Workonnect.ai may collect the following types of information: a. Personal Information When organizations use our HRMS platform, we may collect employee-related information, including: • Full name • Email address • Phone number • Job title and department • Employment details • Attendance and leave records • Payroll-related information • Profile images (if uploaded) b. Organization Information When companies register with Workonnect.ai, we may collect: • Company name • Business contact details • Organization structure • Employee records managed within the platform c. Usage Information We may automatically collect certain technical information when users interact with our website or platform: • IP address • Browser type and version • Device information • Pages visited and activity logs • Date and time of access d. Cookies and Tracking Technologies Workonnect.ai uses cookies and similar technologies to improve user experience, analyze usage patterns, and enhance platform performance. Users may disable cookies through browser settings; however, some platform features may not function properly.

Workonnect.ai uses collected information to: You agree to: • Provide and operate the HRMS platform • Manage employee and organizational records • Process attendance, leave management, and HR workflows • Improve system functionality and performance • Provide customer support • Communicate important updates or system notifications • Ensure platform security and prevent misuse • Comply with legal obligations

Workonnect.ai processes personal data only where a valid legal basis exists under applicable data protection laws. The company adheres to the Electronic Communications Privacy Act by safeguarding the privacy and security of electronic communications and data transmitted through our platform. This includes processing necessary for the performance of contractual obligations with our customers, such as delivering HRMS services and maintaining employee records. We may also process data to comply with legal and regulatory requirements, including tax, employment, and compliance obligations. In certain cases, processing is based on our legitimate interests, such as ensuring platform security, improving system functionality, and preventing fraud. Where required, we rely on explicit user consent, particularly for marketing communications. All processing activities are conducted lawfully, fairly, and transparently.

Workonnect.ai takes appropriate technical and organizational measures to protect user data, including: • Secure servers and encrypted connections (HTTPS) • Access controls and authentication mechanisms • Data monitoring and security audits • Protection against unauthorized access or disclosure While we implement strong security practices, no system can guarantee complete security.

Workonnect.ai does not sell personal data. We may share information only in the following circumstances: • With authorized members of the organization using the platform • With trusted service providers who help operate our services (hosting, analytics, infrastructure) • If required by law, regulation, or legal process • To protect the rights, safety, or security of Workonnect.ai and its users

Workonnect.ai retains data for as long as necessary to provide services to our customers and to comply with legal or regulatory requirements. Organizations using Workonnect.ai control the employee data they upload and manage within the platform.

Depending on applicable laws, users may have rights regarding their personal information, including: • Access to their data • Correction of inaccurate information • Request for deletion of data • Restriction of certain processing activities Requests related to employee data should generally be directed to the organization that manages the account.

Workonnect.ai may process and store information on servers located in different countries. When transferring data internationally, we take reasonable steps to ensure data is protected according to applicable privacy standards.

Workonnect.ai operates within a very comprehensive data privacy framework aligned with globally recognized standards. This includes the General Data Protection Regulation (GDPR) and other applicable laws, which the company considers while retaining the data of its customers. Workonnect.ai also complies with the Federal Trade Commission Act by maintaining transparent, fair, and non-deceptive practices in the collection, use, and protection of personal information as per the FTC Act (Section 5). As a mechanism, the customer organizations act as data controllers (determining the purpose and means of processing employee data) while Workonnect.ai acts as a data processor (handling such data strictly on documented instructions). The company attempts to implement privacy-by-design principles by ensuring that data protection is embedded into its entire systems, processes, and product architecture. It can be noted that access to personal data is limited to authorized personnel and sub-processors only. This is also under strict contractual obligations, ensuring confidentiality, integrity, and accountability at every stage of data processing.

Workonnect.ai is a business-focused platform that is intended to be used solely by organizations and their authorized personnel (not by children). Our services are not designed for, nor directed toward, individuals under the age of 16. In this case, Workonnect.ai complies with COPPA by not knowingly collecting or processing personal information from children under the age of 16. The company hereby declares that we do not collect, process, or store personal data relating to children under the age of 16. If we become aware that such data has been inadvertently submitted to our platform, we will take prompt action to delete it in accordance with applicable laws. Any customer organizations that are using the services of Workonnect.ai are responsible for ensuring that any data uploaded to the platform complies with legal requirements. This includes restrictions concerning all minors. For concerns regarding potential child data, users may contact us directly for immediate review and resolution.

Workonnect.ai does not engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals or organizations that are engaged with us. It can be noted that while the platform may incorporate automated functionalities (including workflow automation, attendance tracking, or system notifications), these features are designed to support administrative efficiency rather than replace human judgment. All material employment-related decisions, including hiring, compensation, promotion, or termination, remain under the sole control of the customer organization. These activities require compliance and approvals, without which the decisions are not implemented. Also, in line with global privacy standards, users retain the right to object to any form of automated processing where applicable. Workonnect.ai remains committed to transparency in all system-driven operations.

Workonnect.ai maintains an incident response framework to address potential data security breaches. In the event of a breach, the company’s system is designed to promptly initiate internal investigation procedures, which help to identify, contain, and remediate the issue immediately after being reported. As a suitable strategy, the company will notify affected customer organizations and relevant regulatory authorities within prescribed timeframes defined by law. Workonnect.ai also provides timely updates, risk mitigation guidance, and corrective measures to minimize any minor to adverse impact. In this case, the response protocols include continuous monitoring, post-incident analysis, and implementation of enhanced safeguards to prevent recurrence. The company promises to stay committed to maintaining transparency, accountability, and rapid response in protecting the confidentiality and integrity of user data.

Workonnect.ai may integrate with third-party tools such as communication platforms, analytics tools, or payment services. These third-party services have their own privacy policies governing the use of information.

Workonnect.ai may update this Privacy Policy from time to time. When we make updates, the "Last Updated" date will be revised. Continued use of the platform after updates indicates acceptance of the revised policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: Workonnect.ai Email: support@workonnect.com Website: www.workonnect.com We are committed to protecting the privacy and security of our users and organizations that trust Workonnect.ai with their HR operations.