PRIVACY POLICY
Privacy Policy
How Humaneti collects, uses, protects, and isolates information across our public website and our multi-tenant HR, payroll, and NGO project platform.
1. Scope & definitions
This policy explains how Humaneti handles information across two different contexts, and the role we play in each:
- Website visitors — people who browse this website or submit contact, demo, or subscription-request forms. For this information, Humaneti is the data controller (we decide why and how it is used).
- Platform users — tenant administrators and employees of a subscribing organization who use the Humaneti platform. The subscribing organization is the data controller of the employee and business records it enters; Humaneti is the data processor that handles those records only on the organization’s documented instructions and to deliver the service.
2. Information we collect
Account credentials & profile. Name, work email, role/permissions, and (for website forms) company, phone, and message content.
Tenant content. Business and personal records that a subscribing organization enters — for example payroll figures, National ID / passport numbers, bank and NSSF details, expense receipts, attendance and leave records, and project or grant budgets. Humaneti processes this content on the organization’s behalf and does not use it for its own purposes.
Device & usage data. Mobile device model and operating system, IP address, browser type, login and activity timestamps, and — only with your permission on your device — camera access used to capture receipts and documents and your location when you check in or out, record a customer visit or a delivery, or post a project progress update. Section 3 describes exactly what the mobile app collects.
3. Humaneti mobile app
The Humaneti app for iPhone, iPad, and Android lets employees of a subscribing organization use the platform on their own device. Accounts are created by the employer, not in the app. The app sends information only to your organization’s Humaneti workspace and to the service providers named below, and only for the purposes described here.
- Sign-in: your work email and password are sent to authenticate you. The password is never stored on the device; only a sign-in token is kept, in the device’s secure storage (iOS Keychain / Android Keystore).
- Precise location: collected only at the moment you check in or out, record a customer visit or a delivery, or post a project progress update, and only if you allow location access while using the app. The coordinates, their accuracy, the network type (Wi-Fi or mobile data), and whether the device reports the location as simulated are attached to that record so your organization can verify it. The app does not collect location in the background or between these moments. If you decline, you can still check in; the attendance record is saved without a location.
- Camera: used to scan QR codes and barcodes (attendance, sign-in, assets and stock counts) and to take photos you attach to a request, such as a receipt, an asset fault report or transfer, a delivery or customer visit, a project progress update, or evidence for an attendance correction. Codes are read on the device. A photo is uploaded only when you attach it.
- Photos and files: only the items you choose are uploaded, such as a profile photo, a receipt, a document attached to a leave or other request, or a photo for an asset report. With your permission, the app can also save payslips and images you download to your photo library.
- Details you enter: profile updates (phone number, address and emergency contact), bank account change requests, and the leave, overtime, expense, advance, loan, purchase, asset, customer, sales, project, approval and policy-acknowledgement records you submit are sent to your organization’s workspace.
- Receipt scanning with AI (optional): if you choose Scan with AI on an expense, the app first asks for your permission, then sends that one receipt photo through Humaneti’s servers to Google Gemini, a third-party AI service, which reads the merchant, date, amounts and line items to fill in the form. Nothing is saved as an expense until you review and submit it, and you can always enter the expense by hand instead.
- Notifications: a device push token is registered so we can send you approval requests and status updates, delivered through Google Firebase Cloud Messaging and the Apple Push Notification service. The app asks for notification permission only after you sign in, and the token is removed when you sign out.
- Crash reports: if the app crashes, Google Firebase Crashlytics receives the crash log and basic diagnostics (device model, operating system and app version). Crash reports are not linked to your name or account, and Crashlytics keeps them for 90 days.
- Maps: the attendance screen shows a map provided by Google Maps Platform. Google receives the map requests for the area displayed, under Google’s own privacy policy.
The app contains no advertising and no advertising or analytics SDKs. It does not track you across other companies’ apps or websites, and your information is never sold.
Your choices in the app. You can turn location, camera, photo, and notification access on or off at any time in your device settings; only the feature that needs that access stops working. Signing out deletes the sign-in token, the notification token, and cached drafts from the device. Your employee account and work records belong to your organization: to have them corrected or deleted, contact your HR administrator, or email privacy@humaneti.com and we will help your organization handle the request.
4. How we use information
- Operating HR, payroll, procurement, finance, and NGO project workflows that the platform provides.
- Authenticating users, enforcing role-based access, and keeping audit logs for accountability and fraud prevention.
- Responding to website inquiries, scheduling demos, and processing subscription requests.
- Maintaining security, service reliability, and legal or regulatory compliance where applicable.
5. Data isolation & security
- Multi-tenant segregation: each organization’s data is logically isolated and scoped to its own tenant, and access is enforced server-side so one organization cannot read another’s records.
- Encryption in transit: all traffic is protected with TLS/HTTPS.
- Encryption at rest: databases, backups, and uploaded documents are stored encrypted.
- Storage location & provider standards: data is hosted with reputable cloud infrastructure providers operating to recognized security standards. Where feasible, hosting favors regions appropriate for our Cambodian customers.
6. Sub-processors & data sharing
To run the service we rely on a limited set of vetted sub-processors — for example cloud infrastructure hosting and transactional email delivery. Each is bound by contract to protect data and to process it only for the purpose of providing their service to us.
The mobile app also relies on Google Firebase (push notification delivery and crash reporting), the Apple Push Notification service, Google Maps Platform, and Google Gemini (optional AI receipt scanning), each only for the purpose described in section 3.
Humaneti does not sell, rent, or monetize tenant data, and does not use it for advertising. Data may be disclosed to authorities only where required by law.
7. International data transfers
Some sub-processors may store or process data outside Cambodia. Where that happens, we take reasonable steps to ensure the data remains protected to a standard consistent with this policy through contractual and technical safeguards.
9. Data retention & tenant offboarding
- Employee and business records are retained for as long as the subscribing organization’s agreement remains active, and thereafter as governed by that agreement and applicable law.
- On termination, the organization may export its data. We keep it for a deletion grace period of thirty (30) days so records can be retrieved, after which tenant data is securely deleted from active systems (backups age out on their normal cycle).
- Website contact records are kept only as long as needed for follow-up, compliance, and security, then deleted or anonymized.
10. Data breach notification
We maintain safeguards to prevent unauthorized access. If a security incident affects tenant personal data, we will investigate, take steps to contain it, and notify the affected organization (the controller) without undue delay, so it can meet its own notification obligations.
11. Your rights
Depending on your jurisdiction, you may request access, correction, or deletion of your personal information. If you are an employee of a subscribing organization, requests about your work records are directed first to that organization (the controller); Humaneti supports the request as processor. Website-visitor requests can be sent to us directly.
12. Contact
Privacy inquiries: privacy@humaneti.com
General inquiries: Contact form