Privacy Policy
Last updated: 11 October 2026 · WorkforceOS is made by The Purple Bytes, Lalitpur, Nepal
Who is responsible for your data
WorkforceOS is HR software that your employer uses to run attendance, leave, payroll and team work. Your employer decides what is recorded about you and who can see it. The Purple Bytes runs the software and stores the data on your employer's behalf, and does not use it for anything else.
What we store
- Account: name, work email, password (stored only as a one-way hash), role, and optional 2-step login.
- Employee record: details your employer or you enter, such as phone, address, date of birth, department, job title, salary, bank account, PAN and citizenship numbers and documents.
- Work records: clock-in and clock-out times, breaks, leave, expenses, payslips, contracts, performance reviews, training, helpdesk tickets.
- Desktop monitoring (only if your employer turns it on and you accept it in the desktop agent): while you are clocked in on a computer, periodic screenshots, the active app or window title, and idle time. Nothing is captured when you are clocked out or clocked in from a phone.
- Clock-in location (only if your employer turns it on): your phone's or computer's position at the moment you clock in. It is not tracked at any other time.
- Clock-in photo (only if your employer turns it on): one photo from the front camera when you clock in, deleted after 90 days.
- Messages and files you send in chat, documents and projects.
- Password Vault: passwords you save are encrypted before they are stored.
- Security logs: sign-in attempts and an audit log of sensitive actions.
How it is used
Only to provide WorkforceOS to your employer: showing your records to you and to the people your employer allows, calculating payroll, sending notifications and emails about your work, and keeping the service secure. We do not sell data, show ads or use it to train AI models.
Who else handles it
- Our server host, where the application and database run.
- Cloudflare R2, for uploaded files and screenshots.
- Resend, to deliver notification emails.
They process data only to provide those services.
How long it is kept
As long as your employer keeps its WorkforceOS account, or shorter where your employer sets automatic deletion (for example, screenshots older than a chosen number of days). Former employees' records are kept for the employer's legal and payroll obligations. Backups are deleted on a rolling basis.
Security
Connections use HTTPS, passwords are hashed, vault items and sensitive notes are encrypted, access is limited by role, and sensitive actions are logged.
Cookies on our website
workforceos.info uses a few cookies and similar browser storage. Needed ones keep the site working (your light or dark choice, the chat). With your yes we also use analytics (Google Analytics, Microsoft Clarity) to see which pages are read, and ad measurement (Meta Pixel) for our Facebook and Instagram ads. These only load after you agree in the cookie banner, and you can change your choice any time from "Cookie settings" at the bottom of every page. Signing in to the WorkforceOS app uses one cookie that keeps you signed in.
Your rights
You can see and correct much of your information on your Profile page. To get a copy of your data, correct it or ask for something to be deleted, contact your employer's HR or admin team; we help them respond, in line with applicable law including Nepal's Individual Privacy Act, 2075 (2018).
Contact
The Purple Bytes, Lalitpur, Nepal · contact@workforceos.info · +977 974-5941535