Privacy Policy & Biometric Data Handling
How CloudAttend processes facial biometric vectors and GPS coordinates in accordance with Indonesia UU PDP and international privacy standards.
1. Privacy-by-Design Principle
CloudAttend is engineered with a strict data-minimization philosophy. We believe authenticating workplace attendance should never involve hoarding raw employee portraits on centralized cloud servers.
2. Biometric Facial Data Processing
Under Indonesia Personal Data Protection Law (UU PDP Article 4) and GDPR (Article 9), biometric traits represent sensitive personal data requiring heightened safeguards:
- No Raw Photo Storage: The device camera operates only ephemerally during template registration or check-in. The original photograph is immediately erased from RAM and is never stored on servers.
- 128-Float Mathematical Vectors: The system stores only a one-way mathematical array of 128 numbers that cannot be reverse-engineered to reconstruct an actual human face image.
- Explicit Consent: System administrators must obtain explicit consent from employees before biometric registration.
3. GPS Geofence Coordinate Collection
Latitude and longitude coordinates are requested only at the exact instant an employee taps Clock In or Clock Out. CloudAttend performs zero background location tracking and does not monitor movement outside punch events.
4. Data Subject Rights (Erasure & Rectification)
Employees have the legal right to request the permanent deletion of their biometric descriptor upon completion of their contract or academic term. Supervisors can clear biometric records with a single click in the admin workbench.
5. Database Storage & Edge Encryption
All operational records are housed in Cloudflare D1 databases protected by encrypted connections (TLS 1.3) and secure JWT authentication cookies.