Privacy Policy
Last updated 19 September 2026
Who we are
AionHRMS is a biometric attendance product operated by AIONDATA Private Limited. This policy covers the AionHRMS service at aionhrms.com. Questions go to info@aiondata.io.
Biometric data — the part that matters
Supported fingerprint terminals normally create vendor-specific mathematical templates rather than storing a photograph of a fingerprint. Face-terminal formats vary. Some create a mathematical face template; some supported enrolment and cross-device-sync workflows also use a face photograph or an employee profile photograph because that is the format required by the terminal.
AionHRMS may hold these device enrolment payloads centrally so a person enrolled on one compatible terminal can be enrolled on another without scanning again. Raw fingerprint and face templates are not displayed in the interface, are not included in ordinary attendance exports, and are not exposed through the partner API. Employee profile photos may be visible to authorised users as part of the employee record and may be sent to a compatible face terminal.
Archiving or blocking an employee does not delete their enrolment data: it is retained so records remain auditable and access can be restored. The organisation controls its retention period and may request deletion, subject to contractual or legal retention requirements. We will explain the applicable deletion procedure before purchase and on request; we do not describe an archive action as deletion.
Who controls the data
The organisation that enrols an employee is the controller of that employee's data. We process it on their instructions in order to run the service. If you are an employee with a question about your own attendance record, raise it with your employer first — they can see and correct it, and they decide retention.
What else we collect
Account details for the people who log in (name, phone number, email); attendance events pushed by your devices, including timestamp, terminal and verification method; and device registration details such as serial number and model. Depending on the terminal and enrolment flow, employee data can include fingerprint or face templates and face/profile photos as described above. We use a phone number and a one-time password to authenticate logins.
Mobile attendance location
If your employer enables mobile attendance, AionHRMS requests foreground precise location only after you tap Punch now. We send the coordinates, reported accuracy, timestamp, app platform and nearest configured workplace to the attendance service so it can decide whether the punch is inside an approved workplace. We do not request or track background location.
Accepted and rejected attempts are available to authorised company administrators for attendance support, security and fraud review. The employer controls the employment record and its required retention; raw location evidence should be retained only for the support, audit or legal period agreed with the employer.
Website analytics
The public pages of aionhrms.com use Google Analytics 4 to understand visits and Google Ads to measure which advertisements lead to enquiries. These services can receive the pages you view, the site that referred you, advertising click identifiers, your device and browser type, and an approximate location derived from your IP address. They do not run inside the signed-in console, and they never receive anything you type into a form — enquiry names, emails and phone numbers stay with us.
To opt out, install Google's browser add-on at tools.google.com/dlpage/gaoptout or block the googletagmanager.com domain; the site works identically either way.
Where it is stored and who can see it
Data is stored on infrastructure in India. Access within our team is limited to the people who need it to operate and support the service. We do not sell personal data, and we do not use employee attendance data for advertising.
Your rights
You may ask us what we hold about you, ask for corrections, and ask for deletion where we are not required to retain it. Where the request concerns data your employer controls we will refer you to them and support them in responding.
You can delete your login from My profile or follow the public instructions on the account deletion page.