Privacy policy

02Who we are

comun HR is a mobile app that lets employees record attendance, view payslips, apply for leave and receive company notices. It is built and operated by Azcom LLC, a company registered in Wyoming, United States (“Azcom”, “we”, “us”, “our”). This policy covers the comun HR mobile app only — it does not cover any website.

Where your employer has signed up for comun HR and added you as an employee, your employer is the data controller and we are the processor: they decide what goes into the app, and we keep it running and keep it safe on their instructions.

Where we collect information directly from an employer — for example, an admin setting up the company account or managing billing — we are the controller for that information.

03What we collect

We group the data the app collects into four buckets. Nothing outside these buckets is collected by the app.

• Employee record. Name, work email, phone number, employee ID, department, role, joining date, employment type, and any documents your company chooses to attach. Some of this is supplied by your employer during setup; some you add yourself in your profile.
• Attendance. Check-in and check-out times, whether the shift was office or remote, the coarse location captured at the moment of check-in, shift duration, and flags such as late arrival or early departure.
• Leave and pay. Leave requests and their status, leave balances by type, approval history, and the payslips your company publishes to you. We store payslips as files; we do not run your payroll.
• Device and usage. Device model, operating system version, app version, and crash or error reports needed to keep the app working. We do not use this, or any other data in the app, for advertising, cross-app or cross-site tracking, or AI-based profiling.

04How location works

Location is the most sensitive thing the app touches, so it gets its own section.

comun HR asks for location permission once, and reads it at exactly two moments: when you check in and when you check out. There is no background location, no geofence that pings while you work, and no history of where you went between those two taps. The app does not use location for any other purpose.

If you decline the permission, you can still check in. The entry is recorded without a location and your company can see that it was submitted that way. Whether that is acceptable is your company’s policy, not ours.

05Why we use it

• To run the app. Recording shifts, calculating balances, delivering payslips and notices, sending the notifications you asked for.
• To keep accounts secure. Detecting unusual sign-ins, rate-limiting, and keeping an audit trail of administrative changes.
• To support you. When you write to support, we look at the account in question to answer the question.
• To keep the app running. Crash reports and basic diagnostics tell us when something is broken. We do not build usage profiles from this.
• No automated decisions. We do not use artificial intelligence, machine learning or automated profiling to make decisions about you — for example, there is no automated performance scoring or attendance prediction.
• To meet obligations. Employment records carry retention duties. Where the law requires a record to be kept, we keep it.

06Who sees what

Visibility inside a company is set by role, and it only ever runs downward and upward — never sideways.

• Employees. See their own attendance, leave, payslips and profile. They can also see which colleagues are on leave on a given day — names and dates only, never a reason.
• Managers. See the attendance and leave of the people reporting to them, so they can approve requests and cover shifts.
• Admins. See the company record: everyone’s attendance, leave, employment details and documents.
• Us. Our staff do not browse customer data. Access is limited to named engineers, granted for a specific support ticket or incident, logged, and revoked afterwards.

07Who we share it with

We do not sell personal data and we do not share it for advertising. We use a small number of service providers to run comun HR, each bound by a written agreement that limits them to our instructions.

• Cloud hosting. Application servers, databases and encrypted file storage.
• Notification delivery. Push, email and SMS providers, used only to deliver messages you or your employer triggered.
• Error monitoring. Crash and performance reporting, with personal fields scrubbed before they leave the device.
• Payments. Subscription billing for the company account. Card details go to the payment processor, never to us.
• Legal requests. If we are compelled by a valid legal order, we comply — and we tell the affected company unless we are prohibited from doing so.

08How long we keep it

• While the account is active. Attendance, leave and payslip records stay available for as long as your company keeps its account, because that is the record they are keeping.
• When an employee leaves. Their record moves to an inactive state. The company decides whether to archive or delete it, subject to the retention rules that apply to them.
• When a company cancels. Data stays available for 30 days for export, then is deleted from live systems within 30 days and from backups within 90.
• Logs and diagnostics. Kept for 90 days, then rotated out.

09How we protect it

• In transit and at rest. TLS on every connection; encryption at rest for databases and stored files.
• Least privilege. Internal access is role-based, reviewed, and requires multi-factor authentication.
• Separation. Each company’s data is scoped to its own tenant and checked on every request.
• Backups. Encrypted, taken daily, and restore-tested.
• If something goes wrong. We notify affected companies without undue delay, with what we know, what we did, and what they need to do.

10Your rights

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to how it is used, and receive a copy in a portable format.

Because your employer controls the employee record, the fastest route is to ask your HR admin — they can act inside the app immediately. If you would rather come to us, write to the address below and we will help, and pass the request on to your employer where we have to.

11Not for children

comun HR is intended for use by working adults added to the app by their employer. It is not directed at children, and we do not knowingly collect personal data through the app from anyone outside an employment relationship. If you believe a child’s information has been added to the app in error, contact us and we will remove it.

12International transfers

Azcom LLC is based in the United States, and the app’s infrastructure processes data there. If you or your employer are located elsewhere, your information will be transferred to and processed in the United States. We protect it to the standard described in this policy regardless of where it is processed, and hosting region options are available on request for companies with data residency requirements.

13Changes to this policy

When we change this page we update the date at the top. If a change materially affects how we handle personal data, we notify company admins by email and show a notice in the app before it takes effect.