Privacy Policy

This Privacy Policy explains how EMPLOYO TECHNOLOGY SERVICES - FZCO, a company registered in the United Arab Emirates, with its address at IFZA Business Park, DDP, PO Box 342001, Dubai, United Arab Emirates (“Employo,” “Company,” “we,” “us,” or “our”), collects, uses, discloses, and protects Personal Data in connection with the Employo Website available at https://employo.com/, related online pages, and our software-as-a-service platform and related services.

For purposes of this Privacy Policy, “Personal Data” means any information relating to an identified or identifiable individual.

By accessing or using our Website or Services, you acknowledge that you have read this Privacy Policy.

This Privacy Policy applies when we process Personal Data as a Controller, including when you:

• visit or interact with our Website;
• request a demo, contact us, or submit a form;
• create or administer an account;
• communicate with us;
• receive marketing or service communications;
• use our Services as a Customer representative, administrator, or Authorized User;
• interact with billing, support, analytics, or account administration functions.

This Privacy Policy does not replace privacy notices that our Customers provide to their employees, contractors, candidates, or other individuals whose Personal Data is processed through the Employo platform.

Our Role

For Website visitors, prospective Customers, Customer representatives, account administrators, billing contacts, support contacts, and similar business contacts, Employo usually acts as a Controller of Personal Data.

Where Employo processes Personal Data submitted to the platform by or on behalf of a Customer, including employee, contractor, candidate, HR, organizational, attendance, absence, asset, workflow, approval, and recruitment data, the Customer is usually the Controller or equivalent decision-maker, and Employo acts as a Processor or service provider.

If your Personal Data is processed in a Customer workspace, you should contact the relevant Customer directly to exercise your privacy rights, unless applicable law requires otherwise.

Personal Data We Collect

We may collect the following categories of Personal Data, depending on how you interact with us and the Services.

Contact and business information, such as name, business email, phone number, company name, job title, department, and business address.

Account information, such as login credentials, account settings, workspace role, permissions, authentication data, and security information.

Customer and platform data, such as employee records, candidate records, organizational structure, roles, positions, lifecycle history, absence records, attendance records, approvals, workflows, asset records, documents, reports, analytics, and related HR or operational information submitted by or on behalf of a Customer.

Communications information, such as messages, support requests, demo requests, feedback, emails, call notes, and information you provide when contacting us.

Billing and transaction information, such as subscription plan, billing details, payment status, invoices, tax information, and limited payment information provided by payment processors. We do not intentionally store full payment card details.

Technical and usage information, such as IP address, device information, browser type, operating system, pages viewed, referring URLs, log data, session information, feature usage, diagnostic data, performance data, and security events.

Marketing and preferences information, such as communication preferences, marketing interactions, event participation, and interest in our Services.

Sensitive or regulated information, where submitted by a Customer or Authorized User and permitted by applicable law, such as information contained in employee documents, absence records, identification documents, or other HR records.

How We Collect Personal Data

We collect Personal Data:

• directly from you when you submit forms, create an account, communicate with us, or use the Services;
• from our Customers and Authorized Users when they upload or generate data in the platform;
• automatically through cookies, logs, analytics tools, and similar technologies;
• from service providers, business partners, or publicly available sources, where permitted by law.

How We Use Personal Data

We use Personal Data for the following purposes:

• to provide, operate, maintain, and secure the Website and Services;
• to create, administer, and manage accounts and Customer workspaces;
• to provide HRM, HCM, ATS, workflow, reporting, analytics, support, and related platform functionality;
• to process subscriptions, billing, payments, invoices, and related transactions;
• to respond to inquiries, demo requests, support requests, and other communications;
• to send service, security, administrative, and legal notices;
• to personalize and improve the Website and Services;
• to monitor performance, troubleshoot issues, prevent fraud, and protect security;
• to analyze usage, develop new features, and improve our Services;
• to send marketing communications where permitted by law;
• to comply with legal obligations and enforce our agreements.

Where required by applicable law, we rely on appropriate legal bases, which may include performance of a contract, legitimate interests, consent, compliance with legal obligations, or other lawful bases available under applicable data protection laws.

Service Features

The Services may include analytics, recommendations, automation, predictive, AI-enabled, or data-assisted features intended to support HR, people operations, recruitment, reporting, workflow, and administrative processes. Where such features process Personal Data in a Customer workspace, the relevant Customer is responsible for determining whether and how to use those features, providing required notices, establishing a lawful basis, and implementing any required human review or safeguards.

Employo does not use Customer workspace data to make independent employment, recruitment, disciplinary, compensation, termination, or similarly significant decisions about individuals.

How We Disclose Personal Data

We may disclose Personal Data to:

Service providers and subprocessors, such as hosting providers, infrastructure providers, analytics providers, Customer support tools, payment processors, security providers, communication tools, and IT service providers.

Customers and Authorized Users, where Personal Data is contained in or related to a Customer workspace and disclosure is necessary to provide the Services.

Third-party integrations, where a Customer enables or connects a third-party service and authorizes data exchange.

Professional advisers, such as lawyers, auditors, accountants, insurers, and other advisers.

Authorities, regulators, courts, or law enforcement, where required by law or necessary to protect rights, safety, security, or legal interests.

Business transaction parties, in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar corporate transaction.

Other parties with consent or instruction, where you or the relevant Customer directs or authorizes the disclosure.

We do not sell Customer Data or use Customer Data to contact a Customer’s employees, candidates, or other individuals for unrelated marketing purposes.

Cookies and Similar Technologies

We may use cookies, pixels, local storage, analytics tools, and similar technologies to operate the Website, remember preferences, analyze usage, improve performance, support security, and conduct marketing. Where required by law, we will request consent for non-essential cookies. You may be able to manage cookies through your browser settings or any cookie preference tool made available on our Website.

International Transfers

We may process and transfer Personal Data in countries other than the country where you are located. These countries may have data protection laws that differ from those in your jurisdiction. Where required by applicable law, we use appropriate safeguards for international transfers, such as contractual protections, data processing agreements, standard contractual clauses, transfer risk assessments, or other lawful transfer mechanisms.

Data Retention

We retain Personal Data for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain accounts, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and keep appropriate business records.

For Personal Data processed in a Customer workspace, retention is generally controlled by the relevant Customer and the applicable agreement with that Customer.

When Personal Data is no longer required, we will delete, anonymize, or otherwise handle it in accordance with applicable law and our retention practices.

Security

We use commercially reasonable administrative, technical, and organizational measures designed to protect Personal Data against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, encryption, authentication, monitoring, logging, backup procedures, and other safeguards appropriate to the nature of the data and Services. However, no method of transmission, storage, or processing is completely secure, and we cannot guarantee absolute security.

Your Privacy Rights

Depending on your location and applicable law, you may have rights to:

• access your Personal Data;
• correct inaccurate or incomplete Personal Data;
• delete Personal Data;
• restrict or object to certain processing;
• withdraw consent where processing is based on consent;
• request portability of Personal Data;
• opt out of certain marketing communications;
• lodge a complaint with a data protection authority;
• object to, or request human review of, certain decisions based on automated processing or profiling, where such rights are available under applicable law.

To exercise your rights in relation to Personal Data controlled by Employo, please contact us at:

• Support email: support@employo.com; or
• Data protection contact: support@employo.com.

If your Personal Data is processed in a Customer workspace, please contact the relevant Customer directly. We may redirect your request to that Customer or assist the Customer in responding, as required by applicable law and our agreement with the Customer.

Marketing Communications

You may opt out of receiving marketing emails from us by using the unsubscribe link in the email or contacting us. We may still send non-marketing communications, such as service, security, billing, legal, or administrative notices.

Children’s Privacy

The Website and Services are intended for business and professional use and are not directed to children. We do not knowingly collect Personal Data from children under 16. If you believe that a child has provided Personal Data to us, please contact us.

Third-Party Services

The Website or Services may contain links to third-party websites, services, or integrations. Their privacy practices are governed by their own privacy policies. We are not responsible for the privacy practices, security, or content of third-party services.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice by posting the updated Privacy Policy on our Website, sending an email, displaying an in-product notice, or using another reasonable method.

The updated Privacy Policy will become effective on the date stated in the policy or notice.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

EMPLOYO TECHNOLOGY SERVICES - FZCO, IFZA Business Park, DDP, PO Box 342001, Dubai, United Arab Emirates

Email: support@employo.com