Privacy Notice

Who handles the data

YanbooHR is operated by Amwaj Technology. The subscribing employer controls its workforce records; Amwaj Technology processes those records to provide and secure the service.

Privacy questions and rights requests can be sent to privacy@yanboohr.com. Employers should also provide their own employee-facing privacy information and lawful basis.

Data we process

The platform may process account and contact details, employment records, attendance and location captured at check-in or check-out, leave, payroll, performance, documents, support messages, audit events, and AI prompts or outputs submitted by authorized users.

Password values are never stored. Authentication uses Argon2id hashes and HttpOnly session cookies. Registration acceptance evidence stores a keyed hash rather than the raw IP address or user-agent.

Why and how it is used

Data is used to deliver HR workflows, enforce tenant and role access, prevent abuse, recover the service, support customers, meet contractual duties, and—only when configured—provide AI-assisted analysis. AI output is advisory and should be reviewed by an authorized person before an employment decision.

Sharing, storage, and retention

YanbooHR stores application data in independently operated PostgreSQL and managed file storage. Optional email, payment, and AI providers receive only the data needed for the enabled feature and must be covered by the operator's contracts and deployment configuration.

The employer must configure a documented retention schedule appropriate to its laws and employment obligations. Backups, legal holds, and required audit records may delay deletion. Data is not sold.

Your choices and rights

Depending on applicable law, a person may request access, correction, export, restriction, objection, or deletion through their employer or the contact above. Identity and authority are verified before action, and legally required records may be preserved.