Brytix

Privacy Policy

Effective 9 September 2026 · Operated by Citizen Global Transport ("we", "us") · www.brytix.com

Template notice: this policy is a starting point written for the Brytix product. Have it reviewed by a lawyer for UAE PDPL and the app-store requirements before publishing.

1. Who we are

Brytix is a multi-tenant business platform (ERP) used by companies in manpower supply, contracting, technical and oilfield supply, transport and trading. Each company ("tenant") that uses Brytix is the data controller for the personal data of its own staff and clients. Citizen Global Transport operates the platform and acts as data processor on the tenant's behalf.

2. Data we process

Account data: name, email, phone, role, hashed password, login times and IP addresses.
Workforce data entered by your employer: employee number, trade, nationality, ID/passport numbers, visa expiry, pay rates.
Timesheet data from the Staff app: punch-in / punch-out times, the site you are assigned to, and — only if you allow location access — GPS coordinates at the moment you punch in or out. Location is never tracked in the background.
Photos you choose to attach to a punch-in.
Payroll data: hours, overtime, allowances, deductions and payslips.
Messages exchanged between you and your company's administrators inside the app.
Security logs: IP address, device/browser type, event type and outcome, kept to detect abuse.

3. Why we process it

To provide the service your employer subscribed to (deployment, attendance, payroll, invoicing, communication), to secure the platform against unauthorised access, and to meet legal bookkeeping obligations.

4. Tenant isolation

Every record is tagged with the company it belongs to and every query is restricted to that company. Company administrators can only see their own company's data. Platform super-administrators may access a tenant's workspace for support; every such access is recorded in an audit trail visible to the tenant.

5. Sharing

We do not sell personal data. Data is shared only with: your employer (the tenant), our hosting provider, and email delivery services used to send notifications. We disclose data to authorities only when legally required.

6. Retention

Data is kept while the tenant's subscription is active. When a tenant is deleted, all of its data and uploaded files are permanently removed. Payroll and invoice amounts may be kept in anonymised form for the statutory retention period. When an individual account is deleted, security log entries referencing that former user id are kept for up to 90 days; see the account deletion page for the full list of what is removed and what is kept.

7. Your rights & account deletion

You can request access, correction or deletion of your data from your employer. Staff and supervisor accounts can be deleted at any time from Account → Delete my account in the app or on the web, which erases your login, personal identifiers, photos and messages. Company administrator accounts are removed by another administrator of the same company, or by contacting support — this is to stop a company locking itself out of its own records. See how to delete your account.

8. Security

TLS encryption in transit, hashed passwords, rate limiting with exponential backoff on sign-in, strict input validation, uploads stored outside the web root and content-verified, and a security activity dashboard reviewed by administrators.

9. Children

Brytix is a workplace tool and is not directed at anyone under 18.

10. Contact

Privacy & data requests: privacy@brytix.com
Support: support@brytix.com