The Short Version
Quick highlights for workers and staffing managers
Who We Are
FieldForce is an enterprise workforce management platform operated by FieldForce Technologies Pvt. Ltd. (“FieldForce”, “we”, “us”, “our”). This policy applies to our marketing website at fieldforce.ae, our web application at FieldForce App, our employee mobile application, and all related cloud services (together, the “Services”).
By accessing or using our Services, you acknowledge that you have read and understood this policy. If you do not agree with our data practices described herein, please refrain from using our Services.
Our Role With Your Data
FieldForce serves three distinct categories of users, and our legal classification and responsibilities differ for each:
Staffing Partners
Contractors and facility managers subscribing to FieldForce. For account, billing and administrative records, FieldForce acts as Data Controller.
Employees & Workers
Onboarded by staffing partners. The staffing partner is the Data Controller; FieldForce acts strictly as the Data Processor under our SaaS agreement.
Website Visitors
Visitors who browse our public portal, book a demo, or enquire about services. FieldForce acts as the Data Controller.
Information We Collect
From Staffing Partners
- Account Credentials: Company name, primary contact executive, business email, authorized mobile number, encrypted authentication credentials.
- Commercial Information: Registered office address, GSTIN / TRN / VAT identification, company registration certificates, client profiles, work sites, supervisors, and deployment capacities.
- Billing & Subscription: Active subscription tier, payment history, transaction references. Payment card and banking credentials are handled by certified payment gateways (e.g. Razorpay/Stripe) and are never stored on our servers.
About Employees & Field Workers
- Profile & Demographics: Full legal name, photograph, date of birth, gender, emergency contacts, permanent/current residential address, skill sets, trade designations, and assigned job sites.
- Statutory Compliance Documents: National identity cards (Aadhaar / Emirates ID / Passport), PAN, Universal Account Number (UAN/PF), Employee State Insurance (ESIC) numbers, and labour welfare documentation.
- Attendance & Shift Times: Precise timestamped punch-in and punch-out events, shift rosters, overtime records, leave balances, and regularisation submissions.
- Geographical Verification: GPS latitude and longitude captured exclusively during check-in/out to confirm physical presence within the geofenced perimeter of the designated site.
- Biometric Verification Data: One-way encrypted templates when biometric hardware/facial verification is enabled by the employer (detailed in Section 7).
- Payroll & Remuneration: Wage structures, hourly/daily rates, advance deductions, statutory deductions, net payable salary, bank account details for direct credit, and generated payslips.
From Website Visitors & Inquirers
- Demo & Trial Submissions: Contact person name, official business email, contact number, company name, and team size submitted via website inquiry forms.
- System Telemetry: Internet Protocol (IP) address, browser client identifiers, device hardware profile, session referral URL, and security access logs.
- Customer Communications: Messages, helpdesk tickets, and email threads exchanged with our customer support teams.
How We Use Information
Who Can See What (Access Matrix)
Access control within FieldForce is strictly role-governed using multi-tenant security architecture. Below is the default visibility mapping:
| System Role | Can Access | Strictly Restricted |
|---|---|---|
| Employee | Own shift records, assigned site & roster, punch logs, leave balances, own payslips. | Other employees' profiles, peer wages, staffing company commercial invoices, platform financials. |
| Staffing Partner | All workforce records, biometric/GPS logs, site allocations, payroll registers, client invoices for their firm. | Records, clients, sites, or payroll information of any other competing staffing partner. |
| Site Supervisor | Live attendance, daily headcount, shift logs, and worker trade roles assigned to their specific site. | Worker wage rates, corporate bank accounts, commercial client billing, and cross-site telemetry. |
| FieldForce Admin | Subscription licenses, infrastructure telemetry, billing cycles, security audit logs. | Individual worker identity files or payslips (accessed only under explicit written support authorization with full audit logging). |
Location & Biometric Data
GPS Geolocation Protocol
FieldForce captures geolocation solely at the moment of attendance registration (check-in and check-out) to confirm that the employee is physically present at the approved client site coordinates. FieldForce never tracks employees outside these moments, does not trace movement trajectories, and does not monitor off-duty hours. Users can revoke mobile location permissions in device settings, though site check-in verification will require manual supervisor override.
Biometric Verification Data
Where staffing partners activate biometric or facial recognition attendance, the platform processes encrypted mathematical feature templates, rather than raw photographic or fingerprint files where technically supported. This data is classified as sensitive personal data, encrypted with high-grade algorithms (AES-256), used strictly for identity verification, and purged upon employee termination. Staffing partners represent that they have secured informed worker consent as required by applicable laws.
Data Retention & Disposal
- Active Subscriptions: All client, employee, and attendance datasets remain accessible throughout the continuous subscription period.
- Account Closure Grace Period: Following subscription expiration or account closure, staffing partners are granted a 90-day window to export historical rosters and payslips, after which data is systematically queued for cryptographic purge or irreversible anonymization.
- Statutory Legal Retention: Wage registers, tax invoices, and payment vouchers are retained for durations prescribed by regional income tax, GST, and labour statutes (typically 7 to 8 years).
- Demo Inquiries: Unconverted sales inquiries and demo records are systematically expunged after 12 months.
Security Architecture
While we enforce enterprise-grade security standards, no web environment is impenetrable. In the improbable event of a validated security incident impacting personal data, FieldForce will promptly alert affected partners and statutory authorities within timelines mandated by applicable legislation.
Your Statutory Rights
In alignment with India’s Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection, users and data principals enjoy the following enforceable rights:
International Data Transfers
FieldForce utilizes cloud nodes located in verified regional jurisdictions (India and UAE cloud regions). In instances where technical sub-processing entails cross-border movement, transfers adhere strictly to Standard Contractual Clauses (SCCs) and regional adequacy guidelines ensuring equivalent data security.
Protection of Minors
FieldForce is an enterprise commercial SaaS platform. Staffing partners are legally barred from onboarding individuals beneath statutory legal employment age into the platform. If we establish that a minor’s information has been submitted without lawful qualification, we will immediately purge the record.
Policy Amendments
We periodically revise this Privacy Policy to reflect platform enhancements, operational evolutions, or emerging legal requirements. The “Last Updated” timestamp at the head of this policy marks the active edition. For material modifications, active staffing partners will receive prior in-app or electronic notifications.
Contact & Grievance Redressal
For any privacy inquiries, data subject access requests, or regulatory escalations, please contact our dedicated data governance team: