EnOpSy Privacy Policy

1.About EnOpSy

EnOpSy is a business operations platform.

EnOpSy products may include:

• Customer relationship management
• Human resources management
• Employee attendance
• Leave management
• Payroll
• Accounting
• Billing and invoicing
• Orders and quotations
• Projects and tasks
• Documents and file storage
• Customer support
• Team communication
• Calendars and meetings
• Subscriptions
• Payment tools
• Reports and analytics
• Authentication
• Client portals
• Employee portals
• APIs and integrations
• Artificial intelligence tools
• Blockchain-based records
• Managed hosting
• On-premise software
• Other current and future business tools

This Privacy Policy applies to all EnOpSy products unless a separate privacy notice is shown for a specific product.

2.Who Controls Your Information

EnOpSy may process information in two different ways.

2.1 Information Controlled by EnOpSy

EnOpSy normally controls information used for:

• Creating your EnOpSy account
• Managing your subscription
• Processing payments
• Operating our website
• Providing customer support
• Sending EnOpSy service messages
• Sending marketing messages
• Protecting our systems
• Improving our products
• Meeting legal duties

For this information, AllHeart Web Inc decides why and how the information is used.

2.2 Information Controlled by an EnOpSy Customer

A business may use EnOpSy to manage its employees, customers, vendors, applicants, or other people.

In these cases, the business using EnOpSy normally controls the information. EnOpSy processes it for that business.

For example, your employer may use EnOpSy to manage:

• Attendance
• Leave
• Salary
• Payroll
• Work activity
• Employee files
• Performance records
• Projects
• Messages
• Location information
• Login activity

When your information is controlled by your employer or another EnOpSy customer, you should first contact that business about your information.

EnOpSy will help the business respond where required.

3.Information We Collect

The information we collect depends on how you use EnOpSy.

3.1 Account Information

We may collect:

• Full name
• Business name
• Job title
• Work department
• Email address
• Phone number
• Country
• City
• Profile image
• Username
• Password in protected form
• Account preferences
• Language
• Time zone
• Login and security information

3.2 Business Information

We may collect:

• Company name
• Company address
• Registration details
• Tax information
• Industry
• Number of employees
• Website address
• Business contact information
• Company logo
• Bank or billing information
• Subscription details
• Product usage limits

3.3 Employee and Human Resources Information

When an organization uses EnOpSy human resources tools, it may upload or create:

• Employee name
• Employee number
• Contact information
• Job title
• Department
• Reporting manager
• Joining date
• Work schedule
• Attendance
• Leave records
• Timesheets
• Salary information
• Payroll records
• Performance information
• Training records
• Employment documents
• Emergency contact details
• Identification documents
• Bank details
• Tax details
• Workplace messages
• Location information, when enabled
• Identity or biometric information, when enabled and legally allowed

The organization using EnOpSy is responsible for deciding which employee information should be collected.

3.4 Customer and CRM Information

Customers may add information about their own customers and leads, such as:

• Names
• Email addresses
• Phone numbers
• Company details
• Job titles
• Addresses
• Notes
• Messages
• Meeting details
• Sales history
• Support requests
• Orders
• Quotations
• Invoices
• Payments
• Marketing preferences

3.5 Financial Information

EnOpSy products may process:

• Billing addresses
• Invoice details
• Payment status
• Transaction records
• Subscription information
• Tax information
• Bank account information
• Payroll information
• Currency information
• Expense records
• Accounting records

Payment card information may be collected directly by a payment provider.

EnOpSy may not receive or store your complete payment card number.

3.6 Documents and Files

We may process files uploaded to EnOpSy, including:

• Contracts
• Invoices
• Receipts
• Employee records
• Customer records
• Identity documents
• Business reports
• Images
• Videos
• Audio files
• Spreadsheets
• Presentations
• Electronic signatures
• Other documents

The person or organization uploading a file is responsible for having permission to use it.

3.7 Messages and Communications

We may process:

• Emails
• Chat messages
• Support tickets
• Comments
• Meeting notes
• Call records
• Campaign messages
• Notifications
• Feedback
• Survey responses
• Communications with our support team

Support calls or meetings may be recorded when we give notice and obtain consent where required.

3.8 Device and Usage Information

When you use EnOpSy, we may automatically collect:

• IP address
• Browser type
• Device type
• Operating system
• Device identifiers
• Login time
• Pages viewed
• Features used
• Button clicks
• Session activity
• Error reports
• API requests
• Referring website
• Approximate location based on IP address
• Security events
• Audit logs
• Cookie information

We use this information to operate, protect, and improve EnOpSy.

3.9 Location Information

Some attendance, security, or mobile features may collect location information.

Location collection will depend on:

• Your device settings
• Your organization's settings
• Your permission
• Applicable law

You may be able to turn off location access through your device. Some features may not work correctly after location access is turned off.

3.10 Information From Integrations

When you connect EnOpSy to another service, we may receive information from that service.

This may include information from:

• Payment providers
• Banks
• Email services
• Calendar services
• Cloud storage services
• Accounting platforms
• Communication platforms
• Authentication providers
• Social platforms
• Artificial intelligence providers
• Other business software

The information received depends on the permissions you approve.

3.11 Information From Other Sources

We may receive information from:

• Your employer
• Your organization
• An EnOpSy administrator
• Business partners
• Service providers
• Public business directories
• Public websites
• Event organizers
• Referral partners
• Government or legal sources
• Fraud and security providers

We only use this information for lawful business purposes.

4.How We Use Information

We may use personal information to:

• Create and manage accounts
• Verify identity
• Provide EnOpSy products
• Process subscriptions and payments
• Provide customer support
• Complete user requests
• Manage security
• Stop fraud and misuse
• Send service notices
• Send login alerts
• Send billing messages
• Provide reports and analytics
• Improve product performance
• Fix errors
• Develop new features
• Manage APIs and integrations
• Personalize user settings
• Keep audit records
• Enforce our Terms of Service
• Meet legal duties
• Handle disputes
• Protect EnOpSy and its users
• Send marketing messages when allowed
• Measure website and campaign performance
• Support company sales or restructuring
• Carry out other purposes explained at the time of collection

We will not use personal information for a new and unrelated purpose without proper notice, permission, or another lawful reason.

5.Legal Reasons for Using Information

Where privacy laws require a legal reason, we may process information based on:

Contract

We may use information when it is needed to:

• Create your account
• Provide EnOpSy
• Process a payment
• Give support
• Complete an order
• Manage a subscription

Consent

We may ask for consent before:

• Sending some marketing messages
• Using optional cookies
• Collecting precise location
• Recording a call
• Using sensitive information
• Connecting an optional integration

You may withdraw your consent. This will not affect processing that happened before consent was withdrawn.

Legitimate Business Interests

We may use information for reasonable business needs, such as:

• Protecting EnOpSy
• Preventing fraud
• Improving our products
• Understanding product usage
• Managing customer relationships
• Protecting legal rights
• Sending suitable business communications

We consider your rights before using this legal reason.

Legal Duty

We may process information to follow:

• Tax rules
• Accounting rules
• Court orders
• Government requests
• Privacy laws
• Employment rules
• Fraud prevention rules
• Other legal duties

Protection of People

In rare cases, we may process information to protect the life, safety, or important interests of a person.

6.Customer Data

Customer Data is information added to EnOpSy by a customer or its authorized users.

The customer owns and controls its Customer Data.

EnOpSy uses Customer Data only to:

• Provide the requested products
• Follow customer instructions
• Maintain and secure EnOpSy
• Provide technical support
• Prevent fraud
• Meet legal duties
• Improve system performance using combined or de-identified information

We do not use one customer's private business data to provide another customer with access to that data.

We may use combined or de-identified information that cannot reasonably identify a person to improve EnOpSy and understand general product usage.

7.Artificial Intelligence

Some EnOpSy products may include artificial intelligence features.

When you use these features, we may process:

• Your questions
• Instructions
• Uploaded files
• Generated answers
• Feedback
• Technical usage information

AI information may be sent to an approved AI service provider to create the requested result.

You should not add highly sensitive personal information to an AI feature unless it is required, permitted, and properly protected.

AI results may be incorrect. Important results should always be reviewed by a person.

We will not use Customer Data to train a public artificial intelligence model unless this is clearly disclosed and legally allowed.

8.Blockchain Records

Some EnOpSy features may create a hash, timestamp, digital proof, or blockchain record.

We try to avoid placing complete personal information directly on a public blockchain.

Blockchain records may be difficult or impossible to delete.

Before using a blockchain feature, customers must make sure that the information is lawful and suitable for permanent or tamper-resistant storage.

Where possible, EnOpSy may store only a protected digital reference instead of the complete document.

9.Cookies and Similar Technologies

EnOpSy may use cookies, pixels, local storage, and similar technologies.

Essential Cookies

These cookies are needed for:

• Login
• Security
• Account sessions
• Language settings
• Basic website functions

These cookies cannot always be turned off.

Preference Cookies

These cookies remember:

• Language
• Time zone
• Display choices
• User settings

Analytics Cookies

These cookies help us understand:

• Number of visitors
• Pages visited
• Product usage
• Errors
• Website performance

Marketing Cookies

These cookies may help us:

• Measure advertisements
• Understand campaign results
• Show suitable advertisements
• Limit repeated advertisements

EnOpSy does not currently use third-party advertising or audience-targeting cookies. If that changes, this section will be updated before any such cookies are used.

Where required, optional cookies will only be used after consent.

You can manage cookies through:

• Our cookie banner
• Your browser settings
• Your device settings
• Available privacy controls

Blocking cookies may stop some EnOpSy features from working correctly.

10.Marketing Messages

We may send information about:

• New EnOpSy products
• Product updates
• Offers
• Events
• Training
• Free trials
• Business news
• Surveys

We will ask for consent where required.

Marketing messages will include a method to unsubscribe.

You can also stop marketing messages by contacting us.

Stopping marketing messages will not stop important service messages, such as:

• Password resets
• Login alerts
• Payment notices
• Security notices
• Account changes
• Legal updates

11.How We Share Information

We may share personal information with the parties listed below.

11.1 Service Providers

We may use service providers for:

• Cloud hosting
• Data storage
• Email delivery
• SMS delivery
• WhatsApp messaging
• Payment processing
• Customer support
• Analytics
• Security
• Identity verification
• Artificial intelligence
• Error monitoring
• Video meetings
• Document signing
• Business operations

These providers may only use information for the work they perform for us, subject to their agreements and legal duties.

11.2 Your Organization

If your account is connected to a business, your organization's administrators may access and manage your information.

Administrators may be able to:

• View your profile
• View work activity
• Change permissions
• Access files
• View attendance
• View messages
• Export information
• Suspend or delete your account

You should contact your organization for questions about its access.

11.3 Other Authorized Users

Information may be shared with other users when needed for:

• Projects
• Tasks
• Messages
• Documents
• Approvals
• Meetings
• Reports
• Support
• Business operations

The information shown depends on the permissions set by the customer.

11.4 Integrations

When you connect a third-party service, information may be shared with that service based on the permissions you approve.

Third-party services have their own privacy policies.

11.5 Legal and Safety Reasons

We may share information when reasonably needed to:

• Follow a law
• Answer a court order
• Answer a legal government request
• Investigate fraud
• Protect a person's safety
• Protect EnOpSy
• Enforce our agreements
• Respond to a security event
• Protect our customers and users

11.6 Business Transfers

Information may be shared during:

• A merger
• An acquisition
• A financing
• A company sale
• A company restructuring
• A sale of assets
• An insolvency process

The receiving organization must handle personal information according to applicable law.

11.7 With Your Permission

We may share information for another purpose when you or the controlling customer gives permission.

12.Sale and Sharing of Personal Information

EnOpSy does not sell personal information for money.

EnOpSy does not sell private Customer Data.

Some privacy laws may use a wider meaning of the words "sell" or "share." Certain advertising or analytics cookies may be treated as sharing under those laws. EnOpSy does not currently use advertising cookies of this kind.

Where required, users will be given a method to opt out through:

• A cookie preference tool
• A "Do Not Sell or Share My Personal Information" request
• A privacy request sent to our Privacy Team
• A supported browser privacy signal

This section will be reviewed and updated if EnOpSy begins using advertising cookies or audience-targeting services.

13.International Data Transfers

EnOpSy may process information in Canada and other countries where we or our service providers operate.

These countries may have privacy laws that are different from the laws in your country.

Where required, we use suitable protections for international transfers. These may include:

• Data processing agreements
• Contractual privacy clauses
• Standard contractual clauses
• Security controls
• Approved transfer methods
• Customer instructions

Customers may contact us at [email protected] for more information about international transfer protections.

14.Data Storage and Hosting

EnOpSy may offer:

• Managed cloud hosting
• Customer-selected hosting regions
• Private cloud hosting
• On-premise installation

For cloud services, information may be stored on systems managed by EnOpSy or its hosting providers.

For an on-premise installation, the customer normally controls the server and stored information.

EnOpSy may access on-premise information only when:

• The customer asks for support
• Remote support is enabled
• Access is required by an agreement
• Access is legally required

Customers are responsible for the security and backups of their on-premise systems.

15.How Long We Keep Information

We keep personal information only for as long as it is needed.

The retention period depends on:

• The type of information
• The purpose of collection
• The customer's instructions
• The subscription period
• Security needs
• Backup schedules
• Legal duties
• Tax and accounting rules
• Dispute requirements
• Fraud prevention needs

Account information may be kept while the account is active.

After an account closes, some information may be kept for a limited period to:

• Allow data export
• Complete billing
• Handle disputes
• Prevent fraud
• Meet legal duties
• Maintain security records

Information may remain in protected backups until the backup is safely replaced or deleted.

When information is no longer needed, we may delete it, anonymize it, or make it permanently unable to identify a person.

Customers are responsible for setting suitable retention periods for their own Customer Data.

16.Security

We use reasonable administrative, technical, and physical safeguards.

These may include:

• Access controls
• Password protection
• Encryption
• Multi-factor authentication
• Security logs
• Monitoring
• Backups
• Employee access limits
• Security training
• Vulnerability management
• Incident response processes
• Secure development practices
• Vendor reviews

No system is completely secure.

You are responsible for:

• Protecting your password
• Protecting verification codes
• Securing your devices
• Using correct permissions
• Removing former users
• Protecting exported files
• Keeping software updated
• Reporting suspicious activity

Please contact us quickly if you believe an EnOpSy account has been accessed without permission.

17.Data Breaches

If a security event affects personal information, we will investigate it.

Where required, we may notify:

• The affected customer
• The affected person
• A privacy authority
• A government authority
• Law enforcement

Our notice may explain:

• What happened
• What information was affected
• What steps we took
• What steps you should take
• How to contact us

Customers must quickly tell EnOpSy about suspected misuse of their accounts or integrations.

18.Your Privacy Rights

Your rights depend on your country and the law that applies.

You may have the right to:

• Know what personal information is collected
• Ask for access to your information
• Receive a copy of your information
• Correct incorrect information
• Complete incomplete information
• Ask for information to be deleted
• Restrict how information is used
• Object to certain uses
• Withdraw consent
• Ask for portable data
• Opt out of marketing
• Opt out of certain sales or sharing
• Limit some uses of sensitive information
• Challenge an automated decision
• Make a privacy complaint
• Receive equal service after using your privacy rights

Some rights may have legal limits.

For example, we may need to keep information for:

• Legal duties
• Security
• Fraud prevention
• Financial records
• Legal claims
• Contract duties

19.How to Make a Privacy Request

You may make a privacy request by contacting:

Please include:

• Your full name
• Your EnOpSy account email
• Your organization name
• The right you want to use
• Enough information to understand your request

We may need to verify your identity before completing the request.

We will only ask for information reasonably needed for verification.

Where your account is controlled by your employer or another organization, we may send the request to that organization.

You may use an authorized agent where permitted by law. We may ask for proof that the agent has permission to act for you.

We will respond within the time required by applicable law.

20.Canadian Privacy Rights

People in Canada may ask about:

• The personal information we hold
• How we use it
• Who we shared it with
• How to correct it
• How to make a complaint

You may contact our Privacy Officer.

If we cannot resolve your concern, you may have the right to contact the Office of the Privacy Commissioner of Canada or another applicable provincial privacy authority.

21.European Economic Area and United Kingdom Rights

People in the European Economic Area or United Kingdom may have the right to:

• Access personal information
• Correct personal information
• Delete personal information
• Restrict processing
• Object to processing
• Receive portable data
• Withdraw consent
• Object to direct marketing
• Request human review of certain automated decisions
• Complain to a data protection authority

Where required, EnOpSy will provide information about its legal basis for processing and international transfer protections.

22.California Privacy Rights

California residents may have the right to:

• Know the categories of personal information collected
• Know the sources of personal information
• Know why personal information is used
• Know which parties receive personal information
• Request specific personal information
• Request deletion
• Request correction
• Opt out of the sale or sharing of personal information
• Limit some uses of sensitive personal information
• Receive equal service after making a request

EnOpSy will not discriminate against a person for using a legal privacy right.

California users may make a request using the contact information in this Privacy Policy.

23.Automated Decisions

Some EnOpSy tools may help customers make decisions using rules, reports, scores, or artificial intelligence.

EnOpSy customers are responsible for reviewing important decisions about:

• Hiring
• Employment
• Payroll
• Credit
• Insurance
• Legal matters
• Financial matters
• Health
• Access to important services

EnOpSy should not be used as the only decision-maker for a decision that may seriously affect a person unless the use is lawful and suitable protections are provided.

Where required, you may ask for information about an automated decision or request human review.

24.Employee Monitoring

EnOpSy may provide features for:

• Attendance
• Login history
• Work hours
• Project activity
• Location
• Device activity
• Task completion
• Communications
• Performance reports

The customer using these features is responsible for:

• Having a lawful reason
• Giving proper notice
• Getting consent where required
• Limiting monitoring
• Protecting employee information
• Following workplace and privacy laws

EnOpSy does not decide how an employer should monitor its workers.

25.Children

EnOpSy is a business product and is not designed for children.

You must be at least 18 years old to create an EnOpSy account unless a parent, guardian, school, employer, or authorized organization lawfully manages the account.

We do not knowingly collect personal information directly from a child for independent marketing purposes.

Please contact us if you believe a child's information was collected without proper permission.

26.Third-Party Websites and Services

EnOpSy may contain links to other websites or services.

We do not control the privacy practices of third parties.

You should review the privacy policy of each third-party service before giving it personal information.

Connecting a third-party integration may allow that provider to receive information from your EnOpSy account.

You can remove an integration through your settings when that option is available.

27.Public Areas

Information posted in public or shared areas may be seen by other people.

This may include:

• Public profiles
• Shared documents
• Public forms
• Job listings
• Customer portals
• Public support pages
• Shared links

Do not post confidential or sensitive information in a public area.

Customers are responsible for checking sharing permissions before publishing information.

28.Business Customers' Privacy Duties

Organizations using EnOpSy must:

• Collect information lawfully
• Give proper privacy notices
• Get consent where needed
• Use correct access permissions
• Protect account credentials
• Handle privacy requests
• Set retention periods
• Train authorized users
• Avoid uploading unnecessary information
• Follow employment and privacy laws
• Tell EnOpSy about security events
• Sign a Data Processing Agreement where required

EnOpSy is not responsible for a customer's unlawful collection or use of personal information.

29.Data Processing Agreement

Business customers may request an EnOpSy Data Processing Agreement.

The agreement may explain:

• Customer and EnOpSy privacy roles
• Processing instructions
• Security duties
• Confidentiality
• Subprocessors
• International transfers
• Privacy requests
• Data deletion
• Security incidents
• Audit information

30.Changes to This Privacy Policy

We may update this Privacy Policy when:

• Our products change
• Our privacy practices change
• Laws change
• Service providers change
• New features are added
• Security needs change

The updated policy will show a new "Last Updated" date.

For important changes, we may give notice through:

• Email
• The EnOpSy website
• An account message
• An in-product notice
• Another suitable method

Where required, we will ask for new consent.

31.Questions and Complaints

You may contact us if you:

• Have a privacy question
• Want to use a privacy right
• Want to make a complaint
• Believe your information is incorrect
• Believe information was used without permission
• Believe an account has been accessed without permission

We will review the matter and try to provide a fair response.

32.Contact Information

33.Information to Complete Before Publishing

Complete and confirm the following:

• Effective date
• Last updated date
• Full legal address
• Province of incorporation or operation
• Privacy Officer name or job title
• Privacy email
• Security email
• Support email
• Privacy request form
• Cookie preference link
• California privacy choices link
• Data Processing Agreement link
• Hosting countries
• Main service providers
• Data retention periods
• Whether advertising cookies are used
• Whether biometric information is collected
• Whether precise location is collected
• Whether AI providers receive Customer Data
• Whether an EU or UK representative is required