NetAmbit Value First Services Private Limited (“NetAmbit”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store, disclose, retain, and protect information when you use our applications, websites, platforms, products, and related services (collectively, the “Services”).
By using our Services, you acknowledge that you have read and understood this Privacy Policy. Where required by applicable law, we will obtain your consent before collecting or processing personal information.
Depending on how you use our Services, we may collect the following categories of information:
This may include information such as:
When you use our Services, we may automatically collect certain technical information, including:
Where required for a particular Service, we may collect location information associated with an attendance or verification event, including GPS/location information provided by the device.
Location information is used for the purposes described in this Privacy Policy, including attendance verification, security, audit, and prevention of misuse.
Certain features of our Services, including employee attendance verification, may use the device camera to capture a facial image for verification.
For attendance verification, the application may capture a facial image through the device camera.
The verification process may involve:
The captured facial image is processed by NetAmbit's own system for the purpose of attendance verification.
Our system may perform checks including:
Facial verification is used solely for purposes associated with attendance verification and related audit and security requirements.
The facial image is not used for:
NetAmbit does not sell the captured facial image or provide it to third-party facial-recognition, facial-analysis, advertising, or unrelated service providers.
The facial verification and liveness processing are performed by NetAmbit's own system. We do not use an external third-party facial-recognition or facial-analysis service to process the captured facial image.
Our application and systems may use infrastructure or hosting providers to operate the Services. The database supporting the attendance system is hosted on Microsoft Azure in India. Microsoft Azure provides infrastructure and hosting services; it does not perform the facial verification or liveness processing described in this section.
The facial image captured through the device camera is processed for attendance verification and is stored securely in our database for attendance verification, audit, security, and administrative purposes.
Following the verification process, NetAmbit may store the captured facial image together with related attendance and verification information, which may include:
The facial image and related attendance and verification information are stored in a database hosted on Microsoft Azure in India
Access to the stored facial image and related attendance and verification information is restricted to authorized personnel and systems based on business and security requirements.
NetAmbit does not use the stored facial image for advertising, marketing, profiling, or purposes unrelated to attendance verification and related audit, security, and administrative requirements.
The captured photo and related attendance information are retained for one (1) year from the date of the relevant attendance verification event, unless a longer retention period is required or permitted by applicable law.
At the end of the applicable retention period, such photo and attendance verification data is automatically deleted or otherwise securely disposed of in accordance with our retention procedures, subject to applicable legal requirements.
We use reasonable technical, organizational, and administrative safeguards designed to protect information against unauthorized access, disclosure, alteration, misuse, or destruction.
These measures may include access controls, authentication mechanisms, restricted administrative access, system monitoring, and appropriate security measures for our hosted infrastructure.
No method of electronic transmission or storage can be guaranteed to be completely secure. However, NetAmbit takes reasonable steps to protect information handled through the Services.
Depending on the Services used by you, we may receive information from third parties where permitted by applicable law.
For example, information may be provided by:
Any information received from third parties will be handled in accordance with this Privacy Policy and applicable law.
We may use personal information for purposes including:
We will not use information collected for one purpose for an unrelated purpose where such use is prohibited by applicable law or requires additional consent.
We may engage employees, contractors, consultants, technology providers, infrastructure providers, and other service providers to support the operation of our Services.
Such parties may have limited access to personal information only where reasonably necessary to perform their assigned functions and subject to appropriate confidentiality, security, and contractual requirements.
With respect to facial verification, the captured facial image is not provided to an external facial-recognition or facial-analysis provider.
We may disclose personal information where we reasonably believe disclosure is necessary to:
Where legally permitted, we will take reasonable steps to limit disclosures to the information necessary for the relevant purpose.
If NetAmbit undergoes a merger, acquisition, restructuring, reorganization, financing, sale of assets, or similar corporate transaction, personal information may be transferred as part of that transaction, subject to applicable law.
Any successor or recipient of personal information will be expected to handle such information in accordance with applicable legal requirements and appropriate privacy and security safeguards.
We may use information that has been aggregated, anonymized, or otherwise reasonably de-identified so that it does not identify an individual for legitimate business purposes, including:
Such information will not be used to identify an individual except where permitted by applicable law.
We may communicate with you regarding:
Where we send promotional or marketing communications, we will provide an appropriate mechanism to opt out where required by applicable law.
You may contact us using the details provided in this Privacy Policy regarding communications you receive from us.
Our websites and online Services may use cookies, web beacons, pixels, log files, and similar technologies to:
You may be able to control cookies through your browser or device settings. Disabling certain technologies may affect the functionality of some Services.
Any third-party technology used by our Services will be subject to the applicable provider's practices and our contractual and privacy requirements, as applicable.
NetAmbit takes reasonable technical, organizational, and administrative measures designed to protect personal information, including stored facial images and attendance verification information, against unauthorized access, loss, misuse, alteration, disclosure, or destruction.
For facial images and attendance verification information, our security measures may include:
The facial images and related attendance verification information are stored in a database hosted on Microsoft Azure in an India region.
Access to stored facial images is restricted to authorized personnel and systems that require such access for legitimate attendance verification, audit, security, or administrative purposes.
We take reasonable steps to protect stored facial images and other personal information. However, no method of electronic transmission or storage can be guaranteed to be completely secure.
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by applicable law.
For facial attendance verification specifically:
Attendance verification results and related attendance information are retained for one (1) year from the applicable attendance verification event.
Such attendance verification information is automatically deleted or securely disposed of after the applicable retention period, subject to applicable legal requirements.
Different categories of information may have different retention periods depending on their purpose and applicable legal or contractual requirements.
You may contact us regarding requests relating to your personal information, including requests for access, correction, deletion, or other applicable privacy rights.
For attendance facial verification:
Following expiry of that period, such information is automatically deleted or securely disposed of, subject to applicable legal requirements.
Where deletion is requested before the end of the applicable retention period, we will consider the request in accordance with applicable law and any legal, contractual, security, or legitimate operational requirements that may require continued retention.
Requests may be submitted using the contact details provided in Section 16 or Section 18 of this Privacy Policy.
Our Services are not intended for children where use of the Services is prohibited by applicable law.
We do not knowingly collect personal information from children in circumstances where such collection is prohibited by law.
If you believe that a child has provided personal information to us in violation of applicable requirements, please contact us so that we can take appropriate action.
Depending on applicable law, you may have rights relating to your personal information, which may include:
Certain rights may be subject to legal or contractual limitations.
To exercise an applicable right, please contact us using the details provided below.
We may need to verify your identity before processing a privacy request.
For privacy-related questions, concerns, or grievances, you may contact our Grievance Officer:
We will handle grievances in accordance with applicable law and our internal procedures.
We may update this Privacy Policy from time to time to reflect changes in our Services, technology, legal requirements, or privacy practices.
When we make changes, we will update the “Last Updated” date at the beginning of this Privacy Policy.
The updated Privacy Policy will become effective when posted or otherwise communicated, unless a different effective date is specified.
We encourage you to review this Privacy Policy periodically to remain informed about how we handle personal information.
If you have questions, concerns, or requests relating to this Privacy Policy or our handling of personal information, please contact us:
For matters relating specifically to privacy grievances, you may also contact the Grievance Officer identified in Section 16.