Vishiq

Privacy Policy

Effective date: March 12, 2026

1. Overview

This Privacy Policy explains how Vishiq collects, uses, discloses, and protects personal data when you use our website, product, demo environment, and related services.

It also explains your privacy choices and how to contact us regarding data protection questions.

2. Who We Are

Vishiq provides session-based workforce workflows such as attendance tracking, approvals, reporting, and payroll-ready exports.

For questions about this policy, contact support@attendflow.app.

3. Data We Collect

Account and profile data: name, email address, organization details, role, and authentication-related metadata.

Workspace and operational data: session entries, approvals, project tags, reports, export records, and configuration settings.

Support and communication data: messages, form submissions, procurement requests, and support history.

Usage and technical data: device/browser details, log events, page interactions, and diagnostic information needed for security and reliability.

Marketing and attribution data: campaign parameters and referral metadata, subject to consent where required.

4. Data Sources

We collect data directly from you when you sign up, use the product, request support, or submit forms.

We also collect limited data automatically through platform logs and optional analytics tooling when consent is granted.

We may receive business contact data from your organization administrators or authorized integrations.

5. How We Use Data

Provide and operate Vishiq features, including account access, attendance workflows, approvals, and exports.

Maintain service security, detect abuse, prevent fraud, and troubleshoot incidents.

Deliver customer support, onboarding help, and service communications.

Process subscriptions, billing, invoices, and compliance-related requests.

Improve product performance and user experience using aggregated insights and optional analytics.

Comply with legal obligations and enforce contractual rights.

6. Legal Bases (Where Applicable)

We process personal data under one or more legal bases: performance of a contract, legitimate interests, legal obligations, and consent.

Where processing is based on consent, you can withdraw consent at any time through applicable controls.

7. Cookies and Local Storage

Essential cookies/storage are used for authentication, security, and required service functionality.

Optional analytics cookies/storage are disabled by default and activated only after consent where required by law.

You can manage consent choices via the cookie banner and browser controls.

8. How We Share Data

We may share data with vetted service providers that support hosting, infrastructure, analytics (if enabled), support operations, and billing.

We may disclose data where required by law, legal process, or to protect rights, safety, and platform integrity.

We may share data in connection with corporate transactions (for example, merger or asset transfer), subject to confidentiality safeguards.

We do not sell personal data for money.

9. International Transfers

Your data may be processed in countries other than your own. Where required, we use appropriate transfer safeguards and contractual protections.

10. Data Retention

We retain data for as long as needed to provide services, satisfy legal obligations, resolve disputes, and enforce agreements.

Retention periods depend on data type, account status, legal requirements, and operational necessity.

When data is no longer required, we delete or anonymize it according to our retention controls.

11. Security

We implement administrative, technical, and organizational safeguards designed to protect personal data from unauthorized access, disclosure, alteration, and destruction.

No system is perfectly secure, but we continuously improve controls through monitoring, reviews, and incident response practices.

12. Your Privacy Rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or export your personal data.

You may also have rights related to consent withdrawal and complaint submission to a data protection authority.

To exercise rights, contact support@attendflow.app. We may verify identity before processing requests.

13. Children

Vishiq is not intended for children and we do not knowingly collect personal data from individuals below the age required by applicable law.

If you believe a child has submitted personal data, contact us so we can take appropriate action.

14. Changes to This Policy

We may update this policy to reflect legal, technical, or business changes.

If updates are material, we will revise the effective date and provide notice where required.

15. Contact

For privacy questions, data rights requests, or DPA-related inquiries, contact support@attendflow.app.