Privacy Policy — Pan India Security

1. Introduction

Pan India Securities Pvt Ltd ("we", "our", "us", or "the Company") operates the Pan India Security mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

By downloading, installing, or using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the App.

2. Information We Collect

2.1 Personal Information

We collect the following personal information when you register or use the App:

Data Type	Details	Purpose
Name	Full name of the user	User identification and profile management
Phone Number	Mobile number used for login	OTP-based authentication and account verification
Aadhaar Number	Government-issued ID number	Identity verification as per regulatory requirements
PAN Number	Permanent Account Number	Payroll processing and tax compliance
Address	Residential address	Employee records and communication
Bank Account Details	Account number, IFSC code	Salary disbursement
Emergency Contact	Name and phone number	Emergency communication
Physical Attributes	Height, weight	Guard deployment suitability assessment
Education	Educational qualification	Employment records

2.2 Location Data

        ⚠️ Important: Our App collects precise GPS location data 
        to verify that security personnel are physically present at their assigned work sites 
        during attendance check-in and check-out.
    

When collected: Only when the user actively initiates an attendance check-in or check-out action within the App.
What is collected: Latitude and longitude coordinates at the time of check-in and check-out.
Why: To validate that the user is within the configured geo-fence radius of their assigned site, preventing fraudulent/proxy attendance.
Background location: We do NOT collect continuous background location data. Location is only accessed at the moment of attendance submission.

2.3 Camera and Photos

        ⚠️ Important: Our App captures selfie photographs 
        during attendance check-in and check-out for identity verification.
    

When collected: Only during attendance check-in and check-out.
What is collected: A front-camera selfie photograph of the user.
Why: To verify the identity of the person marking attendance and prevent proxy attendance by another individual.
Storage: Selfie images are stored securely on our cloud servers and associated with the attendance record.

2.4 Documents

Users or administrators may upload documents such as:

Aadhaar card copy
PAN card copy
Profile photographs
Police verification documents
Site inspection photographs

These documents are stored securely and used solely for employment verification and operational purposes.

2.5 Device Information

FCM Token: Firebase Cloud Messaging token for sending push notifications (shift reminders, attendance alerts, salary notifications).
Device type and OS version: For app compatibility and troubleshooting.

2.6 Usage Data

We may collect anonymous usage data such as app interaction patterns and crash reports (via Sentry) to improve app stability and performance. This data does not personally identify you.

3. How We Use Your Information

We use the collected information for the following purposes:

Authentication: Verify your identity via OTP-based phone login.
Attendance Management: Record and verify GPS-based attendance with selfie confirmation.
Payroll Processing: Calculate salaries based on attendance, apply deductions (uniforms, penalties, advances), and generate salary slips.
Workforce Management: Manage guard profiles, site assignments, shift scheduling, and deployment tracking.
Site Inspections: Enable managers to conduct and report on site inspections with photographic evidence.
Notifications: Send push notifications for shift reminders, attendance alerts, salary generation, and inspection schedules.
Recruitment: Manage the candidate pipeline for hiring new security personnel.
Reporting: Generate operational reports for attendance, payroll, and inspections.
Compliance: Meet regulatory requirements for employee documentation and record-keeping.

4. Data Sharing and Disclosure

We do NOT sell, trade, or rent your personal information to third parties. Your data may be shared only in the following limited circumstances:

Service Providers: We use Supabase (database and storage), Firebase (authentication and notifications), and Sentry (crash reporting) as third-party service providers. These providers process data on our behalf and are contractually obligated to protect your information.
Within the Organization: Authorized administrators and managers within Pan India Securities Pvt Ltd may access relevant data as required for operational management (e.g., attendance records, site assignments).
Legal Requirements: We may disclose your information if required to do so by law, court order, or governmental regulation.
Client Reporting: Anonymized or aggregated attendance and staffing data may be shared with our security service clients for operational transparency.

5. Data Storage and Security

Storage: Your data is stored on secure cloud servers provided by Supabase (PostgreSQL database) and Firebase.
Encryption: All data transmitted between the App and our servers is encrypted using HTTPS/TLS protocols.
Access Control: We implement role-based access control (RBAC) and row-level security (RLS) policies to ensure that users can only access data relevant to their role.
Authentication: JWT-based session tokens with automatic expiry protect your account from unauthorized access.
Backups: Regular automated database backups are maintained to prevent data loss.

6. Data Retention

Active employees: Data is retained for the duration of employment and operational need.
Former employees: Personal data is retained for a period of up to 3 years after termination or deactivation, as required for legal compliance, payroll records, and audit purposes.
Attendance selfies: Retained for up to 12 months, after which they may be automatically purged.
Inspection photos: Retained for up to 24 months.
Candidates (recruitment): Data of unselected candidates is retained for up to 12 months and then deleted.

7. Your Rights

Depending on applicable laws, you may have the following rights regarding your personal data:

Right to Access: Request a copy of the personal data we hold about you.
Right to Correction: Request correction of inaccurate or incomplete data.
Right to Deletion: Request deletion of your personal data (subject to legal retention requirements).
Right to Withdraw Consent: Withdraw your consent for data processing at any time by contacting us.
Right to Grievance Redressal: Lodge a complaint regarding data handling practices.

To exercise any of these rights, please contact us using the information provided in Section 11.

7.1 Account Deletion

        🗑️ Request Account Deletion: You have the right to request complete deletion of your account and associated personal data at any time.
    

What will be deleted:

Your user profile (name, phone number, address, emergency contact)
Uploaded documents (Aadhaar, PAN, profile photos)
Attendance selfie photographs
Push notification tokens and device information
App preferences and settings

What may be retained (as required by Indian labor laws for up to 3 years):

Attendance records (without selfie photos)
Payroll and salary records
Employment history records

How to request deletion: Send an email to panindiasecurity@gmail.com with the subject line "Account Deletion Request". Include your registered phone number and full name. Your request will be processed within 15 business days.

8. Children's Privacy

Our App is intended for use by employees and staff of Pan India Securities Pvt Ltd who are 18 years of age or older. We do not knowingly collect personal information from anyone under the age of 18. If we learn that we have collected personal data from a minor, we will take steps to delete such information promptly.

9. Third-Party Services

Our App uses the following third-party services, each with their own privacy policies:

Service	Provider	Purpose	Privacy Policy
Supabase	Supabase Inc.	Database, storage, and API	supabase.com/privacy
Firebase Authentication	Google LLC	Phone OTP authentication	firebase.google.com/support/privacy
Firebase Cloud Messaging	Google LLC	Push notifications	firebase.google.com/support/privacy
Sentry	Functional Software Inc.	Crash reporting and monitoring	sentry.io/privacy
Google Maps	Google LLC	Map display and geolocation	policies.google.com/privacy

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes. Continued use of the App after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

Company: Pan India Securities Pvt Ltd
Website: https://panindiasecurity.com
Email: panindiasecurity@gmail.com
Address: Santosh Tower, AP Complex, Plot No. 22, Khata No. 40, Bailey Road, Near Ranjan Path, Ward No. 38, Danapur, Patna, Bihar — 801503, India
Grievance Officer: Pankaj Kumar (Director), reachable at the email above

12. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (as applicable). Any disputes arising under this policy shall be subject to the exclusive jurisdiction of the courts in Patna, India.