Workspace privacy policy

This policy explains what the PMG Workspace platform and its Android and iOS apps collect, why, and who decides. It is written for the people who actually use Workspace — most of whom are employees or contractors of an organisation that subscribes to it.

Who decides what is collected

The subscribing organisation does. It chooses which features are enabled, what is collected from its people, and how long records are kept. PMG Engineering Pvt Ltd provides the platform and processes that data on its instructions.

This matters in practice: if you want to know why a setting is switched on, object to it, or have a record corrected or removed, your organisation is the right first point of contact, because it controls those decisions. We will act on any instruction it gives us, and if you come to us first we will help you reach the right people rather than turn you away.

What the platform collects

Account and activity

Your name, work email, role and reporting relationships, and the records you create — tasks, logs, notes, documents, messages, approvals and similar — along with files you upload.

Attendance

The Attendance app exists to confirm that a check-in or check-out happened where and when it was claimed. Where your organisation has enabled it, a punch may record:

• Precise location — latitude, longitude and accuracy — read at the moment you punch, and used to check the punch against your assigned site. This is optional: if location is switched off or you decline the permission, the punch still goes through and is simply flagged for your organisation to review.
• A photograph of you, taken with the front camera at the moment you punch, together with an automated score indicating whether it appears to be a live capture rather than a photo of a photo. This is collected only if your organisation has enabled selfie verification, which is one of several verification methods available to it and is switched off unless chosen.
• Technical signals used to corroborate presence: an identifier generated for your device, the identifier of the Wi-Fi access point or Bluetooth beacon in range, and an indicator of whether the device reported a simulated location.

Location and camera are used only at the moment you take one of these actions. Neither the apps nor the platform track your location in the background, and neither collects location or images at any other time or for any other purpose.

Notifications

If you allow notifications, we store the token your device's operating system issues so that messages can be delivered to it. Withdrawing the permission or removing the app ends this.

How your data is separated and secured

Each organisation's data is held in its own isolated database schema, so one organisation cannot see another's. Access is authenticated, data is encrypted in transit, and files are held on access-controlled cloud storage. Within an organisation, who can see what follows the roles and permissions its administrators configure.

What we do not do

We do not sell, rent or trade personal information. We do not use your workspace content or attendance data for advertising, profiling, or model training. We do not use an attendance photograph to identify you anywhere other than in the attendance check it was taken for.

We rely on a small number of service providers to run the platform — cloud hosting and storage, notification delivery, and payment processing — which handle data only to provide those functions to us.

How long it is kept

Workspace data is kept while the subscribing organisation's account is active, and afterwards according to its instructions and its agreement with us. Attendance records, including any location or photograph attached to them, follow the same rule — they are retained as your organisation's employment records, not held indefinitely by us for our own purposes.

Your rights

You can ask for access to your data, correction of it, or its deletion. For anything held in a Workspace account, start with your organisation, since it decides. We will act on its instruction and will not obstruct a request.

You can also reach us directly at info@pmg.engineering. If we change what is collected or why, we will update the effective date at the top of this page.