Product Privacy Notice — Workforce Data

[01]

Who controls workforce data

The Delivery Service Partner or other business using Alakili decides what workforce information is collected, why it is used, and how long it is retained. Alakili provides software and processes this information for the customer under its agreement and instructions.

Drivers and workers should contact their employer to access, correct, or delete their records. If a worker contacts us directly, we will refer the request to the relevant customer unless law requires otherwise.

[02]

Information customers may place in Alakili

Depending on the features used, this may include:

• name, work contact details, and employer-assigned identifier;
• role, station or site, status, and employment dates;
• schedules, shifts, attendance, absences, and non-medical absence categories;
• delivery, operational, performance, and safety metrics;
• operational SMS content, consent status, opt-out status, and delivery status; and
• account activity, audit logs, and support information.

Alakili is not designed to store Social Security numbers, government IDs, bank or card details, biometric information, medical records or diagnoses, background-check reports, precise live location, camera footage, or information about children. Customers must not upload those categories.

[03]

Sources

Information may come from the customer, its authorized users, workers responding through enabled functions, and supported customer-controlled systems. Where the browser extension is used, it transfers the fields described in the Extension Privacy Disclosure from the authorized user's browser to the customer's Alakili account.

[04]

How we use workforce data

We process workforce data to:

• provide scheduling, attendance, reporting, communications, and other contracted features;
• authenticate users and administer customer accounts;
• maintain, secure, troubleshoot, and support the service;
• prevent fraud and abuse; and
• comply with law and the customer agreement.

If an authorized application user consents to Statistics cookies, we use PostHog to understand feature usage and diagnose user-interface problems. Session Replay is configured to mask all displayed text and inputs in the authenticated application. We use opaque internal user and customer identifiers rather than names, email addresses, phone numbers, or driver identifiers in PostHog. Network contents and console logs are not captured.

We do not sell workforce data, use it for targeted advertising, or disclose one customer's workforce data to another customer.

[05]

Planning and analytics

Alakili may provide operational forecasts, summaries, or scheduling assistance. These are planning aids for managers. Customers remain responsible for reviewing outputs and making decisions about individual workers.

Alakili is not intended to make final employment decisions or to serve as the sole basis for discipline, termination, compensation, or another adverse action. Customers are responsible for notices, assessments, human review, and other obligations applicable to their use.

[06]

SMS

When a customer enables SMS, the customer determines the recipients and message content and is responsible for required consent. Alakili provides sending, delivery reporting, and opt-out handling as described in the SMS Terms.

[07]

Vendors and access

We use vendors listed on our Subprocessors page, including PostHog for consented application analytics and privacy-masked Session Replay. Authorized personnel and contractors may access workforce data when reasonably necessary to operate, secure, troubleshoot, and support Alakili. Access is restricted by role and subject to confidentiality and security controls.

The service is hosted in the United States. Authorized personnel in the United States and Kenya may access it for the purposes above.

[08]

Retention and deletion

Workforce data is retained during the customer's subscription subject to the customer agreement and available configuration. After termination, we provide the customer a reasonable opportunity to export its data and then delete it from active systems. Residual copies are removed through the normal encrypted-backup rotation, unless retention is legally required.

SMS consent and opt-out evidence may be retained longer where reasonably necessary to demonstrate compliance. The customer remains responsible for its own employment and business record-retention obligations.

[09]

Security and incidents

We use administrative, technical, and organizational safeguards designed to protect workforce data, including encryption in transit and at rest and access restrictions. We notify the affected customer of a confirmed security incident as required by the customer agreement and applicable law and reasonably assist its response.

Report suspected security issues to security@alakili.com.

[10]

Contact

Workers: contact your employer.

Customers and other enquiries: privacy@alakili.com, Team HQ LLC, 418 Broadway, Suite R, Albany, NY 12207.