Privacy and employee records

HRMS Management is supplied by Yolleg Ltd. Contact [email protected].

What this service stores

Verified sign-in email and account identity, employer-entered employee names and ordinary work contact details, department/job/location, employment dates and state, onboarding tasks, employer PTO allowances/excluded dates, requests and responses, retained file versions, actor/time history and subscription references. No automatic data imports from other products or account linking by matching email.

Who can see a record

The owner and named HR administrators read their organization. Assigned staff read only their explicitly bound employee record, requests, files and history. Owners invite accounts and assign the employee binding; accepting an invitation is required. Revocation and employment end stop future server access. Previously downloaded copies cannot be recalled.

Manager and document access

An accepted employee-bound manager account sees its own record, minimal current-report labels, assigned manager tasks and permitted team leave requests/calendar. HR can create time-limited manager delegations; self-approval is forbidden. Managers do not receive reports’ full records, private notes or documents. HR-only notes and HR-only documents remain restricted in reads, retained versions and exports.

Storage and providers

Workspace payloads and retained file bytes are encrypted at the application layer on the configured private server. Account/session/billing metadata is retained separately; this is not a claim of whole-disk encryption. Transactional sign-in and purchase email uses the configured mail provider. Hosted subscription payment uses Stripe; this service does not store card numbers. No advertising analytics or public record-sharing links are included.

The operator must publish and verify the actual host/processing location, access controls, encrypted backup destination and retention before accepting real employee information. The local release candidate uses synthetic records only.

Retention and recovery

Employee changes, request dispositions and stored file versions remain in the workspace until the owner erases organization records. Ended employees are retained. The owner must revoke members before erasure. Subscription/account records and configured backup copies have separate retention. Backup snapshots use a separate encryption key and operator-configured retention; an operator must verify the job and restoration. Do not treat a local test as an active managed off-host backup service.

Your choices

Sign out all devices, ask HR to correct your profile and download your own record. HR can export organization records and append reasoned changes. Contact the employer for employee-record requests and Yolleg for account/support questions. Do not upload identity,medical,bank or protected-case documents in this edition.