Back to siteHiTeam

HiTeam legal

Privacy Policy

Data Protection Notice

ALT TECHNOLOGIES L.L.C | HiTeam | v10.0 | June 2026

1. Who We Are

The data controller is ALT TECHNOLOGIES L.L.C (HiTeam), Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E. We process data in accordance with UAE law and GDPR principles for clients in the EU.

2. What Data We Collect

2.1. Data of managers and administrators

  • name, surname, job title;
  • corporate email and phone number;
  • company details used to configure the Platform and for anonymised analytics;
  • Google or Apple sign-in data: name, email and unique account identifier;
  • tokenised payment details via Stripe;
  • system activity logs.

2.2. Employee data

  • name, surname, date of birth, job title and work schedule;
  • mobile phone number for SMS verification;
  • biometric facial template;
  • device geolocation at shift start/end or throughout the shift in field mode;
  • timestamps for clock-in, clock-out and breaks;
  • photo reports attached to checklist tasks.

3. Biometric Data

Biometric data is a special category of personal data and is processed only with explicit employee consent.

HiTeam uses Amazon Rekognition. The system creates a mathematical facial feature vector. Original photographs are not retained for permanent storage. Transfer to AWS is based on EU Standard Contractual Clauses.

The purpose is solely employee identity verification at the start and end of working shifts.

Biometric records follow the six-month retention cleanup schedule. Processing locations depend on configured infrastructure and providers; ask info@hiteam.net for your workspace's details. Cleanup runs periodically and does not erase copies independently retained by an employer or provider.

4. SMS Verification

The phone number is used for SMS verification upon first login and in other security cases.

The phone number is not shared with third parties for commercial purposes.

The Company is not liable for SMS non-delivery due to the User's mobile operator.

5. Geolocation Data

5.1. Standard mode

Geolocation is checked once at shift start and once at shift end to verify whether the device is within the configured work zone. Background tracking during the working day is not performed.

5.2. Field mode

For mobile employees, the manager may activate geolocation tracking throughout the shift only with separate employee consent. Outside the shift, tracking is not performed.

Geolocation data retention period: 6 months with automatic deletion.

6. Photo Reports from Checklists

Employees may attach photos to checklist tasks as confirmation of completion.

The Company does not control the content of uploaded photos. Responsibility for lawful recording lies with the employee and employer.

Photo report retention period: 6 months with automatic deletion.

7. Sharing Data with Third Parties

The Company does not sell data or share it with advertising networks.

  • Amazon Web Services (Amazon Rekognition) — biometric verification;
  • Stripe Inc. — payment processing;
  • SMS providers — verification messages;
  • Umnico — customer support and feedback service;
  • government authorities upon lawful request.

8. Data Retention

Storage and processing locations depend on the configured hosting and service providers, including biometric, SMS and payment providers; this Policy does not promise exclusive UAE storage. Contact info@hiteam.net for the processing locations applicable to your workspace. Retention changes are communicated through the updated Policy and applicable notices, subject to legal and contractual obligations.

  • biometric templates — 6 months;
  • geolocation data — 6 months;
  • photo reports — 6 months;
  • employee date of birth — until account deletion + 30 days;
  • manager account data — until account deletion + 30 days;
  • payment data — according to Stripe and PCI DSS requirements.

9. Security and Data Breaches

Protective measures include encrypted transport and access controls. Administrators should restrict roles, protect credentials and limit access to employee reports and exported files. No system guarantees absolute security.

Third-party attacks or user actions do not remove the Company's mandatory data-protection duties. Report suspected unauthorised access to info@hiteam.net without including credentials or unnecessary employee records.

We notify the relevant controller and, where required, affected individuals or authorities without undue delay and within applicable legal or contractual deadlines.

10. Data Subject Rights

You may request access, correction or deletion of your data, withdraw consent where it is the processing basis, and file a complaint with the supervisory authority. Requests: info@hiteam.net; identify your account and workspace, not passwords or biometric images. We may verify authority and coordinate with your employer, which controls employment records. See /account-deletion for account removal; deleting an account does not necessarily erase legally retained employer records, backups or exported copies.

11. Aggregated Data

The Company may use anonymised aggregated data for analytics, Platform improvement, behavioural pattern studies, reports and product development.

12. Cookies

The website uses technical cookies necessary for operation and analytical cookies with the User's consent.

13. Contact Information

  • Email: info@hiteam.net
  • Address: Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E.
Privacy Policy | HiTeam