Privacy Policy

1. Who we are

HR Suite (the "Service", "we", "us", "our") is operated by Smart Chain Technology ("Smart Chain"). This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit hrsuite.smartchain.consulting or use the HR Suite application. For questions, contact us at privacy@smartchain.me.

2. Information we collect

• Account information — name, work email, password (hashed), company, role, country, phone number.
• Employee/HR data you upload — employee profiles, documents, payroll, leave, performance, attendance and other records you choose to manage in HR Suite. You are the controller of this data; we are the processor.
• Usage and device data — IP address, browser type, pages viewed, timestamps, and crash diagnostics.
• Cookies and analytics — we use Google Analytics (gtag.js) to understand usage. You can disable cookies in your browser.

3. Google Sign-In and Google user data

When you choose "Continue with Google" to sign up or sign in, we request the following non-sensitive OAuth scopes from your Google Account:

• openid — to authenticate you.
• https://www.googleapis.com/auth/userinfo.email — to read your primary email address.
• https://www.googleapis.com/auth/userinfo.profile — to read your basic profile (name and profile picture).

We use this information solely to (a) create and authenticate your HR Suite account, (b) populate your display name and avatar, and (c) link your sessions to your tenant.

Limited Use disclosure. HR Suite's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, do not use it for advertising, and do not allow humans to read it except (i) with your explicit consent, (ii) for security purposes (e.g. investigating abuse), (iii) to comply with applicable law, or (iv) where the data has been aggregated and anonymized.

4. How we use information

• To provide, maintain, and secure the Service.
• To authenticate users and prevent fraud or abuse.
• To process payments and manage subscriptions.
• To send service-related communications (e.g. password resets, billing).
• To comply with legal obligations.

We do not use your personal information, or data from your Google Account, for advertising or to train generalized AI/ML models.

5. How we share information

We share personal information only with: (a) sub-processors strictly necessary to run the Service (cloud hosting, database, email delivery, payments); (b) authorities when required by law; and (c) successors in the event of a corporate reorganization. We do not sell personal information.

6. Data retention

We retain account and HR data for as long as your subscription is active and for a reasonable period afterward to comply with legal, accounting, or reporting obligations. You may request deletion of your account at any time.

7. Security

We use TLS in transit, encryption at rest, role-based access control, multi-tenant row-level isolation, and audit logging. No system is 100% secure; we encourage strong passwords and Google Sign-In with 2-Step Verification.

8. Your rights and revoking Google access

You may access, correct, export, or delete your personal information by emailing privacy@smartchain.me. You can revoke HR Suite's access to your Google Account at any time at https://myaccount.google.com/permissions.

9. International transfers

HR Suite is operated globally. Personal information may be processed in countries other than your own. We use appropriate safeguards (e.g. Standard Contractual Clauses) where required.

10. Children's privacy

The Service is intended for business use and not directed to children under 16. We do not knowingly collect data from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified by email or in-product notice prior to taking effect.

12. Contact

Smart Chain Technology · Privacy Office · privacy@smartchain.me