1

This Privacy Policy explains how Crosspt HRIS-MT website collects, uses, and protects personal information when users access our Human Resource Information System (HRIS). By using our services, you agree to the practices described in this policy.

2

Information We Collect

  • Personal Information: Name, email address, contact details, employment records, payroll data, and other HR‑related information.
  • Authentication Data: When you sign up or log in using Google/Gmail OAuth, we receive your verified email address and basic profile information (e.g., name, profile photo if available).
  • System Usage Data: Logs, device information, and activity within the HRIS platform.
3

We use collected information to:

  • Provide secure access to the HRIS system.
  • Authenticate users via Google OAuth to ensure account security.
  • Manage HR functions such as payroll, attendance, and employee records.
  • Improve system performance and user experience.
  • Comply with legal and regulatory requirements.
4

Google OAuth Integration

  • We use Google OAuth for sign‑up and login to simplify authentication and enhance security.
  • By choosing Google login, you authorize us to access your Google account’s basic profile information and verified email address.
  • We do not access your Gmail inbox, contacts, or other private data beyond what is necessary for authentication.
5

Data Sharing and Disclosure

We do not sell or rent your personal data. We may share information only with:

  • Authorized HR administrators within your organization.
  • Third‑party service providers (e.g., cloud hosting, payroll processors) bound by confidentiality agreements.
  • Government agencies, if required by law.
6

Data Protection

We implement industry‑standard security measures, including:

  • Encryption of data in transit and at rest.
  • Role‑based access control.
  • Regular audits and monitoring.
7

User Rights

Under the Philippines Data Privacy Act of 2012, you have the right to:

  • Access your personal data.
  • Request correction of inaccurate information.
  • Withdraw consent for data processing (subject to system limitations).
  • File complaints with the National Privacy Commission (NPC).
8

Retention of Data

We retain employee and HR records only as long as necessary for legitimate business and legal purposes.

9

Updates to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on our HRIS platform footer under “Privacy Policy.”