Privacy Policy

Last updated: January 19, 2026

1. Introduction

Primesavant Inc. ("we," "our," or "us") operates Quodos, a Human Resource Information System (HRIS) and payroll management platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

By using Quodos, you agree to the collection and use of information in accordance with this policy. We are committed to protecting your privacy and ensuring compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us, including:

• Account Information: Name, email address, company name, and contact details
• Employee Data: Employee records including names, addresses, government IDs (SSS, PhilHealth, Pag-IBIG, TIN), employment details, and compensation information
• Biometric Data: Fingerprint templates and facial recognition data for time and attendance tracking (with explicit consent)
• Financial Information: Bank account details for payroll processing

2.2 Automatically Collected Information

When you access Quodos, we automatically collect:

• Device information and browser type
• IP address and location data
• Usage patterns and feature interactions
• Log data and timestamps

3. How We Use Your Information

We use the collected information for the following purposes:

• Providing and maintaining our HRIS and payroll services
• Processing payroll, statutory contributions, and tax computations
• Generating government-mandated reports (BIR 2316, Alphalist, SSS R3, etc.)
• Time and attendance tracking through biometric integration
• Sending service-related notifications and updates
• Improving our services and developing new features
• Complying with legal obligations

4. Data Storage and Security

We implement industry-standard security measures to protect your data:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Control: Role-based access control and multi-factor authentication
• Infrastructure: Secure cloud infrastructure with regular security audits
• Backups: Regular automated backups with point-in-time recovery

Your data is stored in secure data centers with 24/7 monitoring and physical security controls.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share data only in the following circumstances:

• With Your Consent: When you explicitly authorize us to share information
• Service Providers: Trusted third-party providers who assist in operating our services (subject to confidentiality agreements)
• Legal Requirements: When required by law or to comply with government requests
• Government Agencies: Submission of mandatory reports to SSS, PhilHealth, Pag-IBIG, and BIR

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations (including statutory record-keeping requirements)
• Resolve disputes and enforce our agreements

Philippine labor laws require retention of employee records for a minimum of 3 years after separation. Tax records must be retained for 10 years.

7. Your Rights Under the Data Privacy Act

As a data subject, you have the following rights:

• Right to be Informed: Know how your data is being processed
• Right to Access: Obtain a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal retention requirements)
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing of your personal data
• Right to File a Complaint: Lodge a complaint with the National Privacy Commission

8. Biometric Data Policy

For organizations using biometric time and attendance features:

• Biometric data is collected only with explicit employee consent
• Data is encrypted and stored separately from other personal information
• Biometric templates cannot be reverse-engineered to recreate fingerprints
• Data is deleted upon employee separation or consent withdrawal

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Significant changes will be communicated via email or in-app notification.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data privacy rights, please contact our Data Protection Officer:

• Email: privacy@quodos.ph
• Address: Primesavant Inc., Quezon City, Metro Manila, Philippines