Privacy Policy

1. Who We Are & Scope

GoToTask (“we”, “us”, or “our”) provides a cloud-hosted workforce management platform encompassing employee attendance, GPS geofencing, task delegation, leave approval workflows, timesheets, and monthly reporting analytics. This Privacy Policy governs all personal and operational data collected across our web and mobile web interfaces.

2. Information We Collect

Depending on your role (Administrator, Manager, or Employee) and interactions with GoToTask, we collect:

• Account & Identity Data: Full name, corporate email address, contact telephone number, company name, department, and role access level.
• Presence & Geolocation Data: High-precision device GPS coordinates and distance telemetry captured exclusively at the moment of clock-in and clock-out to verify office geofence proximity.
• Workspace Operational Records: Task assignments, delivery URLs, timesheet hours, leave applications, manager approvals, and working schedule preferences.
• Financial & Billing Data: Payment transaction identifiers, billing addresses, and GST numbers processed securely via licensed payment gateways (we never store raw card numbers).
• Technical & Audit Logs: IP addresses, browser user-agents, network timestamps, and session tokens to safeguard workspaces against unauthorized access.

3. How We Use Collected Information

We process workforce information solely for legitimate business operations:

• To authenticate user sessions, enforce role permissions, and maintain data separation between corporate workspaces.
• To verify on-premise vs field presence and calculate objective late marks and shift durations.
• To compile executive monthly attendance analytics and 1-click CSV payroll reports for administrators.
• To communicate transactional service alerts, security notices, and subscription billing receipts.
• To prevent fraud, automated abuse, and investigate violations of our Terms & Conditions.

4. Subprocessors & Data Sharing

We do not monetize your operational records. Data is only shared with vetted infrastructure subprocessors necessary to deliver GoToTask:

• Cloud server hosting and automated encrypted database backups.
• Transactional email and SMS notification providers.
• PCI-DSS compliant payment gateways for processing subscription renewals.

5. Security & Encryption Standards

All data in transit is encrypted using industry-standard TLS 1.3 encryption. Internal databases are safeguarded behind enterprise-grade firewalls, role-scoped access tokens, and continuous monitoring to guard against unauthorized access, alteration, or disclosure.

6. Data Retention & Deletion

We retain operational records for as long as your corporate workspace remains active. Upon written request by an authorized workspace administrator or upon verified account termination, company data is securely expunged or anonymized within 30 days, subject to mandatory statutory tax retention requirements.

7. Your Privacy Rights

Depending on your jurisdiction, you possess the right to inspect personal information held by GoToTask, request factual corrections, restrict specific data processing, or export your operational records. You can exercise these rights at any time by contacting our privacy compliance desk.

8. Changes to this Policy

We periodically review and update this Privacy Policy to reflect technical enhancements or evolving legal standards. Any material modifications will be announced via your workspace dashboard or directly via registered administrative email addresses.