Privacy Policy

Tanzeem is a company operating system for HR, payroll, attendance, finance, and related workflows, operated by WalQalum Technologies (Private) Limited (“WalQalum”, “we”, “us”). This policy explains what data we process, why, and the choices available to you. It covers our web and mobile apps and our Microsoft Teams and Slack integrations.

Who controls your data

Tanzeem is provided to organizations (our customers). For employee and company data entered into Tanzeem, the employing organization is the data controller and Tanzeem acts as its processor. For account and billing data of the organization itself, we act as controller.

Data we process

• Account & identity: names, work email, role, and authentication data of users who sign in.
• HR & workforce data your organization chooses to store: employee records, attendance and leave, payroll inputs, documents, and performance data.
• Integration data: when you connect Microsoft Teams or Slack, we store the workspace/team identifiers and the access credentials needed to post notifications. Tokens are encrypted at rest and used only to deliver the notifications you configure. We do not read your channels’ message history.
• Usage & diagnostics: limited technical logs (request identifiers, tenant identifiers, timestamps) for security and reliability. We do not log message content or secrets.

How we use data

To provide and secure the service, deliver the notifications and features you enable, provide support, meet legal obligations, and improve reliability. We do not sell your data, and we do not use customer content to train external advertising models.

The AI assistant

Tanzeem’s assistant answers questions using your organization’s own documents and policies. Retrieval is strictly scoped to your organization; one tenant can never access another tenant’s data. AI processing is performed via our model provider under contractual confidentiality, and prompts and answers are not used to train third-party models.

Sub-processors

We rely on a small set of infrastructure and integration providers, including cloud hosting and storage (AWS), Microsoft (Teams / Microsoft Graph), Slack, and our AI model provider. Each is bound by data-protection terms. A current list is available on request.

Data location & retention

We host data in regions appropriate to our customers (Pakistan / UAE / MENA) and retain it for as long as your organization’s account is active or as required by law. On termination, data is deleted or returned per your agreement. Deletions are applied as soft-deletes first and then purged on schedule.

Security

Access is tenant-isolated at every layer, credentials and tokens are encrypted, transport is encrypted (TLS), and access is least-privilege. No system is perfectly secure, but we work to industry standards and disclose material incidents as required.

Your rights

Depending on your jurisdiction, you may request access, correction, export, or deletion of your personal data. Employees should contact their employer (the controller); organizations can contact us directly.

Contact

WalQalum Technologies (Private) Limited, Lahore, Pakistan.
Privacy enquiries: privacy@tanzeem.io