Privacy

Who is responsible

Org360 is software that employers (“your organisation”) use to manage people, pay, time and leave. Your organisation decides what information about you is kept in Org360 and who can see it. We host and run Org360 for them and handle your information only to provide the service to them, under our agreement with them.

What information is involved

• Your sign-in: work email, role and optional two-factor sign-in. Your chosen password is stored as a one-way hash; temporary sign-in details may be sent to your work email.
• Your employment records added by your organisation, for example job, pay, leave, attendance, documents and training.
• What you add yourself, for example leave requests, timesheets, expense receipts and profile details.
• Location when you clock in or out: Org360 asks your phone or browser for your location at that moment so your organisation can see you were at the right site. You can decline, and it is never tracked in the background.
• Security and technical records: sign-in times, network (IP) address, the type of browser or device, and an audit log of important changes. Payroll can see payslip opens, print requests and PDF/CSV download requests to help check access. A request does not prove a file was saved or read, and is not a prediction of whether someone will leave.
• Usage statistics: counts of which features are used and how quickly pages respond, so we can plan maintenance and improve Org360. They never include what you type, the content of records or keystrokes.

How it is used

To provide Org360 to your organisation, keep it secure, back it up, give support when your organisation asks for it, and improve the service. We don’t sell your information, show advertising, or track you across other apps or websites.

Where it is kept and who can see it

Information is stored on Google Cloud servers in the region chosen for your organisation (for example Mumbai, India), sent only over encrypted connections (HTTPS), and backed up daily; backups are kept for 90 days. People in your organisation see what their role allows. Our support staff open your organisation’s workspace only when it asks for help, and every such session is recorded in its audit log. Service providers we rely on (such as Google Cloud for hosting, and the email service your organisation connects) handle information only to run Org360.

The Org360 mobile app

The app opens your organisation’s Org360 workspace securely in Chrome. The app remembers your organisation’s workspace address and name on your phone. Your browser handles sign-in and keeps its own session cookies. It uses the camera, files, location or notifications only when you choose to (for example to attach a receipt or clock in), and it doesn’t collect your contacts or track your location in the background.

Your choices, and deleting your information

You can see and update much of your information in your profile. For corrections, copies or deletion of your information, ask your organisation’s Org360 administrator — they control your records and can remove them, subject to the records employers must keep by law. You can also contact us at the contact details on your organisation’s sign-in page and we’ll pass your request to your organisation. Uninstalling Org360 removes its saved workspace address and name. It does not sign you out of your browser; use Sign out in your workspace, and clear that site’s browser data if needed.

How long it is kept

For as long as your organisation uses Org360 and as long as the law requires employment records to be kept. When an organisation stops using Org360, its information is deleted as agreed with it; backups expire after 90 days. Detailed usage statistics are deleted after 90 days and summaries after 13 months.

Privacy laws

Depending on where you are, you may have rights under privacy laws such as Australia’s Privacy Act 1988, India’s Digital Personal Data Protection Act 2023 or the GDPR. Your organisation handles those requests, and we help it do so.

Questions and changes

Questions or concerns: the contact details on your organisation’s sign-in page. If we change this page, the date below changes too. Org360 isn’t intended for children.