Privacy Policy
How we handle personal data across AuxBOS — what we collect, why, and what you can do about it. See also our terms of service and pricing packages.
Who we are
AuxBOS is a workforce and client management platform built and licensed by AuxWork Private Limited, based in Abbottabad, Pakistan. This policy covers the AuxBOS software and this website.
If you have any question about this policy, contact us at support@auxbos.com.
Controller vs. processor
This distinction determines who you should contact about your data, so it is worth stating first.
- When a business licenses AuxBOS and installs it on its own servers, that business is the data controller for everything it loads into the platform. AuxBOS is self-hosted, so AuxWork does not host or store the data at all — the business runs the software on its own infrastructure.
- For data we do collect for our own purposes — your license purchase, billing, support conversations and this website — AuxWork is the controller.
- If the business has opted into our optional managed-hosting add-on, AuxWork acts as a processor in respect of the data on that hosted instance, handling it on the business's instructions.
If you are an employee or client of a business that uses AuxBOS and you want to access or delete your data, please raise it with that business first. If you approach us directly, we will refer you to them, because we do not have access to their self-hosted instance.
What we collect
Because AuxBOS is self-hosted, most of the data described below sits on the licensee's own servers, not ours. AuxWork only sees the information you send us directly (license purchase, support requests, this website). The list below describes what the software handles, so you understand what your licensee is responsible for.
Account and instance data (on the licensee's servers)
- Company details supplied at setup, and the admin account created with it.
- Employee and client records created by an admin: name, work email, phone, department, address, emergency contact, joining date, employment type and shift times.
- The system-issued User ID and the hashed password for each account. Passwords are stored as one-way hashes — even the local admin cannot read them.
Content created in the platform (on the licensee's servers)
- Work sessions, task time logs and attendance check-in/out records.
- Screenshots captured during work sessions — see the section below.
- Leave requests, salary records, generated HR letters, and documents uploaded to an employee profile such as degrees, certificates and contracts.
- CRM records: leads, pipeline activity, campaigns, forecasts and contracts.
- Invoices, quotations, announcements, in-app chat messages and support conversations.
Data AuxWork actually collects
- License purchase details: company name, billing contact, and payment information handled by our payment processor.
- Support conversations you initiate with us, and any diagnostics you voluntarily send.
- Standard web-server logs for this marketing website.
Time tracking & screenshots
AuxBOS captures periodic screenshots of an employee's screen while a work session timer is running. This is the most sensitive data the platform handles, so we want to be explicit about it.
- Screenshots are captured only while a session timer is running. They stop when the timer stops.
- They are visible to administrators of that company only, and are isolated to that company like every other record.
- The employing business, not AuxWork, decides to switch this on and is responsible for it. That includes telling its employees that monitoring is in place and obtaining any notice or consent its local law requires. Employee monitoring is regulated very differently from country to country, and in some places it is unlawful without specific steps.
If you are an employee and you have questions about screenshots taken of your work, your employer is the right party to ask.
How we use data
| Purpose | What that means in practice |
|---|---|
| Providing the software | Delivering the license, installer and updates you purchased, and helping you deploy them. |
| Billing | Processing your one-time license fee and any add-on purchases or renewals. |
| Support | Answering your questions and investigating faults you report. |
| Security and reliability | Investigating security reports and improving the software for future releases. |
| Managed hosting (optional add-on) | Running your AuxBOS instance in an isolated environment, on your instructions. |
We do not sell personal data. Because AuxBOS is self-hosted, we do not have visibility into the content inside your instance in the first place.
Legal basis
Where data protection law requires a legal basis, we rely on:
- Performance of a contract — to deliver the service you subscribed to.
- Legitimate interests — to secure the platform, prevent abuse and improve reliability, balanced against your rights.
- Legal obligation — where we must retain records to comply with the law.
- Consent — where we ask for it specifically, which you can withdraw at any time.
Who we share it with
We share personal data only where it is needed to run our business with you:
- Our payment processor, to charge your license and any add-on purchases.
- Support tools we use to answer your questions, under contract and only for that purpose.
- Managed-hosting infrastructure providers (only if you have bought that add-on), to run your isolated instance.
- Authorities, where we are legally compelled to disclose.
We never receive the data inside your self-hosted AuxBOS instance and therefore never share it with anyone.
How long we keep it
Because AuxBOS is self-hosted, retention of the data inside your instance is set by you as the licensee, not by us.
For the data AuxWork holds directly (license, billing and support records), we keep it while you hold an active license and for a reasonable wind-down window afterwards. Some records — invoices and similar — are kept longer where law requires.
How we protect it
- Self-hosted deployment. AuxBOS is installed on servers you control, so all employee, client and financial data stays on your infrastructure. If you run several sub-organisations under one install, the multi-tenant architecture scopes every request to the signed-in user's company, so one company cannot read or list another's data.
- Authentication. Access is controlled with signed tokens and server-side sessions.
- Password storage. Passwords are stored as one-way hashes, never in plain text.
- Roles and permissions. Admins control exactly which modules each employee can reach.
- Controlled file access. Uploaded documents are served through permission-checked endpoints rather than public links.
No system is perfectly secure, and we do not claim otherwise. If you believe you have found a vulnerability, please report it to support@auxbos.com.
Your rights
Depending on where you live, you may have the right to access, correct, delete, export, or restrict the processing of your personal data, and to object to it.
As explained above, if your data sits inside a company's self-hosted AuxBOS instance, that company controls it — please contact them. AuxWork has no access to that instance. For data where AuxWork is the controller, write to support@auxbos.com.
Cookies & local storage
We keep this deliberately minimal:
- Authentication cookie. A strictly necessary cookie that keeps you signed in to the platform. Without it, you cannot use AuxBOS.
- Language preference. This website stores your chosen language in your browser's local storage so the choice survives page changes. It never leaves your browser.
Fonts and icons on this website are loaded from third-party content delivery networks, which necessarily receive your IP address in order to serve the file.
International transfers
We operate from Pakistan and may process data in other countries through our infrastructure providers. Where data moves across borders, we take steps to ensure it stays protected to the standard described in this policy.
Children's data
AuxBOS is a workplace tool intended for business use. It is not directed at children, and we do not knowingly collect data from anyone under 16. If you believe a child's data has reached us, contact us and we will remove it.
Changes to this policy
We may update this policy as the platform evolves. The date at the top always reflects the current version, and we will tell you about material changes rather than quietly editing the page.
Contact us
Questions about this policy or about your data:
- Email: support@auxbos.com
- Post: AuxWork Private Limited, Abbottabad, Pakistan
See also our Terms of Service, the pricing page, or contact our team.