In short: WorkSetu records attendance, pay and staff details so a company can run its site crew. The company decides what is recorded about its staff. We keep the data safe, use it only to run WorkSetu, and never sell it or use it for advertising.
Who we are
WorkSetu is a workforce-management service (the WorkSetu Android app and the website getworksetu.com) run by Stratgies ("we", "us").
When a company uses WorkSetu for its staff, that company is responsible for the staff data it records and decides how it is used; we store and process it for them. For company accounts, billing, this website and messages sent to us, we are responsible.
What we collect
About companies and their account holders
- Company name, country and company code; the Owner's name, e-mail and phone number.
- Plan and billing records: plan, dates, amounts and invoice references. Card and bank payments are handled by Stripe (AED) or Razorpay (INR); we never see or store full card numbers.
About staff, entered by their employer
- Name, employee ID, role, site, team, job title and mobile number.
- If the employer adds them: Emirates ID / national ID and passport numbers and the expiry dates of ID, visa, labour card and insurance.
- Pay details: salary, basic salary, hourly and overtime rates, joining date, and for WPS salary files the IBAN, bank routing code and labour card number.
Attendance
- Check-in and check-out times and the phone's GPS position at that moment, to confirm the person was at the work site.
- A selfie photo at check-in. The app checks on the phone that exactly one face is in the photo; it does not create a face print or any biometric template. The employer may choose one selfie as a reference photo so managers can compare faces by eye.
- Check-ins that look wrong (outside the site, no location, possible fake GPS, no face or more than one face) are marked "Needs review" for a manager.
Work and pay records
- Leave, overtime and advance requests, work rosters, payslips, salary sheets uploaded for WPS matching, the WPS files made from them, and an activity log of who changed what.
Technical and security data
- Login session tokens, a push-notification token if notifications are allowed, and IP addresses kept briefly in counters that stop password guessing and spam.
- When someone logs in on the app, Google Play Integrity confirms the app is genuine and running on a real device. Google processes device information for this under its own privacy policy.
Website and messages
- One cookie that keeps a company user logged in to the dashboard. It is needed for login; WorkSetu sets no advertising or tracking cookies.
- Fonts on this website load from Google Fonts, so Google receives your IP address when a page loads.
- What you write in the contact form (name, company, e-mail, phone and message).
How we use it
- To run attendance, leave, overtime, advances, rosters, payroll and WPS files for the employer.
- To send people notifications about their own requests and payslips, and to remind Owners about expiring documents and their subscription.
- To bill companies for their plan, keep the service secure and answer messages.
We do not sell personal data and do not use it for advertising.
Who can see it
- Staff see their own records.
- Owners, admins, accounts staff and supervisors of the same company see the records their role allows. Data of one company is never shown to another.
- Service providers that help us run WorkSetu, only for that purpose: our hosting provider, Google (Firebase push notifications and Play Integrity), Stripe and Razorpay (payments) and our e-mail provider.
- Authorities, only when the law requires it.
Security
Connections are encrypted (HTTPS), passwords are stored hashed, logins expire, selfie photos sit in a private folder that only logged-in managers of the same company can open, and every change to attendance and pay is logged. No system is perfectly secure: tell your employer, or us at hello@getworksetu.com, straight away if you think an account was misused.
How long we keep it
- Company data is kept while the company uses WorkSetu, and stays readable after a subscription ends so it can be exported.
- When an Owner deletes the company account, all its staff, attendance, pay records and photos are deleted.
- When an employer permanently deletes a former staff member, their name, ID details, phone, password, photos, GPS positions and free-text notes are erased; only anonymous attendance days and pay totals remain so the accounts still add up.
- Payment records are kept as long as tax and accounting law requires.
Your choices and rights
- Staff: ask your employer to show, correct, export or delete your data. Some records, such as payroll, may have to be kept by law.
- Company Owners: correct data and download CSV exports from the dashboard, and delete the whole company account on the "Delete your account" page.
- Anyone can write to us at hello@getworksetu.com.
Children
WorkSetu is meant for employers and their working-age staff. It is not for children.
Changes to this policy
We will update this page when WorkSetu changes how it handles data, and change the date below. Big changes are also shown to company Owners in their dashboard or by e-mail.
Contact
Stratgies, WorkSetu — hello@getworksetu.com
Last updated: 23 October 2026