Privacy Policy

NetAmbit Value First Services Private Limited

Last Updated: 26th October, 2026

NetAmbit Value First Services Private Limited (“NetAmbit”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, disclose, retain, and protect information when you use our applications (including the NetOne mobile application, the “NetOne app”), websites, platforms, products, and related services (collectively, the “Services”).

By using our Services, you acknowledge that you have read and understood this Privacy Policy. Where required by applicable law, we will obtain your consent before collecting or processing personal information.

1. Information We Collect

Depending on how you use our Services, we may collect the following categories of information:

1.1 Personal Information

This may include information such as:

  • Name;
  • Email address;
  • Mobile or telephone number;
  • Employee or user identification details;
  • Employment-related information;
  • Education and work experience information, where applicable;
  • Information provided when communicating with us;
  • Account, login, and authentication information;
  • Attendance and verification information; and
  • Other information you voluntarily provide to us.

1.2 Device and Technical Information

When you use our Services, we may automatically collect certain technical information, including:

  • IP address;
  • Device type and operating system;
  • Browser type;
  • Application version;
  • Device identifiers, where applicable;
  • Network information;
  • Date and time of access;
  • Usage and interaction information; and
  • Diagnostic and security information.

1.3 Location Information

Where required for a particular Service, we may collect location information associated with an attendance or verification event, including GPS/location information provided by the device.

Location information is used for the purposes described in this Privacy Policy, including attendance verification, security, audit, and prevention of misuse.

2. Face Data and Attendance Verification

This Section 2 explains how NetAmbit collects, uses, shares, stores, retains and deletes Face Data through any NetAmbit app that uses face verification for attendance, including the NetOne app (each, an “App”). If anything, elsewhere in this Privacy Policy is inconsistent with this Section 2, this Section 2 applies to Face Data.

In this Section, “Face Data” means:

  • your registered photograph: the photograph of your face captured in the App when you set up face verification;
  • your attendance photographs: the photographs of your face captured in the App each time you verify your attendance; and
  • any information derived from these photographs, including the results of the checks described in Section 2.2.

2.1 What Face Data We Collect and How We Collect It

  • Registered photograph: captured once, using your phone’s camera inside the App, when you set up face verification.
  • Attendance photographs: captured using your phone’s camera inside the App, each time you verify your attendance.
  • Verification results: whether each check described in Section 2.2 was passed.

The camera is used only when you start face registration or attendance verification, and the live camera view is shown on your screen while it is in use. The App does not capture your face at any other time, and it does not monitor you continuously. We do not store video recordings of you, and we do not collect any other biometric information (such as fingerprints) through the App.

With each attendance verification, the App also records your employee or user ID, the date and time, and the GPS location of the attendance event. These attendance records are not Face Data and are kept as described in Section 12.

We collect Face Data only after you have given your consent as described in Section 2.4.

2.2 Why We Collect Face Data and How We Use It

We collect and use Face Data for one purpose only: to verify that the person marking attendance in the App is you. This includes keeping a record of each verification so that your attendance can be checked if it is disputed, or if misuse (such as someone else marking attendance for you) is suspected.

Verification works as follows:

  1. Once you have given your consent, the photograph is sent from your phone to NetAmbit’s servers over an encrypted connection.
  2. NetAmbit’s own verification system checks that:
    • exactly one face is visible in the photograph;
    • the photograph passes liveness detection, confirming that a real, live person is in front of the camera and not a photograph, screenshot, video or similar imitation; and
    • the face in the attendance photograph matches your registered photograph.
  3. The result (verified or not verified) is recorded against that attendance entry.

All checks are performed by NetAmbit’s own system. We do not use any external facial-recognition or facial-analysis service.

Face Data is never used to log in to the App or to authenticate your account. Signing in to the App does not use your face.

We do not use Face Data for any other purpose. If we ever wish to use Face Data for a new purpose, we will tell you first and will do so only with your fresh consent.

2.3 What We Never Do with Face Data

NetAmbit never:

  • uses Face Data to log in to, unlock or authenticate any account;
  • uses Face Data for advertising or marketing of any kind, or to target you;
  • uses Face Data for surveillance, or to track you for anything other than attendance verification;
  • uses Face Data to build a profile about you, to identify unknown or anonymous people, or for analytics, behavioral analysis or data mining; or
  • sells, rents, trades or otherwise provides Face Data to advertising platforms, analytics providers, data brokers, information resellers or similar parties.

2.4 Your Consent Comes First

Your consent matters to us. We collect Face Data only with your explicit consent, and no photograph of your face is sent to or stored on our servers until you have given it.

Your consent covers sending your photographs from the App to our servers and using them for attendance verification as described in this Section 2. You can withdraw it at any time, as explained in Section 2.7.

Face verification is your choice. If you do not give consent, or you withdraw it later, your reporting manager or the HR team will mark your attendance instead.

2.5 Sharing of Face Data

We do not share Face Data with any third party.

Face Data is stored on servers hosted by Microsoft Azure in India. Microsoft acts only as our cloud hosting provider: it stores Face Data on our behalf, performs no face verification or liveness checks, and is not permitted to use Face Data for its own purposes.

If a law, court order or government authority requires NetAmbit to disclose Face Data, we will disclose only what is legally required and, where the law allows, we will tell you.

If we ever need to share Face Data with a third party in future, we will tell you in advance who the recipient is and why, and we will share it only with your explicit consent. Face Data will never be shared with advertising platforms, analytics providers, data brokers or information resellers.

Our equal-protection promise: we confirm that any third party with whom we share Face Data, including our hosting provider (Microsoft Azure), any future service provider and any successor to NetAmbit’s business, will provide the same or equal protection of Face Data as stated in this Privacy Policy, and will use it only for the purpose described in Section 2.2.

2.6 How Long We Keep Face Data

  • Attendance photographs and their verification results are kept for one (1) year after the date they were captured, so that attendance can be checked if it is disputed or misuse is suspected. They are then deleted automatically.
  • Your registered photograph is kept only while your account is active. When you are removed as a user or your account is deactivated, your registered photograph is deleted within thirty (30) days.

The only exception to these periods, and to deletion under Section 2.7, is where a law, court order or government authority requires us to keep a specific item of Face Data for longer. We then keep only that item, only for as long as required, and use it for no other purpose.

2.7 How to Withdraw Consent or Delete Your Face Data

Email privacyofficer@netambit.net at any time to withdraw your consent, to have your Face Data deleted immediately, or both; either request leads to the steps below. Please include your name and employee ID (if applicable) so that we can identify your account.

  1. We will promptly stop collecting and using your Face Data and, within three (3) working days of receiving your email, send you an acknowledgment.
  2. We will delete all of your Face Data (your registered photograph, all of your attendance photographs and their verification results) without undue delay, and in any case within thirty (30) days of the date we receive your request.
  3. We will confirm by email once the deletion is complete.

After you withdraw consent, your reporting manager or the HR team will mark your attendance instead. If you later wish to use face verification again, you can give consent again and register a new photograph.

Your attendance records (employee or user ID, date, time, GPS location and attendance status) do not contain Face Data and are kept as described in Section 12.

You can also turn off camera access for the App at any time in your phone’s settings. This stops new photographs from being captured but does not delete Face Data we already hold; to delete it, email us as described above.

2.8 How We Protect Face Data

  • Face Data is encrypted in transit (from your phone to our servers) and at rest (while stored).
  • Face Data is stored on Microsoft Azure servers located in India. Microsoft Azure is independently audited against internationally recognized security standards, including ISO/IEC 27001 and SOC 2 Type 2.
  • Access to Face Data is restricted to authorized NetAmbit personnel and systems that need it for attendance verification or to resolve attendance disputes.
  • We carry out regular security audits and monitoring of the systems that store Face Data.
  • If a security incident affects your Face Data, we will notify you as required by applicable law.

2.9 Contact for Face Data

For any question, consent withdrawal or deletion request relating to Face Data, contact our Grievance Officer at privacyofficer@netambit.net.

3. Information Received from Third Parties

Depending on the Services used by you, we may receive information from third parties where permitted by applicable law.

For example, information may be provided by:

  • Your employer or organization;
  • Service providers acting on behalf of your employer or organization;
  • Platforms or systems integrated with our Services;
  • Business partners; or
  • Other sources where you have authorized the disclosure or where disclosure is otherwise permitted by law.

Any information received from third parties will be handled in accordance with this Privacy Policy and applicable law.

4. How We Use Personal Information

We may use personal information for purposes including:

  • Providing and operating the Services;
  • Creating and managing user accounts;
  • Attendance management and verification;
  • Authentication and security;
  • Maintaining attendance and related records;
  • Preventing fraud, misuse, and unauthorized access;
  • Responding to questions, requests, and support inquiries;
  • Communicating with users;
  • Maintaining and improving our Services;
  • Quality control and operational purposes;
  • Troubleshooting and resolving technical issues;
  • Complying with applicable laws, regulations, and legal processes;
  • Protecting our rights, property, and systems; and
  • Other purposes disclosed to you at or before the time information is collected or otherwise permitted by applicable law.

We will not use information collected for one purpose for an unrelated purpose where such use is prohibited by applicable law or requires additional consent.

5. Access by Service Providers and Authorized Personnel

We may engage employees, contractors, consultants, technology providers, infrastructure providers, and other service providers to support the operation of our Services.

Such parties may have limited access to personal information only where reasonably necessary to perform their assigned functions and subject to appropriate confidentiality, security, and contractual requirements.

With respect to facial verification, the captured facial image is not provided to an external facial-recognition or facial-analysis provider.

6. Disclosure Required by Law

We may disclose personal information where we reasonably believe disclosure is necessary to:

  • Comply with applicable law, regulation, legal process, court order, or governmental request;
  • Protect the rights, property, or safety of NetAmbit, our users, employees, or others;
  • Detect, investigate, or prevent fraud, security incidents, or other unlawful activity; or
  • Establish, exercise, or defend legal rights.

Where legally permitted, we will take reasonable steps to limit disclosures to the information necessary for the relevant purpose.

7. Business Transfers

If NetAmbit undergoes a merger, acquisition, restructuring, reorganization, financing, sale of assets, or similar corporate transaction, personal information may be transferred as part of that transaction, subject to applicable law.

Any successor or recipient of personal information will be expected to handle such information in accordance with applicable legal requirements and appropriate privacy and security safeguards.

8. Aggregated and Non-Personal Information

We may use information that has been aggregated, anonymized, or otherwise reasonably de-identified so that it does not identify an individual for legitimate business purposes, including:

  • Service analysis;
  • Statistics;
  • System performance;
  • Business planning;
  • Research;
  • Reporting; and
  • Service improvement.

Such information will not be used to identify an individual except where permitted by applicable law.

9. Communications and Marketing

We may communicate with you regarding:

  • Your account;
  • Services you use;
  • Attendance or verification matters;
  • Security or administrative matters;
  • Service updates;
  • Support requests; and
  • Other communications necessary to provide or administer the Services.

Where we send promotional or marketing communications, we will provide an appropriate mechanism to opt out where required by applicable law.

You may contact us using the details provided in this Privacy Policy regarding communications you receive from us.

10. Cookies and Similar Technologies

Our websites and online Services may use cookies, web beacons, pixels, log files, and similar technologies to:

  • Enable functionality;
  • Remember preferences;
  • Understand how our Services are used;
  • Improve performance;
  • Maintain security; and
  • Analyze usage and service performance.

You may be able to control cookies through your browser or device settings. Disabling certain technologies may affect the functionality of some Services.

Any third-party technology used by our Services will be subject to the applicable provider’s practices and our contractual and privacy requirements, as applicable.

11. Information Security

NetAmbit takes reasonable technical, organizational, and administrative measures designed to protect personal information, including stored facial images and attendance verification information, against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

For facial images and attendance verification information, our security measures may include:

  • Access controls and authentication mechanisms;
  • Restricted access to authorized personnel and systems;
  • Role-based access and authorization controls, where applicable;
  • Secure database and infrastructure controls;
  • System monitoring and logging;
  • Administrative and technical safeguards designed to prevent unauthorized access or use; and
  • Appropriate security measures for our hosted infrastructure.

The facial images and related attendance verification information are stored in a database hosted on Microsoft Azure in India.

Access to stored facial images is restricted to authorized personnel and systems that require such access for attendance verification or to resolve attendance disputes, as described in Section 2.

We take reasonable steps to protect stored facial images and other personal information. However, no method of electronic transmission or storage can be guaranteed to be completely secure.

12. Data Retention

We retain personal information only for as long as it is needed for the purpose for which it was collected, as described in this Privacy Policy. Once that purpose has been completed, we delete the information or securely dispose of it, unless a law requires us to keep it for longer.

Attendance records (employee or user ID, date, time, GPS location and attendance status) are retained for one (1) year from the relevant attendance event and are then automatically deleted or securely disposed of, subject to applicable legal requirements.

Different categories of information may have different retention periods depending on their purpose and applicable legal requirements. Face Data is retained and deleted as described in Section 2.6.

13. Deletion and Privacy Requests

You may contact us regarding requests relating to your personal information, including requests for access, correction, deletion, or other applicable privacy rights.

Requests may be submitted using the contact details provided in Section 16 or Section 18 of this Privacy Policy.

14. Children’s Privacy

Our Services are not intended for children where use of the Services is prohibited by applicable law.

We do not knowingly collect personal information from children in circumstances where such collection is prohibited by law.

If you believe that a child has provided personal information to us in violation of applicable requirements, please contact us so that we can take appropriate action.

15. Your Privacy Rights

Depending on applicable law, you may have rights relating to your personal information, which may include:

  • Requesting information about the personal information we process;
  • Requesting correction of inaccurate or incomplete information;
  • Requesting deletion of personal information where applicable;
  • Requesting withdrawal of consent where processing is based on consent;
  • Requesting information regarding our processing practices; and
  • Raising a grievance or complaint regarding the handling of your personal information.

Certain rights may be subject to legal or contractual limitations.

To exercise an applicable right, please contact us using the details provided below.

We may need to verify your identity before processing a privacy request.

16. Grievance Officer

For privacy-related questions, concerns, or grievances, you may contact our Grievance Officer:

  • Grievance Officer: Kushagra Vats | +91 77598 56780 | Email: privacyofficer@netambit.net
  • Please include sufficient information to allow us to understand and address your request.

We will handle grievances in accordance with applicable law and our internal procedures.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, technology, legal requirements, or privacy practices.

When we make changes, we will update the “Last Updated” date at the beginning of this Privacy Policy.

The updated Privacy Policy will become effective when posted or otherwise communicated, unless a different effective date is specified.

We encourage you to review this Privacy Policy periodically to remain informed about how we handle personal information.

18. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or our handling of personal information, please contact us:

  • NetAmbit Value First Services Private Limited
    Email: care.business@netambit.net

For matters relating specifically to privacy grievances, you may also contact the Grievance Officer identified in Section 16.

End of Privacy Policy