[24]7.ai Connect Privacy Policy

This privacy policy has been compiled to better serve those who are concerned with how their ‘Personally Identifiable Information’ (PII) is used online by using [24]7.ai Connect application. The [24]7.ai Connect Privacy Policy is applicable to all the employees of [24]7.ai Inc. and its affiliates (collectively, “[24]7.ai”) and non- employees who use [24]7.ai Connect application.

[24]7.ai Connect application facilitates notifications and self-serve options from various applications & tools used at [24]7.ai Inc. and its affiliates, including 24/7 Customer^TM Private Limited. Notifications may just be information or require an action. So, users can receive alerts & updates or take necessary action on-the-go, right from their mobile device, especially for approvals, eliminating the need to log into multiple web applications or it may just be used to access your QR code any time, for internal QR-code-based processes.

The application previously was meant only for Employees & was called “Employee Connect”, however, it was rebranded as “[24]7.ai Connect” on version 4.0 onwards. In current version, employees and non-employees can use the [24]7.ai Connect application, to do various tasks. Employees continue to do employee related tasks & view employee related screens, and non-employees can do only non-employee tasks & view only non-employee screens, like QR admin scanner for security/medical personals. Other than that, there are various application features such as WFH Attestation implemented on the request of the compliance team during Covid for WFH employees, QR Code solutions for WFO employees, News & Events, Dynamic Forms, Surveys, Covid Vaccine Registration/Trackers.

Collection and Processing

For employees, the main purpose of the mobile application is to provide a single interface, especially managers & senior leadership, to be able to log into only one application and access notifications and take necessary action like approve/reject requests from anywhere, on the go, instead of logging into multiple sub-systems & their respective web-applications. For this, sub-systems use a framework of Web APIs provided/exposed to them, which they can send notifications to employees/users, which in turn are made available on the mobile application for employees to access & action as needed. They could be in the form of just read-only notifications, that need not be actioned. In addition to notifications, there are self-serve options that serve as an extension to the various sub-systems which employees can initiate requests, such as apply for leave, view leave balance, or raise an incident ticket and get geo WiFi password. Also, the ability to publish News & Events, and release surveys to employees, are features that help with employee engagement. During Covid, various Covid related enhancements like WFH Attestation, Vaccination Tracker, QR Code processes were implemented, that helped employees either for working from home, or working from office. For non-employees, mainly QR Code scanning admins, the application helps them process employees via any QR Code based process, where employees show the QR code generated on their application & the admins use their application to scan the employees QR code and throw results or actions to be taken, like in the Medical Check process setup, for staying compliant in line with governmental authorities and to have checks in place to ensure Covid guidelines are followed. Also, for non-employees to have their own QR code to follow the QR code process.

What Personal Information we collect when Users download and login to our app?

For employees, post authentication with Network Terminal credentials, details pertaining to employees are retrieved and stored from Active Directory and Employee database for auto-logins. The details collected includes but not limited to:

• Employee ID
• Email ID
• Department
• User Type
• Geo
• Push registration ID
• User access token
• Contacts
• Files
• Location
• Camera
• Accounts

For non-employees, post authentication with local user ID (system generated) and password (set by user on first login). Details pertaining to non-employees are retrieved and stored from local Connect database, as configured by admins while creating their login ID. The details collected includes but not limited to:

• User ID
• Email ID
• User Type
• Geo
• Push registration ID
• User access token
• Contacts
• Files
• Location
• Camera
• Accounts

For all users, all these details are encrypted & stored in Keystore / Keychain. Device specific details such as UUID, OS version and device model are retrieved and securely stored.

How we protect your information?

We implement a variety of security measures when an employee enters, submits, or accesses their information to maintain the safety of your personal information. Your personal information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems and are required to keep the information confidential. In addition, all employee related data are encrypted and stored in the apps Keystore (Android) or Keychain (iOS).

Cookies, IP Addresses and Other Tracking Technologies

We capture and store the IP address of user whenever they access the app. We also use an access token system that is unique for each user and expires post 24 hours. Google Firebase Analytics is integrated for tracking usage.

Disclosures to third parties

We use the Xamarin framework for developing the mobile app, which in turn provides various third-party plug-ins used in the application, including Google Firebase Analytics plugin. We do not sell, trade, or otherwise transfer your Personally Identifiable Information to outside parties, unless we provide users with advance notice. We ensure to take appropriate security measures to protect your personal data that require parties who process personal data on our behalf.

Opt out

You can uninstall the App to Opt-out of all the services that are provided via [24]7.ai Connect.

Accuracy of Personal Information

[24]7.ai intends to maintain accurate Personal Information at all times. If you require the Personal Information you have provided [24]7.ai to be updated, or that we delete inaccuracies you may send updates and corrections to [24]7.ai via email to IS-Support@247-inc.com specifying in the Subject line that you wish to provide an update and we will make reasonable efforts to incorporate the changes in our records as soon as practicable, if you provide the information we require to locate your Personal Information in our records (e.g. old name, email address, etc.). Once we make the requested update, we will send you an e-mail confirmation so that you are aware the update or correction has been made. If you requested to update your e-mail address, we will send the confirmation notice to both the old and new email addresses. If you wish to access your shared personal information, cancel your account or request that we no longer use your information to provide you services contact us via the information above. We will respond to your requests for access within a reasonable amount of time.

Statement of Consent

By using this App, you consent to the terms of this [24]7.ai Connect Privacy Policy and to [24]7.ai Inc., its affiliates and sub-processors, processing and using Personal Information for the purposes described herein.

Changes

We reserve the right to make changes to this Privacy Policy. It is advisable to review this privacy policy regularly so you are aware of these changes.

Contact Information

If there are any questions regarding this privacy policy, you may contact us using the information below. Support Email ID: IS-Support@247-inc.com