Use only the data required for verification; do not continuously track people.

What this page explains

This page explains how the MesaiGo product protects and uses data. The applicable privacy notice for each customer setup separately names the data controller, legal basis, recipients, international transfers, and request channels.

Data we do not collect

MesaiGo does not collect, store, or send face images, fingerprints, or biometric templates to the server. Access and attendance decisions are not based on GPS coordinates, and background location tracking is not performed.

Verification data we process

Phone and enrollment identifiers, organization, entry point, single-use verification request, phone and gateway check results, security level, rule version, time, and transaction history are processed only as necessary to operate the product securely.

On-device user verification

When a supported version and organization rule require it, a High Assurance transaction may be approved with the phone PIN or biometric check. Face and fingerprint data are not transferred to MesaiGo; the app uses only the result that the phone successfully verified the user.

Viewing and correcting employee records

Employees can view their own arrival, departure, and attendance records, calculated hours, missing or incorrect records, and correction history. The original record is not changed silently; the person making the correction, time, reason, and approvers are stored separately. Detailed technical communication records are kept only when required, encrypted, visible only to authorized users, and deleted after the defined period.

Retention and access

Retention is defined by the organization according to the type of data, purpose, contract, and legal requirements. Users whose jobs do not require the data cannot access sensitive employee or security information.