Privacy Policy — Emp Connext
Epic Consulting Co., Ltd. ("Company", "we", "us") is committed to protecting the privacy of users of the Emp Connext mobile application ("App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information.
1. Data Controller
Epic Consulting Co., Ltd.
Address: 408/48, 11th Floor, Phaholyothin Place Building, Phaholyothin Road
Samsen Nai, Phaya Thai, Bangkok 10400, Thailand
Email: Info@epic-consulting.net
Phone: 02-270-1062
2. Information We Collect
2.1 Information You Provide Directly
Account Information: Full name, email address, employee ID, password (hashed with bcrypt — never stored in plain text)
Employee Profile: Job position, department/work site
Profile Photo: Images uploaded via camera or gallery
Leave Requests: Leave type, dates, supporting documents (e.g., medical certificates)
Chat Messages: Text messages, files, and images sent through the in-app Chat system
2.2 Automatically Collected Information
Authentication Tokens (JWT): Stored in encrypted Secure Storage on your device
App Usage Data: App version, device type, OS version
Network Status: Used only to check internet connectivity
2.3 Firebase Cloud Messaging (FCM)
FCM Device Token: Used to deliver Push Notifications
3. Device Permissions
The App may request the following permissions on your device:
Permission | Purpose |
Camera | Upload profile photo, attach images to leave requests or chat |
Photo Library / Gallery | Select images from the gallery for upload |
Storage / File Access | Attach and download documents (PDF, Excel) |
Notifications | Receive alerts for chat messages, approvals, and announcements |
Biometrics (Face ID / Touch ID / Fingerprint) | Quick biometric sign-in |
Internet | Connect to the API server |
Note: You may revoke any permission at any time via your device settings. Certain features may be unavailable if permission is denied.
4. How We Use Your Information
We use your personal information to:
Authentication & Security: Sign-in, session management, access control
HR Services: Employee data management, Timesheets, Leave requests, Pay slips
Internal Communication: Chat system between employees and HR
Push Notifications: Approval status updates, new messages, important announcements
Report Generation: Export PDF/Excel for Timesheets and Pay slips
5. Data Storage & Security
JWT Tokens are stored in platform-level encrypted Secure Storage (flutter_secure_storage)
Passwords are hashed with bcrypt; plain-text passwords are never stored or transmitted
All data transmission uses HTTPS/TLS encryption
Server-side data is stored on company-controlled infrastructure with strict multi-tenant isolation (each organization's data is fully separated)
Rate Limiting is enforced to protect against brute-force attacks
Security headers are applied via Helmet.js
6. Sharing of Information
We do not sell your personal data. Information is shared only in the following circumstances:
Infrastructure/Cloud Providers used to operate the service (under Data Processing Agreements)
Firebase (Google) — for Push Notifications via FCM (subject to Google's Privacy Policy)
Legal Requirements — when required by applicable law or a competent government authority
7. Data Retention
Account data is retained for the duration of your active employment within the system
Upon account deactivation, data is soft-deleted and permanently removed per your organization's data retention policy
Local data on your device (tokens, cached data) is deleted upon logout
8. Your Rights as a Data Subject
Under applicable privacy laws (including Thailand's Personal Data Protection Act B.E. 2562 / PDPA), you have the right to:
Right | Description |
Right of Access | Request a copy of your personal data we hold |
Right to Rectification | Correct inaccurate or incomplete data |
Right to Erasure | Request deletion of your data when no longer necessary |
Right to Data Portability | Receive your data in a machine-readable format |
Right to Object | Object to certain types of processing |
To exercise your rights, contact: Info@epic-consulting.net
9. Children's Privacy
Emp Connext is designed for employees aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has provided personal data, please contact us immediately.
10. Changes to This Policy
We reserve the right to update this Privacy Policy at any time. Material changes will be communicated via:
In-app notifications
Email to your registered address
Continued use of the App after the effective date constitutes acceptance of the updated policy.
11. Contact Us
For questions or concerns about this Privacy Policy, please contact:
Epic Consulting Co., Ltd.
Email: Info@epic-consulting.net
Phone: 02-270-1062
Website: www.epic-consulting.net