Privacy Policy

---

PayMasterPro ("we") is a workforce-management app operated by Ice Station Zebra. This policy explains how we collect, use, store, and share your information. By using the app you agree to this policy.

1. Who we are
Data Controller: Ice Station Zebra. Contact email: info@icestationzebra.in  If your employer (the "Company") has subscribed to PayMasterPro for use by its staff, the Company is the Data Controller for your information and PayMasterPro acts as a Data Processor on behalf of that Company. Please consult your employer's HR policy for specifics.

2. Information we collect
We collect only what is necessary for the App to function.  Account & profile data — name, phone, employee code; optional email, date of birth, address, profile photo, emergency contact, blood group. Job info (designation, department, salary, shift, weekly off).  Attendance & location — Precise location (GPS) is captured ONLY at the moment you tap Check-in or Check-out, to verify you are within the geofenced radius of your authorised workplace. We do NOT track your location in the background. We do NOT sell or share location data.  Leave / advance / reimbursement / payroll data — applications, approvals, receipts (stored as base64), generated payslips.  Photos — The app may ask for permission to read photos from your gallery so you can attach receipts, documents, or update your profile picture. The app does NOT access your camera, microphone, contacts, calendar, SMS, or call logs.  Technical data — device type, OS version, App version, IP address, anonymous crash logs, login timestamps, in-app audit trail.  We do NOT collect financial account numbers, payment card details, or biometric data.

3. How we use your data
• Authenticate you and run the app (contract) • Geofence attendance verification (contract / legitimate interest) • Process leaves, advances, reimbursements and payroll (contract) • Display payslips and notices to you (contract) • Maintain audit trails for compliance and dispute resolution (legitimate interest) • Improve the app, fix bugs, prevent abuse (legitimate interest)  We do NOT use your data for advertising or third-party marketing.

4. Sharing your data
Your data is shared only with: • Your employer's authorised admins/managers within the app (for approvals, payroll, HR administration). • Cloud infrastructure providers that host our servers/database. These process data on our behalf under strict security agreements. • Authorities, if required by law or to protect rights.  We do NOT sell your data. We do NOT share it with advertisers or data brokers.

5. Data retention
• Active employee data is retained while your account is active. • After an employee is removed, HR records (attendance, payroll, leaves) are retained for up to 7 years to comply with statutory record-keeping requirements (Income Tax, EPF etc.). • You can delete optional fields (profile photo, emergency contact, blood group) at any time inside the app. • Backups are typically purged within 90 days of deletion.

6. Security
• All data is transmitted over TLS (HTTPS). • Passwords are hashed with bcrypt; never stored in clear text. • Admin functions are enforced by JSON Web Tokens with short expiry. • Sensitive operations are logged in an audit trail. • We follow industry-standard encryption-at-rest and role-based access controls.  No system is 100% secure — please use a strong password and do not share it.

7. Your rights
Subject to local law (including India's DPDP Act and the EU GDPR), you have the right to:  • Access the personal data we hold about you. • Correct inaccurate data (most fields are editable in the app). • Delete optional fields, or request full deletion of your account. You may delete your account directly from Settings › Delete my account inside this app. • Withdraw consent for optional features (e.g., profile photo) at any time. • Lodge a complaint with your local data-protection authority.  To exercise any of these rights, email info@icestationzebra.in from the email or phone associated with your account. We will respond within 30 days.

8. Children's privacy
PayMasterPro is intended for use by employees aged 18 and over. We do not knowingly collect data from children. If you believe a minor has registered, please contact us and we will remove the account.

9. International transfers
Our servers may be located outside your country (e.g., India, Singapore, the United States). When your data crosses borders we use providers who comply with applicable safeguards (Standard Contractual Clauses, encryption in transit and at rest).

10. Cookies and analytics
The mobile app does NOT use cookies. The web/PWA version uses strictly necessary cookies for authentication only — no analytics or advertising cookies.

11. Changes to this policy
We may update this Policy from time to time. Material changes will be communicated via an in-app notice. The "Last updated" date at the top reflects the latest revision.

12. Contact
If you have any questions, requests, or concerns regarding this Policy or your data, email info@icestationzebra.in and we'll get back to you within 30 days.