Privacy policy

BPO Brigade (Private) Limited, Plot 90, Block D2, Phase 1, Johar Town, Lahore, Punjab, Pakistan. For any privacy question, correction or complaint, write to hr@bpobrigade.com.

Identity and employment. Name, employee ID, company email, personal email and phone number, CNIC, date of joining, department, designation, employment type, and (if applicable) resignation or termination records.

Attendance and time. Daily check-in and check-out times, late minutes, absences, leave, holidays, work-from-home declarations and check-ins, and approved overtime.

Requests and documents. Leave, half-day, late excuse and overtime requests, the reason you write, and any file or photo you attach as supporting evidence. Company documents issued to you, such as contracts and letters.

Payroll. Salary, allowances, deductions, warnings and monthly salary slips, together with the bank or cash split shown on the slip.

Profile photo. Only if you choose to upload one from your device gallery. The app never opens the camera or the microphone.

Technical records. Your device push-notification token (so we can send you alerts), and the IP address, browser or device name and timestamp of sign-ins and changes, kept in an audit log for security.

The app does not collect your location, contacts, call logs, messages, files outside what you deliberately attach, or any advertising identifier.

To administer your employment: record attendance, route and decide leave and overtime requests, calculate deductions and salaries, issue salary slips and documents, manage assets allocated to you, and notify you about decisions, holidays and payslips. We also use sign-in records to protect accounts against unauthorised access.

We do not use your data for advertising, we do not sell or rent it, and we do not profile you for any purpose outside employment administration.

Inside the company, access depends on role. Your own portal shows only your records. HR, Accounts, your department manager, your director and the system administrator see the records their role requires. These limits are enforced by database security rules, not just by what the screens display.

Outside the company, we use service providers strictly to run the system: Supabase (database, sign-in and file storage), Vercel (web hosting), Resend (notification email) and Expo (push notification delivery). They process data on our instructions only. We may also disclose data where the law or a competent authority requires it.

All traffic is encrypted in transit. Passwords are stored hashed and are never visible to us. Console accounts additionally require a Google Authenticator code. After four wrong sign-in attempts an account is locked for ten minutes. Every change to employee, attendance and payroll records is written to an audit log with the person who made it.

Employment, attendance and payroll records are kept for as long as you work with us and afterwards for the period required by Pakistani tax, labour and company law. Portal access is disabled when you leave. Push-notification tokens are deleted when you sign out of the app or uninstall it.

You can view your own profile, attendance, requests, documents and salary slips in the portal or app at any time. You can ask HR to correct anything that is wrong. You can turn off notification email in Settings, and turn off push notifications from your device settings. Because these records are needed to run payroll and meet legal obligations, we cannot delete an active employment record on request; write to HR and we will explain what can be removed.

The app is for employed adults only and is not directed at anyone under 18.

If this policy changes we will update this page and the date at the top. Material changes will also be announced inside the app.