please contact us at support@peoplo.io.

Your rights

Depending on your location and applicable law, you may have the following rights with respect to your personal data. We are committed to honoring these rights and will respond to valid requests within the timeframes required by applicable law (generally 30 days).

Right of access

You have the right to request a copy of the personal data we hold about you, along with information about how it is used, and where it was obtained.

Right to rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update most information directly within your account settings, or by contacting us.

Right to erasure

You have the right to request that we delete your personal data in certain circumstances. This right is subject to certain exceptions, such as where we are legally obligated to retain the information.

Right to restriction of processing

In certain circumstances, you have the right to request that we restrict the processing of your personal data - for example, while a dispute about its accuracy is being resolved.

Right to data portability

Where applicable, you have the right to receive your personal data in a structured, commonly used and machine-readable format, or to request that we transfer it directly to another service provider where technically feasible.

Right to object

You have the right to object to the processing of your personal data for certain purposes, including direct marketing, in certain circumstances.

Rights related to automated decision-making

Peoplo does not use your personal data to make fully automated decisions that produce significant legal or similarly significant effects without human involvement. Any productivity insights provided by Peoplo are intended to inform, not replace, human judgment by administrators or HR professionals within your organization.

How to exercise your rights

To exercise any of the above rights, please submit a request to support@peoplo.io with the subject line "Data Rights Request." We may need to verify your identity before processing your request. If you are an employee whose data is managed through Peoplo, we recommend directing your request through your employer, as they control the data you have provided; however, we will also respond to reasonable requests submitted directly to us.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will update the "Effective Date" at the top of this policy and, for material changes, provide additional notice such as an email notification or in-platform banner.

We encourage you to review this Privacy Policy periodically to stay informed about how Peoplo collects, uses, and protects your information. Continued use of our Services after any changes take effect constitutes your acceptance of the revised policy.

Contact

If you have any questions, concerns, or requests about this Privacy Policy or about how Peoplo handles your personal data, please do not hesitate to reach out.

Email: support@peoplo.io
Website: https://peoplo.io