Privacy Policy

1. Introduction

WeHCM ("we", "us", or "our") is an enterprise Human Capital Management platform that helps organizations manage their employee lifecycle — from recruitment and onboarding to payroll, performance, and offboarding. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and related services.

By creating an account or logging in to WeHCM, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use the service.

2. Information We Collect

We collect several types of information to provide and improve our service:

• Account credentials: Your email address (used as your login identifier) and encrypted authentication tokens.
• Profile data: Name, role, department, designation, and employment details entered by you or your organization's administrators.
• Workforce data: Employee records, payroll information, attendance, leave, performance reviews, and related HR data managed within the platform.
• Usage data: Log data, device information, and interaction analytics that help us maintain and improve the platform.

3. How We Use Your Information

We use the collected information for the following purposes:

• To authenticate your identity and provide secure access to the platform.
• To operate, maintain, and improve WeHCM features and functionality.
• To process payroll, manage HR workflows, and generate reports as configured by your organization.
• To send you important notifications, security alerts, and service announcements.
• To comply with legal obligations and enforce our Terms of Service.

4. Google Account Data

When you choose to sign in with Google, WeHCM requests access to your Google account's basic profile information — specifically your email address and name — through Google's OAuth 2.0 API. We use this information solely to authenticate your identity and link your Google account to your WeHCM user profile.

We do not access, store, or transmit any other data from your Google account (such as your contacts, emails, files, or calendar). The scopes we request are limited to openid anduserinfo.email. You may revoke WeHCM's access to your Google account at any time through yourGoogle Account permissions page.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share information in the following limited circumstances:

• Within your organization: Data you enter is visible to authorized administrators and managers within your organization as configured by your access permissions.
• Service providers: We may use trusted third-party providers for infrastructure, analytics, and email delivery — they are bound by confidentiality obligations and only access data necessary to perform their services.
• Legal compliance: If required by law, court order, or government regulation, we may disclose information to the relevant authorities.

6. Data Security

We implement industry-standard technical and organizational security measures to protect your information, including encrypted data transmission (TLS), role-based access controls (RLS), audit logging, and secure authentication. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as your account is active or as necessary to provide our services. If you request account deletion, we will remove your personal data within a reasonable timeframe, except where retention is required by law or for legitimate business purposes (such as audit or compliance obligations).

8. Your Rights

You have the following rights regarding your personal information:

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may request correction of inaccurate or incomplete data.
• Deletion: You may request deletion of your account and associated data.
• Withdrawal of consent: You may revoke Google OAuth access at any time via your Google Account settings.

To exercise any of these rights, please contact your organization's HR administrator or reach out through our Contact page.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us.