Privacy Policy

1. Who we are and scope

RAKZ is the Smart Attendance product operated by WISAL AL MASI ESTABLISHMENT FOR INFORMATION TECHNOLOGY (WESSAAL). The product covers the Android employee app, management web experience, and attendance-related operating functionality.

This policy applies to data WESSAAL processes to provide, operate, support, and secure RAKZ. The customer organization may determine certain processing purposes, product settings, and workplace policies and may act as controller for employee data in the context of its use of the service.

2. Data we may process

• Account and organization data such as name, email, phone number, permissions, and the workspace or organization linked to the account.
• Attendance data such as check-in/check-out time, attendance state, workplace-location verification result, Wi-Fi verification result, and attendance-related requests such as leave or adjustments when enabled.
• Location data needed to verify that an attendance action occurs within approved workplace context when that verification is required.
• Technical and security data such as device information, network address, sign-in logs, session identifiers, and diagnostic or security events needed to protect and operate the service.
• Support data included in messages or information provided by the user or organization when requesting help.
• Subscription and billing information related to purchasing RAKZ through WESSAAL. Sensitive payment data is handled by the applicable payment provider and is not presented as employee-app data.

3. Location, Wi-Fi, and Smart Attendance

During check-in or check-out, RAKZ may use device location and the network information needed to verify that the action occurs within workplace controls configured by the organization.

The service is designed to verify an attendance action when it occurs, not to continuously track employee location or create a persistent GPS history outside the attendance action. Location and Wi-Fi settings can vary by organization configuration and policy.

4. Why we use data

• Provide accounts, access, and requested product functionality.
• Perform and verify check-in/check-out actions and expose operational attendance state to management.
• Operate attendance requests, reports, policies, schedules, locations, and related setup.
• Operate enabled automation and operational notifications, including WhatsApp as the currently supported notification channel.
• Protect accounts and systems, prevent abuse, diagnose issues, and improve reliability.
• Manage subscription, billing, support, legal requests, and applicable compliance obligations.

5. When we share data

We do not sell user data. We may share the minimum necessary data with infrastructure, hosting, support, communications, and payment providers needed to deliver the service, subject to their appropriate roles and obligations.

When WhatsApp notifications are enabled, data required to deliver the notification may pass through providers supporting that channel. We may also disclose data when required by law, to protect rights or security, or as part of a legitimate business reorganization subject to appropriate safeguards.

6. Retention and security

We retain information for as long as needed to provide the service, meet contractual and legal obligations, and resolve disputes, then delete or de-identify it when there is no longer a legitimate need to keep it, while respecting customer-controller instructions where applicable.

We use reasonable technical and organizational safeguards to protect data and system access. No electronic transmission or storage method can guarantee absolute security, so controls are reviewed according to the service and operational risk.

7. Your rights and contact

Depending on applicable law and your relationship with the organization, you may have rights to access, correct, restrict, object to, or delete certain data. Where the organization is the controller of employee data, we may direct the request to it or assist it in handling the request.

For privacy requests or questions, contact info@wessaal.com. We may request appropriate information to verify identity and authority before acting on a personal-data request.

8. Changes to this policy

We may update this policy when the service or legal requirements change. The update date and version are shown at the top of this page, and we may provide additional notice for material changes where appropriate.