Privacy Policy for Employee Portal for Odoo


​

Last Updated: October 2026

Application Name: Employee Portal for Odoo

Package Name: com.jasminebeauty.employeeportalforodoo

Developer: Jasmine Beauty Company

Contact Email: [email protected]

Contact Phone: +966 12 649 3648

Country: Kingdom of Saudi Arabia

  1. Introduction and Scope Jasmine Beauty Company values the privacy of our employees, field teams, and authorized users. This Privacy Policy governs the collection, use, protection, and handling of personal and sensitive data when you use the Employee Portal for Odoo mobile application.

The application is an enterprise workforce self-service client designed to connect authorized employees securely to their organization's Odoo ERP system for daily operations, including attendance logging, approvals, leave requests, task tracking, and field reporting.

  1. Personal and Sensitive Data We Collect and Why

A. Precise Location Data (GPS) What we access: Precise geographic coordinates (latitude and longitude). Purpose: Location is collected only and momentarily when you explicitly tap to register Attendance (Check-in or Check-out) or log a client sales visit. It is used strictly to verify that you are physically present within your company’s designated and approved worksite geofence radius defined in Odoo. No Background Tracking: The application does not track, monitor, or collect your location in the background or when the app is closed. Background location access is permanently disabled.

B. Camera and Images Access What we access: Device camera and photo selection. Purpose: Camera access is triggered only upon your direct request to:

  1. Scan workplace QR codes for attendance verification.
  2. Scan product barcodes during promoter inventory and sales counts.
  3. Capture or attach proof-of-work photos and receipts for daily reports and expense requests. The application never accesses your camera or gallery without your direct and immediate action.

C. User Account and Profile Information What we collect: Employee full name, work email address, employee ID, job position, department, and company Odoo login credentials. Purpose: Used strictly to authenticate your account and ensure authorized access to company operational tools.

D. Device Identifiers and Push Notification Tokens What we collect: Device unique ID (UID), operating system platform, device model, and Expo Push Notification tokens. Purpose:

  1. Device Security: To bind authorized devices to specific employee profiles, preventing attendance fraud and proxy check-ins. 
  2. Push Notifications: To deliver important transactional notifications, such as approval requests, stage updates, and task assignments. 
  3. Secure Data Handling and Security Procedures We implement strict administrative, technical, and physical safeguards to protect your personal and sensitive data: 
  • Encryption in Transit: All network traffic between the mobile application and the Odoo server is strictly encrypted using modern HTTPS with Transport Layer Security (TLS 1.2 or higher).
  • Secure Device Storage: Sensitive authentication tokens and credentials stored locally on your device are encrypted using secure hardware-backed storage mechanisms (Android Keystore and iOS Keychain).
  • Role-Based Access Control: Server-side access to employee records is restricted solely to authorized supervisors, HR personnel, and system administrators.
  • No Selling or Commercial Sharing: We do not sell, rent, lease, or monetize your personal or sensitive data under any circumstances. We do not share your data with third-party advertisers, data brokers, or marketing networks.
  • Third-Party Service Providers: The only third-party infrastructure used is Expo / Apple APNs / Google Firebase Cloud Messaging solely for transmitting system push notifications to your device.
  1. Data Retention and Account Deletion
  • Data Retention: Employee data, attendance records, and transaction logs are maintained in compliance with corporate HR policies, labor regulations, and statutory employment record-keeping requirements in the Kingdom of Saudi Arabia.
  • Data and Account Deletion: When an employee leaves the organization or access is revoked, their mobile access is immediately terminated. Employees or users who wish to request data correction, review, or deletion of their account records may submit a formal request through their company’s HR department or by emailing our Data Privacy Officer at [email protected].
  1. Policy Updates We may periodically update this Privacy Policy to reflect operational or regulatory changes. Any modifications will be posted directly to this page with an updated Last Updated date. 
  2. Contact Information For any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact: 
    Company: Jasmine Beauty Company 
    Address: Kingdom of Saudi Arabia Email: [email protected]
    Phone: +966 12 649 3648 Website: https://www.jasminbeauty.sa​

Contact Information For any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact:

Company: Jasmine Beauty Company

Address: Kingdom of Saudi Arabia

Email: [email protected]

Phone: +966 12 649 3648​

​ https://www.jasminbeauty.sa


Contact us

Send