Privacy Policy

1. Introduction & Scope

This Privacy Policy describes how Mountlink Digital Pvt. Ltd. ("Mountlink", "Company", "we", "our", or "us") collects, uses, stores, and protects personal and sensitive information when you use our internal employee and technician portal application, Mountlink Staff (com.mountlink.staffapp), and our associated web platforms (mountlink.net.np).

The Mountlink Staff application is designed strictly for internal enterprise workforce management, field technician support operations, attendance logging, and job dispatching. By downloading, accessing, or using the Mountlink Staff application, you agree to the collection and handling of your data in accordance with this policy.

2. Location Information (Foreground & Background Location)

Prominent Disclosure: Mountlink Staff accesses and collects precise location data (GPS) to enable:

• Attendance Check-In & Check-Out Verification: Verifying that the employee is present at the designated branch or customer service site during daily attendance logging.
• Field Duty Route Tracking & Timeline: Recording the technician's on-duty route history, customer site visits, and calculating travel distance for duty reimbursement.

• Control & Consent: Location collection begins only after you perform an explicit work "Check-In" action and provide affirmative consent via our in-app prominent disclosure dialog. Location tracking stops completely when you perform "Check-Out" or end your work shift.
• Non-commercial Use: Location data is strictly used for internal operational logistics and is never shared with third parties or used for targeted advertising.

3. Camera & Facial Image Data

Mountlink Staff requests access to your device camera strictly to capture a live selfie image during daily attendance Check-In and Check-Out.

• Purpose: Live image capture is used solely for visual identity verification and AI-assisted face match against your registered employee profile to prevent buddy punching or fraudulent attendance.
• Storage: Attendance photos are stored securely on our company enterprise servers accessible only by authorized HR and branch administration.
• Third Parties: Facial images are never sold, rented, or distributed to any commercial third parties.

4. Employee Profile & Account Information

To operate the staff management portal, we process employee information provided by your employer (Mountlink Digital):

• Personal Identification: Full name, employee ID, username, contact phone number, job title/designation, and assigned branch.
• Payroll & HR Records: Salary slips, overtime records, advance payment applications, and leave balances.
• Biometrics: If you enable Fingerprint/Face Unlock in the app, biometrics are handled entirely on-device by your phone's Android BiometricPrompt security chip; Mountlink never sees or stores your biometric raw keys.

5. Device & Security Information

When connecting to our APIs, our servers automatically log basic diagnostic information for cybersecurity and account protection:

• Device model and operating system version (e.g., Android version).
• Internet Protocol (IP) address and approximate connection location.
• Session timestamps and login attempt audit trails to detect unauthorized access attempts.

6. Data Security & Storage

We implement industry-standard administrative, technical, and physical security measures to safeguard employee data:

• All communications between the mobile app and our servers are encrypted via Transport Layer Security (TLS/HTTPS).
• Passwords and sensitive tokens are encrypted using secure cryptographic hashing algorithms.
• Access to employee records and location history is strictly restricted to designated administrative roles (Superadmin, Branch Manager, HR Manager).

7. Data Retention & Deletion Policy

• Retention: Employee records and attendance/location data are retained for the duration of the staff member's employment tenure and as required by local labor regulations and tax auditing standards.
• Deletion Request: Employees may review their personal profile data and request corrections or deletion upon departure from the company by submitting an inquiry to the HR Department or contacting our data administrator at support@mountlink.net.np.

8. Changes to this Policy

We may update our Privacy Policy periodically to reflect new app features, operational requirements, or regulatory changes. Any modifications will be posted directly on this URL with an updated "Last Updated" date. Continued use of Mountlink Staff indicates acceptance of the updated terms.

9. Contact Us

If you have questions, feedback, or data privacy requests regarding this Privacy Policy or the Mountlink Staff application, please contact us: