Skip ke Konten

Privacy Policy

Last updated: September 8, 2026

This Privacy Policy explains how Garuda Escamas handles personal information in its internal employee mobile application and the connected Odoo ERP attendance system (collectively, the “Application”). The Application is intended exclusively for Garuda Escamas employees.

1. Information We Collect

When an employee uses the attendance feature to clock in or clock out, the Application collects a facial image through the employee’s device camera. The facial image is associated only with the authenticated Garuda Escamas employee account and the related attendance activity.

We also process the employee account information and attendance transaction information needed to perform and record that attendance activity. We do not collect face data for advertising, marketing, behavioural or demographic profiling, cross-application tracking, commercial analytics, sale or monetisation of personal information, or identifying individuals outside the Garuda Escamas employee environment.

2. Why We Use Face Data

Face data is used solely to verify the identity of the authorised employee who is performing a clock-in or clock-out transaction. This helps protect the integrity of the internal attendance system and prevent fraudulent attendance activity, including one person attempting to submit attendance on behalf of another employee.

Face data may also be used for attendance security and to investigate potential attendance irregularities. It is not used to train public artificial-intelligence models or third-party machine-learning models.

3. How the Attendance Verification Works

  1. The employee signs in with an authorised employee account.
  2. The employee starts a clock-in or clock-out attendance transaction.
  3. The Application requests access to the device camera and captures a facial image.
  4. The facial image is used to verify that the person matches the authorised employee account.
  5. After verification, the attendance transaction is submitted to the Garuda Escamas Odoo ERP attendance system.

4. Sharing and Disclosure

Garuda Escamas does not sell, rent, monetise, or disclose employee face data to third parties for their independent use. Face data is not shared with advertisers, marketing providers, data brokers, social networks, analytics providers, artificial intelligence providers, or unrelated third parties.

Garuda Escamas uses Sumopod only as an infrastructure and server-hosting service provider for the backend environment. Sumopod may process information only as needed to provide that hosting service; it is not authorised to use employee face data for advertising, marketing, profiling, analytics, artificial-intelligence training, machine-learning training, or any other independent purpose. Garuda Escamas remains responsible for and controls the data used by the Application.

5. Storage and Security

Face data is stored in the Garuda Escamas backend infrastructure used for the mobile Application and Odoo ERP attendance system. That infrastructure is hosted by Sumopod in West Java, Indonesia. Face data is not stored in publicly accessible storage.

Access is limited to authorised Garuda Escamas systems and authorised personnel when necessary for attendance administration, technical administration, system maintenance, security, or investigation of attendance irregularities.

6. Face Data Retention and Deletion

Face data is retained for no longer than two (2) months from collection. This limited retention period supports attendance verification, internal attendance review, security, and investigation of possible attendance irregularities while avoiding unnecessary accumulation of facial images.

Face data is deleted from operational storage after the two-month maximum retention period. It may be deleted sooner if it is no longer needed for attendance verification, the employee account is deactivated, the employee is no longer associated with Garuda Escamas, facial verification is no longer required, or a valid deletion request is approved under applicable company policies and legal requirements. After deletion, the data is no longer available to the attendance verification system.

7. Your Choices and Privacy Requests

Camera access is requested only when the employee uses the facial-verification attendance feature. Employees can manage camera permission in their device settings. To ask about this policy, withdraw consent where applicable, or request access to or deletion of personal information, employees should contact their Garuda Escamas HR administrator through the company’s internal support channel. Requests are handled in accordance with applicable company policies and legal requirements.

8. Changes to This Policy

We may update this Privacy Policy when our data practices or legal obligations change. The current version will always be available at this page.