Privacy Policy | Rudvay GeoMark

1. Overview & Commitment to Privacy

Rudvay Technology Solutions ("Rudvay Tech", "We", "Us") operates the Rudvay GeoMark enterprise workforce presence management application. We are committed to safeguarding the privacy of business owners ("Tenants"), employees, and site visitors.

This Privacy Policy explains how personal data, location coordinates, and facial biometric feature descriptors are collected, processed, stored, and protected in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act, India) and global data privacy standards.

2. Biometric Data & Facial LBP Descriptor Handling

ZERO RAW BIOMETRIC HOARDING ARCHITECTURE

Rudvay GeoMark does NOT store raw video streams or high-resolution facial images in permanent biometric databases.

When an employee performs a camera verification punch, client-side WebRTC technology extracts a mathematical Local Binary Pattern (LBP) feature vector (128 numerical values representing skin texture contrast). This mathematical array is compared against the stored enrollment vector to confirm identity.

Biometric feature vectors cannot be reverse-engineered to reconstruct an individual's original face photo.
Biometric matching occurs strictly for authorized employee identity verification during attendance punches.
Biometric feature descriptors are never sold, rented, or shared with third-party advertising networks.

3. GPS Geolocation Data Collection Limits

Rudvay GeoMark requests access to the device's HTML5 Geolocation API (latitude, longitude, horizontal accuracy) ONLY at the explicit moment an employee taps "Punch In" or "Punch Out".

No Continuous Background Tracking

Rudvay GeoMark does NOT track employee GPS locations in the background or monitor movement outside active punch events.

4. Purposes of Data Processing

We process collected data exclusively to:

Verify employee presence within employer-configured 10-meter geofence perimeters.
Calculate working hours, late minutes, overtime, and shift compliance.
Generate downloadable attendance reports and immutable administrative audit logs.
Secure customer business tenant accounts and prevent unauthorized portal access.

5. Cloud Security & Encryption

All data transmitted between browsers, mobile devices, and server endpoints is encrypted using TLS 1.3 / HTTPS encryption. Databases stored on Google Cloud Firestore utilize AES-256 encryption at rest. Administrative access requires authenticated session tokens and cryptographic password hashing (PBKDF2-SHA256).

6. User Data Rights (DPDP Act & GDPR Compliance)

Under applicable data privacy regulations, employees and business owners possess the right to:

Right to Access: Request a copy of stored attendance records and logs.
Right to Correction: Request correction of inaccurate employee profile details.
Right to Erasure / Withdrawal: Request deletion of enrolled face feature descriptors upon employment termination.