Gridos ESS is an employee self-service application published by Gridos Technology SAL. It is provided to employees of organisations that license the Gridos HCM platform. You can only use the app with an account created for you by your employer.
1. Information the app collects
| Data | Why | When |
|---|---|---|
| Precise location (GPS) | To verify that a clock-in or clock-out happened at an approved work location, and to record the site against the attendance record. | Only while the app is open and only at the moment you press clock in or clock out. The app does not request background location and cannot track you when it is closed. |
| Camera | To capture a photo you choose to attach to a request, and to scan codes where your employer has enabled that. | Only when you open the camera yourself. No image is captured in the background. |
| Files you attach | A document or photo you choose to attach to a request, for example a medical certificate, so that it reaches HR with the request. | Only when you pick a file yourself. It is sent to your employer with that request and nothing else on your device is read. |
| Biometrics (fingerprint / face) | Optional sign-in convenience. | Verification is performed by your device. Your fingerprint or face data never leaves the device and is never transmitted to or stored by us. |
| Identity and employment records | Name, employee code, email, job title, department, attendance, leave balances and payslips — the records your employer already holds in Gridos HCM. | Displayed to you in the app; created and maintained by your employer, not by the app. |
| Device and notification token | To deliver push notifications about approvals, rejections and reminders. | Registered when you sign in and enable notifications. |
| Diagnostics | Crash and error information to fix faults. | When the app encounters an error. |
2. How the information is used
- To authenticate you and show your own employment records.
- To record attendance and validate it against your assigned work location.
- To process leave requests, attendance corrections and other submissions.
- To notify you about the status of your requests.
- To diagnose and fix technical faults.
We do not sell your data. We do not share it with advertisers, use it for advertising, or build advertising profiles. The app contains no ads.
3. Who your data is shared with
- Your employer. Your HR and management staff see your records according to the permissions your employer configures.
- Google (Firebase Cloud Messaging). Used only to deliver push notifications to your device.
- Hosting provider. The platform runs on commercial hosting infrastructure that stores data on our behalf.
- Legal obligation. Where we are required to disclose information by applicable law.
We do not share your data with any other third party.
4. Security
- Traffic between the app and our servers is encrypted in transit using HTTPS.
- Access is restricted by role, so employees see only their own records.
- Each customer organisation's data is isolated from every other customer's.
- Passwords are stored using one-way hashing and are never readable by us.
No system is perfectly secure, but we take reasonable technical and organisational measures appropriate to the sensitivity of employment and payroll data.
5. How long data is kept
Employment records are retained for as long as your employer requires, in line with their own retention policy and local employment law. When an organisation ends its use of Gridos HCM, its data is deleted or returned according to the agreement with that organisation. Diagnostic logs are kept for a limited period and then discarded.
6. Your rights
You may ask to access, correct or delete your personal data, and to withdraw optional permissions at any time. Because your employer controls these records, please contact your HR department first. If you cannot resolve it there, contact us at support@gridostech.com and we will assist your employer in responding.
You can revoke location, camera or notification permission at any time in your device settings. Revoking location permission means GPS-verified clock-in will no longer work; the rest of the app continues to function.
7. Children
Gridos ESS is a workplace application intended for employed adults. It is not directed at children and we do not knowingly collect data from anyone under 16.
8. Changes to this policy
If this policy changes we will update the date at the top of this page and, where the change is significant, notify users through the app.
9. Contact
Gridos Technology SAL
Email: support@gridostech.com
Website: gridostech.com
Baghdad, Iraq
© 2026 Gridos Technology SAL. Gridos ESS is available only to employees of organisations licensing Gridos HCM.