Employee Privacy Notice

Who Is Responsible

Alpha Infinity Holding Corporation is the proposed contact for this notice. The legal address, privacy contact, request channel, and whether affiliated employers act as separate or joint controllers still require confirmation.

Information Processed

Depending on a person's role and use of Alpha THR, the system may process account and profile information; employment and organization details; contact and emergency-contact information; government and payroll identifiers; HR requests; schedules; attendance; performance, clearance, or disciplinary information; and documents submitted by employees, applicants, or authorized personnel.

Attendance and CrossChex

Employees record attendance using biometric time-and-attendance devices. Those devices connect to CrossChex Cloud (opens in a new tab), the Company's primary cloud attendance service. Alpha THR then requests attendance events from CrossChex Cloud for attendance and timesheet workflows.

The inspected Alpha THR integration uses an employee work number and name, event date and time, event type, and device name and serial number. It does not declare, query, or display fingerprint templates, facial templates, or biometric images. The integration currently preserves the complete attendance record returned by CrossChex, so a verified production response is still required before the Company can state that Alpha THR never receives additional fields.

The biometric method and whether or how templates or images are stored by each device or by CrossChex Cloud, including their storage locations and retention and deletion settings, still require confirmation by HR, the DPO, IT, and the vendor.

Derived Records

Alpha THR can combine CrossChex attendance events with work schedules, approved HR requests, holidays, and authorized corrections to prepare daily attendance, timesheet, and payroll-related records. The repository does not establish a fully automated employment decision. HR, the DPO, and legal must confirm whether any current or planned use has a legal or similarly significant effect on a person.

Why Information Is Used

The proposed purposes are to administer employment and applicant processes; manage access; maintain employee records; process attendance, schedules, approved requests, and payroll-related administration; meet approved record-keeping requirements; protect systems and records; and communicate about work. The legal and privacy teams must approve the applicable legal bases and final wording.

Access, Vendors, and Safeguards

Access is intended to be limited to authorized personnel and service providers supporting Alpha THR. Repository evidence identifies Clerk (opens in a new tab) for authentication, hosting and private file-storage services from Vercel (opens in a new tab), PostgreSQL (opens in a new tab) data storage, and CrossChex Cloud (opens in a new tab) for attendance. Some workflows can also use web push or Telegram (opens in a new tab) notifications. The production provider accounts, processing locations, contracts, recipients, and affiliated-company sharing still require review.

Alpha THR uses authentication, role and record-level access controls, and private file delivery in supported workflows. These measures do not replace the Company's required organizational, physical, and technical safeguards or its incident-response process.

Retention and Your Privacy Rights

Record-specific retention periods, deletion rules, identity verification steps, and the official privacy-request contact have not yet been approved. Subject to applicable law, you may request access to or correction of your personal information; object to or ask about its processing; request erasure or blocking when legal grounds apply; request data portability where applicable; seek damages; or lodge a complaint with the National Privacy Commission. Until the official process is approved, use the Company's designated internal HR or privacy escalation channel.