Last Updated: September 18, 2026

LogAttend (“LogAttend”, “we”, “us”, or “our”) is a product of RenoxAI and provides an AI-based facial-recognition attendance, payroll, leave, and shift-management HRMS platform (the “Service”) to organizations (“Organization” or “Customer”) and their employees (“Users”) through our web application, mobile applications, and on-premise facial-recognition devices. This Privacy Policy explains what information we collect, how we use and protect it, and the rights available to Organizations and Users. By accessing or using the Service, you agree to the collection and use of information in accordance with this Policy.

To provide the Service, we collect the following categories of information, either directly from the Organization, from Users, or automatically through our devices and applications:

• Identity & Contact Data – name, employee/roll code, mobile number, email address, designation, department, and organization details, typically provided by the Organization during onboarding.
• Biometric Data – a facial recognition template generated from an image captured during enrollment and at each check-in/check-out. LogAttend does not collect fingerprint, iris, or voice data.
• Attendance & Location Data – check-in/check-out timestamps, device ID, and the registered premises location associated with each attendance event.
• Payroll & Financial Data – salary structure, deductions, tax details, and bank account information submitted by the Organization for the purpose of generating payslips and payroll reports.
• Leave & Shift Data – leave requests, approvals, balances, holiday calendars, and shift roster assignments.
• Device & App Data – mobile device identifiers, OS version, app version, IP address, and push-notification tokens used to deliver check-in reminders and approval alerts.

Facial recognition is core to how LogAttend records attendance. Because biometric identifiers are sensitive personal data under most privacy laws, the following terms apply specifically to it:

• The Organization is solely responsible for obtaining a User‘s informed, written or electronic consent before enrolling that User‘s face on the Service, and for providing any legally required notice of collection, purpose, and retention.
• Facial recognition templates are used exclusively to verify identity for attendance marking and are never used for advertising, profiling, or any purpose unrelated to attendance and workforce management.
• Biometric templates and images are encrypted at rest and in transit and are never sold, rented, or disclosed to third parties, except as required to operate the Service (e.g., infrastructure/hosting providers bound by confidentiality obligations) or as required by law.
• An Organization may request deletion of a User‘s biometric data at any time (e.g., on exit) through the administrator dashboard; once deleted, the data cannot be recovered.
• LogAttend is not responsible for verifying that an Organization has obtained valid consent from a User prior to enrollment. The Organization indemnifies LogAttend against any claim arising from a failure to obtain such consent.

Where LogAttend is deployed by a school, college, or similar institution, any enrollment of a minor‘s facial data must be authorized by the institution in accordance with applicable law, including obtaining parental or guardian consent where required. LogAttend processes such data solely on the Organization‘s instructions and disclaims responsibility for the Organization‘s compliance with laws applicable to minors.

All personal, biometric, and attendance data is encrypted using AES-256 encryption and stored on secure servers with industry-standard access controls. Unauthorized access is strictly prohibited. LogAttend is not responsible for any unauthorized access caused by user negligence, including but not limited to weak passwords or sharing of login credentials.

Organizations have full control over their data and can request the deletion of specific user, biometric, or attendance records through the organization administrator dashboard. Once a deletion request is processed:

• The data is permanently removed from LogAttend‘s servers.
• Deleted data cannot be recovered, ensuring compliance with organizational policies and privacy laws.
• LogAttend is not liable for any loss of data caused by user or organizational errors in the deletion process.

Attendance records are encrypted during transmission and securely stored within LogAttend‘s database. Access to these records is limited to authorized personnel within the Organization. Our system ensures that attendance data remains accurate, tamper-proof, and secure. LogAttend is not liable for data inaccuracies caused by third-party integrations, poor lighting/camera conditions at the Organization‘s premises, or user input errors.

LogAttend maintains a strict policy of restricted access. The following applies:

• LogAttend does not view or access individual user details, biometric data, or attendance data for any purpose other than providing, securing, and supporting the Service.
• Only organization administrators have the authority to view and manage their users‘ data.
• LogAttend only retains access to organization-level details required for service management, such as device registration, billing, and technical support.
• LogAttend is not responsible for any breaches caused by administrators or users accessing or sharing sensitive information outside the Service.

All industrial-grade facial-recognition devices registered with LogAttend and installed at an Organization‘s premises are managed and monitored by our team. We ensure:

• Devices are configured securely and meet compliance standards.
• Periodic firmware updates to protect against vulnerabilities.
• Immediate assistance in case of device malfunction or technical issues.
• LogAttend is not liable for any damages caused by devices malfunctioning outside the scope of standard operations, or improper installation, power supply, or network conditions provided by the Organization.

Our mobile applications may request permissions (such as camera, notifications, or storage) required to deliver core features like enrollment capture, check-in, and push alerts. We only collect device data necessary to operate and secure the Service and do not sell this data to third parties.

LogAttend provides comprehensive onboarding support to ensure smooth implementation of the system. This includes:

• Guidance on setting up and configuring facial-recognition devices.
• Training sessions for organization administrators and users.
• Customizing the attendance tracking process to fit the Organization‘s specific needs.
• LogAttend is not liable for delays or issues resulting from improper setup or misuse of the system by the Organization.

LogAttend is committed to complying with applicable privacy and data-protection regulations, including India‘s Digital Personal Data Protection Act, 2023 (DPDPA), and, where applicable to our customers, the GDPR and CCPA. We ensure that data is handled ethically and in compliance with these legal standards. LogAttend does not assume responsibility for any legal claims or consequences arising from non-compliance by the Organization.

• Organizations are responsible for ensuring that they adhere to applicable data protection and labor laws, including obtaining all necessary consents, when processing employee or student data through LogAttend‘s platform.

We retain personal, biometric, and attendance data for as long as the Organization‘s subscription is active and as required to comply with our legal obligations, resolve disputes, and enforce our agreements. Data associated with an Organization is deleted or anonymized within a reasonable period following termination of the subscription and expiry of any applicable statutory retention period, except where the Organization has requested earlier deletion.

To the fullest extent permitted by applicable law, LogAttend will not be held liable for any indirect, special, incidental, consequential, or punitive damages arising from the use of our platform, including, but not limited to, loss of data, loss of profits, or any other business loss. Our total liability, whether in contract, tort, or otherwise, shall not exceed the amount paid by the Organization for the Service in the 12 months preceding the event giving rise to the claim.

By using our Service, the Organization agrees to indemnify and hold harmless LogAttend, RenoxAI, and their officers, directors, employees, and agents from any and all claims, damages, losses, and expenses, including but not limited to legal fees, arising from or related to:

• Violation of any laws or regulations, including failure to obtain required biometric consent, by the Organization or its users.
• The Organization‘s failure to comply with the terms outlined in this Privacy Policy.
• Misuse of the platform or unauthorized access by the Organization or its users.

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal, operational, or regulatory reasons. We will post the updated policy on this page with a revised “Last Updated” date. Continued use of the Service after changes are posted constitutes acceptance of the revised Policy.

For any questions about this Privacy Policy or to exercise your data rights, contact us at support@logattend.com or +91-7236033088. Registered address: Bajrang Nagar Colony, Belaisa, Azamgarh, Uttar Pradesh, India, 276128.