1.Information we collect
Al Hazm ERP stores company details, administrator details, employee records, attendance logs, GPS coordinates, selfie verification images, customer records, vendor records, quotations, invoices, purchase orders, inventory records, uploaded documents, and support requests.
2.Employee location and selfie data
GPS coordinates and selfie images are collected only when an employee uses attendance features that require them. Company administrators are responsible for telling employees how attendance verification works and for using location data only for legitimate business attendance and workforce management purposes.
3.How we use information
We use information to provide authentication, attendance, site management, invoicing, inventory, HRM, reporting, customer support, security monitoring, and service improvement.
4.Company data ownership
The company remains responsible for the business records entered into Al Hazm ERP, including employee data, payroll-related fields, invoices, tax details, customer records, and uploaded documents.
5.Data access
Company administrators can access data for their own company. Employees can access only the employee features assigned to them. Platform administrators may access account data only for support, security, legal compliance, abuse prevention, or operational maintenance.
6.Storage and security
Al Hazm ERP runs on dedicated infrastructure for each company: its own database, file storage and application servers, separate from other organisations. Access is protected with multi-factor authentication, role-based permissions enforced on the server, dual approval for sensitive changes, encryption of stored secrets, and a tamper-evident audit trail. No system can be guaranteed perfectly secure, so customers should use strong passwords and limit admin access.
7.Service providers
Al Hazm ERP may use infrastructure, hosting, email, SMS, messaging, or support providers to operate the service. These providers process data only as needed to deliver the service.
8.Retention
Business records are retained while the system is in use and may be retained where needed for legal, accounting, backup, security, or dispute-resolution purposes. Deletion or export requests can be made through support.
9.International use
Al Hazm ERP is positioned for GCC businesses. Data is stored on the infrastructure chosen for your deployment, and some service providers (for example email or SMS delivery) may operate outside your country. You are responsible for confirming your own industry-specific data residency or regulatory requirements.
10.Contact
For privacy questions, access requests, deletion requests, or data handling questions, contact https://alhazmservices.com/contact-us.