1. About PostTask

PostTask is a business productivity, workforce, task, project, attendance, expense, AMC/PMS and field-operation management platform.

Organizations may use PostTask to manage employees, contractors, customers, tasks, recurring services, projects, attendance, field activities, expenses, documents, notifications and other business operations.

PostTask users may include organization administrators, employees, contractors, managers, accounts personnel, HR personnel, operations personnel and other users authorized by an organization.

---

2. Organization and Business Data Ownership

Where PostTask is provided to a user through an employer, contractor relationship or other organization, information created, entered, uploaded, collected or updated by that user while performing organizational activities is created and processed on behalf of that organization.

The organization, acting through its authorized Administrator, controls its organizational and business data.

Such information may include tasks, task updates, projects, AMC/PMS records, attendance records, work-related location records, expenses, customer information, uploaded documents and other operational information.

An employee, contractor or other authorized user does not independently own organizational business records merely because that user created or updated those records.

Organizations determine which PostTask features are enabled for their users and which authorized users may access organizational information.

---

3. Information We Collect and Process

Depending on the PostTask features enabled by an organization and used by its authorized users, PostTask may process information including:

• Name and contact information.
• Mobile number and email address.
• Company and organization information.
• Employee and contractor information.
• User account and login information.
• Customer and business contact information.
• Task assignments and task updates.
• Work performed and material-used information.
• AMC, PMS and recurring-service information.
• Project, division, site and field-operation information.
• Attendance, Check-In and Check-Out information.
• Attendance selfies where enabled.
• Expense, bill, approval and reimbursement information.
• Bills, receipts, images and uploaded documents.
• Device location and work-related location information.
• Travel or movement information where location tracking is enabled.
• Device and application information.
• Device identifiers required to operate supported application features.
• Push-notification registration identifiers or tokens.
• IP address and technical information required to operate and secure the service.
• Other information entered by authorized users as part of organizational business workflows.

The information collected depends on the features configured and used by the organization.

---

4. How We Use Information

PostTask collects and processes information only as required for the features enabled by an organization and the activities performed by its authorized users.

• Create and manage organization and user accounts.
• Authenticate users and maintain account security.
• Manage employees and contractors.
• Assign, schedule and monitor tasks.
• Record task updates and work performed.
• Manage AMC, PMS and recurring services.
• Manage projects, project sites and field activities.
• Provide attendance and workforce-management functionality.
• Record attendance Check-In and Check-Out.
• Verify attendance using selfies where enabled.
• Provide work-related location and movement tracking where enabled.
• Calculate or report work-related travel or movement where applicable.
• Manage expenses, bills, approvals and reimbursements.
• Store and retrieve business documents and images.
• Generate operational reports and dashboards.
• Send task assignments, reminders and service notifications.
• Provide customer support.
• Maintain security and prevent unauthorized or fraudulent use.
• Diagnose technical problems.
• Maintain and improve PostTask services.
• Comply with applicable legal, regulatory and contractual requirements.

PostTask does not use employee location information for advertising.

---

5. Employee Location Information

PostTask includes location-enabled features for attendance, field work, employee movement, travel and other organizational activities.

Where an organization enables such features, PostTask may process device location information associated with an authorized employee or other user.

Location information may include latitude, longitude, date and time, and information required to associate the location with the applicable employee, attendance session, device or organizational activity.

Location information may be used to:

• Record attendance Check-In or Check-Out location.
• Verify an employee's location for attendance-related functionality.
• Record field-work locations.
• Track employee movement during an authorized work or attendance session where movement tracking is enabled.
• Calculate or report work-related travel or movement.
• Support organizational field-operation and attendance records.

Location functionality depends on the features enabled by the organization and permissions granted on the user's device.

Where authorized by the organization, an Administrator may request an employee's current location during an active attendance session. The request may be processed when the employee next opens or interacts with the application. Location tracking may continue while the application is minimized when an authorized foreground tracking session is active.

Android may display a persistent foreground-service notification while the foreground location service is operating.

The foreground location service may be used for employee movement, field activity, attendance-session tracking and work-related travel functionality enabled by the organization.

PostTask's location tracking is designed around the employee's work or attendance session. Tracking may be stopped according to configured conditions such as Check-Out, employee logout, completion of the applicable tracking session, office or shift rules, or other organization-configured tracking controls.

Location availability and accuracy depend on device settings, Android permissions, GPS/network availability and other device conditions.

PostTask does not sell employee location information or use employee location information for advertising.

---

6. Attendance and Selfie Information

Organizations may enable attendance functionality for employees.

Attendance information may include:

• Attendance date.
• Check-In and Check-Out time.
• Attendance status.
• Check-In and Check-Out location.
• Attendance-session information.
• Work-related movement information where enabled.
• Attendance selfie where enabled by the organization.

Where attendance selfie verification is enabled, PostTask may use the device camera to capture and upload an image for attendance verification and related organizational records.

The camera is activated as part of the relevant user-facing attendance functionality. PostTask does not continuously record video or audio through the camera as part of attendance selfie functionality.

Attendance and selfie information may be accessible to authorized personnel of the applicable organization according to their roles and permissions.

---

7. Mobile Application Permissions

The PostTask mobile application may request device permissions according to the functionality being used.

• Camera – Used for attendance selfies and supported image-capture functionality.
• Location – Coarse and/or precise location may be used for attendance, field activities, work-related travel, movement tracking and other location-enabled features.
• Foreground Location Service – Where movement tracking is enabled, the application may operate a foreground location service during an authorized work or attendance session.
• Notifications – Used for task assignments, task updates, reminders, foreground-service notifications and other service-related information.
• Files and Documents – Used where supported to upload or download bills, receipts, reports, images and other business documents.
• Internet Access – Required for communication between the PostTask application and PostTask services.

---

8. Uploaded Images, Files and Documents

PostTask may allow authorized users to upload:

• Attendance selfies.
• Bills and receipts.
• Expense documents.
• Task documents.
• Project documents.
• Work photographs.
• Reports.
• Other files required for organizational workflows.

Uploaded files are associated with the applicable organization, user or business transaction and are accessible according to organizational roles and permissions.

Organizational documents created or uploaded by an employee while performing work for an organization may form part of the organization's business records.

---

9. Tasks, Projects, AMC/PMS and Business Records

PostTask maintains operational records required to provide its business-management functionality.

These may include customer records, tasks, task updates, recurring services, AMC/PMS schedules, projects, project sites, assignments, work updates, expenses and related documents.

Where an employee or contractor creates or updates such information while working for an organization, those records form part of the organization's PostTask business data.

Removing or disabling a user's login does not automatically delete organizational records previously created or updated by that user.

---

10. Device Information and Notifications

PostTask may process device-related information required to operate mobile application functionality. PostTask uses the Firebase Installation ID as its application installation identifier. Keep the reference to notification registration tokens only if they are actually processed by your Firebase messaging implementation.

This may include device/application identifiers and push-notification registration tokens.

Such information may be used to:

• Associate supported application functionality with a device.
• Maintain application sessions where applicable.
• Deliver push notifications.
• Support attendance or location functionality.
• Maintain security.
• Diagnose technical issues.

PostTask may use third-party infrastructure such as Firebase services to support application installation identification and push-notification delivery.

---

11. Expense and Financial Business Information

Where an organization uses PostTask expense-management features, PostTask may process information including expense amounts, categories, descriptions, bills, receipts, approvals and reimbursement information.

Such information is processed for the organization's business expense-management workflow.

---

12. Sharing and Access to Information

PostTask does not sell or rent personal information.

Information may be made available or shared where necessary:

• With authorized administrators and users of the applicable organization.
• According to organizational roles and permissions.
• With service providers required to host, store, secure, transmit or operate PostTask.
• With notification, infrastructure or other technology providers required for enabled functionality.
• Where required by applicable law, regulation, legal process or lawful authority.
• Where necessary to protect PostTask, its users, organizations or services from security threats, misuse or fraud.

---

13. Data Security

PostTask uses technical and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, loss or destruction.

Measures may include authenticated access, role-based access controls, protected API communication, access restrictions and other application and infrastructure security controls.

Users and organizations are responsible for maintaining the confidentiality of their account credentials and restricting access to authorized personnel.

No internet-based service or electronic storage system can guarantee absolute security.

---

14. Data Retention

Information is retained for as long as reasonably necessary to:

• Provide PostTask services.
• Maintain organizational business records.
• Support active accounts and business operations.
• Maintain security and audit requirements.
• Resolve disputes and support requests.
• Meet contractual obligations.
• Meet applicable accounting, regulatory or legal requirements.

Different categories of information may have different retention periods according to their purpose and applicable organizational requirements.

When an authorized deletion request is processed, information may be deleted or anonymized where appropriate.

Information may be retained where continued retention is reasonably required by applicable legal, regulatory, accounting, contractual, security, fraud-prevention or legitimate business-record requirements.

---

15. Employee and User Access

Organizations control access provided to their employees, contractors and other authorized users.

An organization Administrator may create, enable, disable or remove access for authorized users according to the organization's requirements.

Disabling or deleting a user's login does not automatically delete organizational business records created or updated by that user on behalf of the organization.

Access to organizational information is controlled according to applicable roles and permissions.

---

16. Cookies and Website Technologies

PostTask websites may use cookies or similar technologies where necessary to authenticate users, maintain sessions, remember applicable preferences, provide website functionality, improve performance and maintain security.

---

17. Third-Party Services

PostTask may use third-party technology providers for services such as:

• Hosting and infrastructure.
• Data or document storage.
• Push notifications.
• Application installation/device services.
• Authentication.
• Payment processing where applicable.
• Other integrations used by supported PostTask functionality.

Third-party providers may process limited information necessary to provide their services and may maintain their own privacy policies and legal obligations.

---

18. Children's Privacy

PostTask is a business and workforce-management application and is not intended for use by children.

Organizations should provide PostTask access only to persons authorized to use the service for legitimate organizational or business purposes.

---

19. Changes to this Privacy Policy

PostTask may update this Privacy Policy from time to time to reflect changes in PostTask functionality, information-processing practices, security practices, legal or regulatory requirements or third-party services.

The latest version will be published on this page together with the applicable effective date.

---

20. Data Deletion & Account Closure

---

21. Contact Us

If you have questions regarding this Privacy Policy, privacy practices or data-deletion requests, please contact PostTask.

Email: support@posttask.in

Website: PostTask.in

Please read Data Management & Account Deletion