Privacy Policy سياسة الخصوصية

1. Who we are

Levant HR ("Levant HR", "we", "us", or "our") provides human-resources software for employers in Jordan, Lebanon, Syria, Iraq, and the wider region. Our platform includes a mobile app for employees, an admin console for HR teams, and supporting web services.

In most cases, your employer is the data controller of your personal data and Levant HR acts as a data processor on their behalf. This means your employer decides what data is collected and why; we process it to deliver the service. If you have questions about your own records, please contact your employer's HR team first.

2. Information we collect

Account & profile data

Name, employee ID, email, phone number, job title, department, branch, manager, and profile photo — typically provided by your employer when your account is created.

Attendance & location data

When you punch in or out, we collect your device's GPS location at that moment to verify you are within your assigned branch radius (geofencing). We do not track your location continuously or in the background — location is only read during an attendance action you initiate.

Camera & photos

If you upload documents or a profile photo, we access your camera or photo library only when you choose to. Images you upload are stored to support your HR records.

Biometric data (Face ID / Touch ID)

If you enable biometric sign-in, authentication is handled by your device's operating system. Your fingerprint or face data never leaves your device and is never transmitted to or stored by Levant HR.

HR records

Leave requests, attendance history, payroll-related information, documents, and approvals processed through the platform.

Device & usage data

Device model, operating system, app version, language, push-notification token, and basic technical logs used to operate and secure the service.

Communications

Messages you send through support, demo requests, and (where used) interactions with LevantAI, our in-app assistant.

3. How we use your information

• To provide attendance, leave, payroll, and HR features.
• To validate attendance punches against your assigned location.
• To authenticate you and keep your account secure.
• To send operational notifications (e.g. approvals, reminders).
• To provide support and respond to your requests.
• To maintain, improve, and secure the platform, and to comply with legal obligations.

4. LevantAI and Anthropic

Levant HR includes an artificial intelligence feature called LevantAI. LevantAI uses the Claude API provided by Anthropic, PBC ("Anthropic") to generate AI-powered responses.

When a user chooses to use LevantAI and provides consent to AI data sharing, Levant HR may transmit the following to Anthropic:

• Messages and questions entered into LevantAI.
• The user's first name, job title, department, and manager's first name.
• Relevant leave balances (annual, sick, business, and work-from-home).
• Today's punch-in and punch-out times, and open missing-punch dates and times.
• Status of the user's recent and pending HR requests (type, date, and status).
• The latest locked payslip period and net pay amount.
• Company HR policy rules needed to answer the request (for example attendance grace and leave approval steps).

This information is sent so Anthropic can process the request and generate a response. We do not send email addresses, employee record identifiers, request or missing-punch record identifiers, bank details, identity documents, health records, disciplinary files, or performance reviews to Anthropic for LevantAI.

Consent is required before any of this information is sent. In the mobile app, users must tap Allow & Continue on the AI Data Sharing disclosure. Choosing Not Now means nothing is sent to Anthropic; other Levant HR features remain available. Users can withdraw permission at any time in Settings → Privacy → AI & Data Sharing. After withdrawal, future LevantAI requests are blocked on the server until consent is granted again.

The Levant HR admin console includes optional report drafting and insights that also use Claude. Those features send only the administrator's own prompt and aggregated, de-identified workforce statistics (counts, percentages, totals, and department or branch labels for groups large enough not to identify an individual). They do not send employee names, email addresses, or employee record identifiers. An administrator's consent does not authorize sending another employee's identifiable personal information to Anthropic.

LevantAI chat transcripts are stored on the user's device, not as a server-side conversation history. Levant HR keeps a server-side consent record (whether sharing is allowed, the consent version, and timestamps). Operational logs for LevantAI store metadata such as request status and hashed identifiers, not full prompts or replies. Anthropic's handling of data it receives is governed by Anthropic's terms and policies.

To request access, correction, or deletion of personal data, use the in-app profile and privacy tools or contact us at the address below. Because your employer is usually the data controller, some requests may be directed to them.

5. How we share information

We do not sell your personal data. We share it only with:

• Your employer — HR administrators and your managers, as required for HR operations.
• Infrastructure providers — cloud hosting and database services that store data on our behalf under contract.
• Anthropic, PBC — to power LevantAI responses, only after you grant AI data-sharing consent.
• Push-notification services — Apple and Google, to deliver notifications.
• Authorities — where required by applicable law or to protect rights and safety.

6. Data retention

We retain personal data for as long as your account is active and as long as your employer requires it to meet HR, legal, and accounting obligations. When data is no longer needed, it is deleted or anonymized.

7. Security

We use industry-standard measures including encryption in transit (HTTPS), access controls, and role-based permissions. No system is perfectly secure, but we work continuously to protect your data.

8. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. In the app you can:

• View and update parts of your profile.
• Download a copy of your data.
• Request account deletion.

Because your employer is usually the controller, some requests may be directed to them. You can always contact us using the details below.

9. Children

Levant HR is intended for use by employees and is not directed at children under 16. We do not knowingly collect data from children.

10. International transfers

Your data may be processed in countries other than your own. Where this happens, we take steps to ensure it remains protected in line with this policy.

11. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above, and where appropriate we will notify you in the app.

12. Contact us