Privacy Policy
Last updated August 2026
Who we are
AionHRMS is a biometric attendance product operated by AIONDATA Private Limited. This policy covers the AionHRMS service at aionhrms.com. Questions go to info@aiondata.io.
Biometric data — the part that matters
Biometric terminals do not store images of fingerprints or faces. They compute a mathematical template, and it is that template — not a picture — that is stored and matched. Where AionHRMS holds templates centrally, it is so an employee enrolled on one terminal is recognised on another without scanning again.
Templates are never displayed in the interface, never included in an ordinary attendance export, and are held solely to operate the attendance and access-control functions of the organisation that enrolled the person.
If your organisation deletes an employee, their stored templates go with them. If you lock an employee's access, the template is retained so access can be restored without re-enrolment — that is the difference between a suspension and a deletion.
Who controls the data
The organisation that enrols an employee is the controller of that employee's data. We process it on their instructions in order to run the service. If you are an employee with a question about your own attendance record, raise it with your employer first — they can see and correct it, and they decide retention.
What else we collect
Account details for the people who log in (name, phone number, email); attendance events pushed by your devices, including timestamp, terminal and verification method; and device registration details such as serial number and model. We use a phone number and a one-time password to authenticate logins.
Where it is stored and who can see it
Data is stored on infrastructure in India. Access within our team is limited to the people who need it to operate and support the service. We do not sell personal data, and we do not use employee attendance data for advertising.
Your rights
You may ask us what we hold about you, ask for corrections, and ask for deletion where we are not required to retain it. Where the request concerns data your employer controls we will refer you to them and support them in responding.