Privacy Policy
Last updated October 12, 2026
GigPay is an online payroll system with biometric attendance. This policy explains what information it handles, why, and how it is protected. It applies to administrators, accounting staff, employees and field employees who use GigPay.
Information we handle
- Account details: name, employee ID, email, department, and the PIN or password used to sign in.
- Biometric data: fingerprint (and face, where enabled) data used for attendance scans and for signing in.
- Attendance records: scan times from the fingerprint terminal, and check-in and check-out updates submitted by field employees.
- Payroll data: rates, hours, overtime, undertime, holidays, deductions, cash advances, and the payslips produced from them.
- Requests and messages: leave, overtime, undertime, cash advance and attendance correction requests, personal notes, and Messenger conversations between users.
- Technical data: sign-in activity and the information a browser sends when it loads the site.
How the information is used
- To record attendance and compute payroll accurately.
- To let employees view their own records and payslips and file requests.
- To verify who is signing in and to prevent unauthorized or automated access.
GigPay does not sell personal information, and does not use it for advertising.
Biometric data
Biometric data is used only for timekeeping and sign-in. It is enrolled with the employee's knowledge, and it is not shared with anyone outside the employer using GigPay and its service providers. Employees who have questions about how their biometrics are enrolled or removed should ask their employer's administrator.
Who can see it
- Employees see their own attendance, payslips, requests and notes.
- Administrators of the employer manage employee records, requests and payroll.
- Accounting staff reach payroll only after entering a separate access code.
Information may also be disclosed where the law requires it.
How it is protected
- Sign-in pages are protected by Cloudflare Turnstile and hCaptcha.
- Biometric sign-in and PIN recovery are available so passwords are not the only option.
- Pay periods are locked once paid, so finalized figures are not changed unnoticed.
- Accounting staff need a separate access code before payroll opens, and each role sees only its own tools.
No online system can promise perfect security, but these safeguards are there to reduce the risk of unauthorized access, loss or misuse.
How long it is kept
Records are kept for as long as the employer needs them for payroll, accounting and legal purposes. Employees who leave remain in the employer's records for that period, after which they can be deleted on request to the administrator.
Your choices and rights
You may ask to see the information held about you, correct anything that is wrong, or ask for it to be deleted where the law allows. You may also ask how your biometric data is used. Start with your employer's administrator, or write to us at the address below.
Changes to this policy
When this policy changes, the date at the top of the page changes with it.
Contact
Questions about privacy can be sent to gigpay_user@gigapay.site.