Privacy Policy

1. Who we are and when this policy applies

BioDTRPro is an attendance and Daily Time Record management service operated by NiorDotTech. This policy applies to the public website, administrator portal, employee DTR lookup, related reports, and support interactions.

For employee attendance records, the subscribing school or organization normally decides why and how the information is processed. That organization is responsible for giving its employees any notices and obtaining any permissions required by law. NiorDotTech processes that information to provide BioDTRPro.

2. Information we collect

Depending on how the service is used, we process:

• School and account information: school identifiers, organization and division details, administrator names, usernames, password hashes, roles, profile images, login and logout times, licensing details, and configuration settings.
• Employee information: names, employee numbers, biometric-device identifiers, tax identification numbers when supplied, job positions, assigned schedules, and active status.
• Attendance information: clock event dates and times, transaction codes, holidays, corrections, and administrator-entered attendance events.
• Files and report information: employee spreadsheets, device-export files, organization logos, and data needed to create DTR, logbook, and exception reports.
• Security and activity information: authentication tokens, session identifiers, administrative activity logs, error records, and basic request information produced by our hosting infrastructure.

BioDTRPro imports identifiers and clock events exported by attendance devices. It is not designed to collect or store fingerprint images, facial images, or biometric templates.

3. How we use information

We use information to authenticate users; manage school and employee records; interpret attendance events; calculate and generate reports; provide requested features; maintain licenses and settings; prevent abuse; diagnose errors; protect accounts; respond to support requests; and comply with legal obligations.

4. Legal grounds for processing

Where applicable, processing is based on performance of our agreement with a subscribing organization, the organization’s instructions, legitimate interests in operating and securing the service, compliance with legal obligations, and consent when consent is required. Schools and employers are responsible for identifying the appropriate basis for employee attendance processing under laws that apply to them.

5. How information is shared

Information may be available to authorized administrators of the relevant school or organization and to NiorDotTech personnel or contractors who need it to operate or support the service. We may use infrastructure providers for hosting, database services, public asset storage, caching, and security, including Vercel Blob and Upstash Redis.

We may also disclose information when required by law, to protect rights and service security, or as part of a merger, acquisition, financing, or transfer of the service. We do not sell personal information or attendance records.

6. File storage and retention

Uploaded raw attendance and bulk employee files are temporarily placed in storage for processing and are designed to be deleted after processing. Generated records, employee data, settings, audit entries, and account information are retained while needed to provide the service, meet contractual or legal obligations, resolve disputes, and protect the service. Logos and other configuration assets may remain until replaced or deletion is requested.

The subscribing organization determines appropriate retention periods for its employee records. Deletion requests may be limited where retention is required by law, necessary for security records, or needed to establish or defend legal claims.

7. Security

We use access controls, hashed passwords, time-limited authentication tokens, role-based permissions, input validation, and other reasonable safeguards. No online service can guarantee absolute security. Administrators must protect credentials, restrict access to authorized personnel, and promptly report suspected compromise.

8. Your choices and rights

Depending on applicable law, individuals may request access, correction, deletion, restriction, objection, or a portable copy of personal information. Employees should normally contact their school or employer first because it controls their attendance records. Organizations and account holders may contact NiorDotTech for service-related requests. We may verify identity and authority before acting.

9. International processing and minors

Service providers may process information in countries other than the user’s location, subject to appropriate contractual and legal protections where required. BioDTRPro is intended for organizations and their authorized workforce-management activities, not for personal use by children. Organizations must apply any additional safeguards required when records concern minors.

10. Changes and contact

We may update this policy as the service or legal requirements change. The date above identifies the current version. Questions or privacy requests may be emailed to contact@rodgodalle.com or submitted through the official NiorDotTech website. Please identify the relevant school or organization and do not send passwords or sensitive attendance files through an unsecured message.