H7 OA Privacy Policy
This application is intended only for authorized enterprise employees and supports internal mobile office work, human resource management, approvals, attachment submission, and attendance punch-in scenarios.
Important Notice
This application is not open for public registration. Employee accounts are generally created, assigned, or activated by the enterprise or its authorized administrators.
Before you log in to or use this application, please carefully read and fully understand this Privacy Policy. By clicking agree, logging in, or continuing to use this application, you acknowledge that you have understood and agreed that we may process your personal information in accordance with this Policy.
Contents
1. How We Collect and Use Your Personal Information
1.1 Account Login and Identity Verification
When you log in to or use this application, we may process:
- Employee name, mobile phone number, and employee ID
- Login account information
- Company, department, and job position
- Login time, necessary device information, and network information
This information is mainly used for account login, employee identity verification, organizational display, internal business processing, account security, and system operation support.
1.2 Profile and Avatar Information
When you complete or modify your profile, we may process your avatar and other profile information that you actively submit, in order to display employee profiles, support avatar updates, and improve internal collaboration efficiency.
1.3 Photos, Photo Library, and Captured Content
When you update your avatar, upload business images, approval materials, reimbursement records, or other image attachments, we may access your camera or photo library and process the images you actively capture or select.
1.4 Files and Attachments
When you use file upload, material submission, approval processing, or other document-related features, we may process the files, images, documents, or other attachments you actively upload, as well as file name, type, size, upload time, and other necessary metadata.
1.5 Location Information
When you use the attendance punch-in feature, and after obtaining your authorization, we collect your current location and compare it with the enterprise-configured punch-in location and radius to determine whether you are within the allowed punch-in area for normal or field attendance punch-in decisions.
We do not continuously collect your location outside the attendance punch-in or related scenarios, nor do we continuously track your location in the background.
1.6 Device, Log, and Runtime Information
To ensure stable operation, account security, and troubleshooting, we may process necessary device and log information, including device model, operating system version, app version, network status, error logs, crash information, and API exception information.
2. Device Permission Usage
This application does not enable your device permissions by default. We request necessary permissions from the system only when you actively use the related features. You may also manage or withdraw the relevant authorizations in your device settings.
| Permission or Capability | Usage Scenario | Information That May Be Processed |
|---|---|---|
| Camera | Taking profile photos, business images, or documentation photos | Images actively captured by you |
| Photo Library / Photos | Selecting avatars, business images, or image attachments | Images actively selected by you |
| File or Document Access | Selecting, uploading, or viewing business attachments | File names, types, sizes, and content of files actively selected by you |
| Location | Attendance punch-in and allowed punch-in range verification | Your current location and punch-in range verification result |
| Network Access and Network Status | Login, data requests, attachment upload/download, and business feature calls | Network status, request records, and necessary connection information |
3. How We Store and Protect Your Personal Information
3.1 Retention Period
We retain your personal information only for the shortest period necessary to achieve the purposes described in this Privacy Policy, unless otherwise required by applicable laws or enterprise management rules.
- Account information is usually retained while the account exists
- Attachments, approval records, and attendance records may be retained according to business needs
- Security logs and error logs may be retained according to security and maintenance requirements
After the necessary retention period expires, we will delete, anonymize, or otherwise handle the relevant information in accordance with applicable laws, regulations, and enterprise management requirements.
3.2 Security Measures
We take reasonable and practical security measures, including but not limited to access control, identity authentication, transmission protection, log auditing, and security monitoring, to prevent unauthorized access, disclosure, alteration, or loss of personal information.
4. How We Share, Transfer, and Publicly Disclose Your Personal Information
4.1 Sharing
We do not sell your personal information to unrelated third parties. We may share relevant information only when authorized, necessary for core functions, required by applicable laws, or needed to handle disputes, complaints, audits, or security incidents within a reasonable scope.
4.2 Transfer
Unless required as part of a merger, division, acquisition, asset transfer, bankruptcy liquidation, or similar event and handled in accordance with applicable laws, we will not proactively transfer your personal information to any company, organization, or individual.
4.3 Public Disclosure
We will publicly disclose your personal information only with your explicit consent or when required by applicable laws, judicial authorities, or administrative authorities, and only within the necessary scope.
5. Your Personal Information Rights
To the extent permitted by applicable laws and regulations, you may have the right to:
- Access and understand how your personal information is processed
- Correct, supplement, or update your personal information
- Request deletion where applicable
- Withdraw previously granted permissions such as camera, photo library, or location permissions
- Request an explanation of the relevant processing rules
Withdrawing certain permissions may affect related features such as avatar upload, attachment upload, or attendance punch-in.
6. Protection of Minors
This application is mainly intended for internal enterprise employees and is generally not designed for minors. If minors are exceptionally involved in specific scenarios, we will implement appropriate protection measures in accordance with applicable laws.
7. How This Privacy Policy Is Updated
We may update this Privacy Policy based on product features, applicable laws and regulations, technology, or operational conditions. Without your explicit consent, we will not reduce the legal rights you should enjoy under this Privacy Policy.
If an update materially affects your rights, we will notify you through in-app pages, announcements, or other reasonable means.
8. How to Contact Us
If you have any questions, comments, suggestions, complaints, or rights requests regarding this Privacy Policy or the processing of personal information, you may contact us through:
- Contact email: it@h7group.cn