Back to siteHiTeam

HiTeam legal

Privacy Policy

Data Protection Notice

ALT TECHNOLOGIES L.L.C | HiTeam | v10.0 | June 2026

1. Who We Are

The data controller is ALT TECHNOLOGIES L.L.C (HiTeam), Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E. We process data in accordance with UAE law and GDPR principles for clients in the EU.

2. What Data We Collect

2.1. Data of managers and administrators

  • name, surname, job title;
  • corporate email and phone number;
  • company details used to configure the Platform and for anonymised analytics;
  • Google or Apple sign-in data: name, email and unique account identifier;
  • tokenised payment details via Stripe;
  • system activity logs.

2.2. Employee data

  • name, surname, date of birth, job title and work schedule;
  • mobile phone number for SMS verification;
  • biometric facial template;
  • device geolocation at shift start/end or throughout the shift in field mode;
  • timestamps for clock-in, clock-out and breaks;
  • photo reports attached to checklist tasks.

3. Biometric Data

Biometric data is a special category of personal data and is processed only with explicit employee consent.

HiTeam uses Amazon Rekognition. The system creates a mathematical facial feature vector. Original photographs are not retained for permanent storage. Transfer to AWS is based on EU Standard Contractual Clauses.

The purpose is solely employee identity verification at the start and end of working shifts.

Biometric templates are stored on servers in the UAE and automatically deleted after 6 months.

4. SMS Verification

The phone number is used for SMS verification upon first login and in other security cases.

The phone number is not shared with third parties for commercial purposes.

The Company is not liable for SMS non-delivery due to the User's mobile operator.

5. Geolocation Data

5.1. Standard mode

Geolocation is checked once at shift start and once at shift end to verify whether the device is within the configured work zone. Background tracking during the working day is not performed.

5.2. Field mode

For mobile employees, the manager may activate geolocation tracking throughout the shift only with separate employee consent. Outside the shift, tracking is not performed.

Geolocation data retention period: 6 months with automatic deletion.

6. Photo Reports from Checklists

Employees may attach photos to checklist tasks as confirmation of completion.

The Company does not control the content of uploaded photos. Responsibility for lawful recording lies with the employee and employer.

Photo report retention period: 6 months with automatic deletion.

7. Sharing Data with Third Parties

The Company does not sell data or share it with advertising networks.

  • Amazon Web Services (Amazon Rekognition) — biometric verification;
  • Stripe Inc. — payment processing;
  • SMS providers — verification messages;
  • Umnico — customer support and feedback service;
  • government authorities upon lawful request.

8. Data Retention

All data is stored on servers in the UAE. The Company may change retention periods unilaterally. The current Policy is available at hiteam.net/privacy.

  • biometric templates — 6 months;
  • geolocation data — 6 months;
  • photo reports — 6 months;
  • employee date of birth — until account deletion + 30 days;
  • manager account data — until account deletion + 30 days;
  • payment data — according to Stripe and PCI DSS requirements.

9. Security and Data Breaches

Protective measures include TLS/SSL encryption, ISO 27001-compliant data centres in the UAE and restricted access.

The Company is not liable for breaches caused by third-party attacks, third-party vulnerabilities or User actions.

Affected Users will be notified within 72 hours of a detected breach. Such notice is not an admission of liability.

10. Data Subject Rights

You may request access, correction or deletion of your data, withdraw consent for biometric or geolocation processing, and file a complaint with the supervisory authority. Requests: info@hiteam.net

11. Aggregated Data

The Company may use anonymised aggregated data for analytics, Platform improvement, behavioural pattern studies, reports and product development.

12. Cookies

The website uses technical cookies necessary for operation and analytical cookies with the User's consent.

13. Contact Information

  • Email: info@hiteam.net
  • Address: Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E.
Loading
Privacy Policy | HiTeam