Privacy Policy: GDPR Data Protection & Your Rights

Privacy Policy

Last updated: August 3, 2026

1. Overview

Chegatta ("we", "us", or "our") provides web-based attendance tracking software. This Privacy Policy explains what information we collect when you visit our website or use our software, how we use it, and the choices you have.

By accessing chegatta.com or using the Chegatta service, you agree to the practices described in this policy.

2. Information We Collect

We collect information you provide directly and information collected automatically when you use the service:

• Account data. Name, work email address, company name, and password (stored encrypted) when you create an account.
• Attendance data. The attendance records, check-in and check-out times, schedules, and workforce information that you or your employees enter into the software.
• Usage data. Pages visited, time on site, and referral source collected through privacy-respecting analytics. We use Umami Cloud, which does not use cookies and does not track you across websites.
• Technical data. IP address, browser type, and device type, used for security and service operation.

3. How We Use Information

We use collected information to:

• Provide, maintain, and improve the Chegatta service.
• Process your attendance data and generate the reports and insights you request.
• Respond to your inquiries and provide customer support.
• Send service updates and, if you opt in, product news you can unsubscribe from at any time.
• Detect, prevent, and address technical issues and unauthorized use.

4. How We Share Information

We do not sell your personal data. We share information only in the following limited circumstances:

• With service providers who help us operate the platform (for example, hosting and infrastructure), bound by data processing agreements.
• When required by law, or to protect our rights, safety, or property.
• In connection with a merger, acquisition, or sale of assets, with notice to you where required.

Your attendance data belongs to your organization. We use it only to deliver the service and never for advertising.

5. Your Rights (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access. Request a copy of the personal data we hold about you.
• Right to rectification. Ask us to correct inaccurate or incomplete data.
• Right to erasure. Request deletion of your personal data, subject to legal obligations to retain certain records.
• Right to restrict processing. Ask us to limit how we process your data.
• Right to data portability. Receive your data in a structured, machine-readable format.
• Right to object. Object to processing based on legitimate interests.

Our lawful basis for processing account data is contract (providing the service you signed up for) and, for analytics, legitimate interest. You can exercise any of these rights by emailing privacy@chegatta.com . You also have the right to lodge a complaint with your local supervisory authority.

We do not use your data for automated decision-making that produces legal or similarly significant effects. When we process personal data on behalf of your organization (for example, employee attendance records), your organization is the data controller and we act as a processor.

6. Data Retention

We retain account data for as long as your account is active and for a reasonable period afterward to comply with legal obligations and resolve disputes. You may request deletion of your account and associated data at any time. Attendance records are retained according to your organization's configured retention settings or applicable labor law.

7. Data Security

We protect your data using encryption in transit (TLS) and at rest, role-based access controls, and regular security reviews. See our Security page for details.

8. Cookies and Tracking

Our website uses no advertising cookies and no third-party tracking cookies. Analytics are collected by Umami Cloud without cookies, in a privacy-friendly way that does not identify individual visitors. We do not sell or share your data with data brokers.

9. Children's Privacy

The Chegatta service is not directed to children under 16. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date. Continued use of the service after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us at privacy@chegatta.com or through our contact page .