OneHQ

Draft template — have it reviewed by a lawyer before customers rely on it

Privacy Policy

Last updated 26 September 2026

This policy explains what personal data OneHQ handles, why, and your choices. Your employer (the workspace owner) decides what is stored about you; CyberSoph (Pvt) Ltd processes it on their behalf.

  1. 1. What we handle

    Account details (name, work email, role), employment records your organisation adds (job details, documents, leave, attendance, timesheets, expenses, assets), and technical data such as sign-in times, IP address and device type.

  2. 2. Why we use it

    To run OneHQ for your organisation: signing you in, showing the right information to the right people, sending notifications you would expect, keeping an audit log, and keeping the service secure.

    We do not sell personal data, and we do not use workspace data to advertise to you.

  3. 3. Who can see it

    People in your workspace see what their role allows — for example, salaries are limited to finance and admins. We use a small set of service providers (hosting, email delivery, file storage) under contracts that protect your data.

  4. 4. Where it is stored

    Data is stored on servers in the European Union (Hetzner, Germany) and encrypted in transit and at rest.

  5. 5. How long we keep it

    For as long as your organisation's workspace is active, then for up to 30 days after it closes, unless your organisation deletes it sooner or the law requires us to keep it longer.

  6. 6. Your choices

    You can ask your workspace admin to correct or export your information. For anything else, contact us and we will work with your organisation to respond.

  7. 7. Contact

    CyberSoph (Pvt) Ltd · support@cybersoph.com