Privacy

What the service holds about you

• Your account: name, work email, the company you belong to, your role. If you turn on two-step sign-in, the secret behind it, stored encrypted.
• Your employment record, as entered by your employer: job, department, leave balances and requests, schedules and timesheets.
• Your payslips and payroll figures, and documents your employer shares with you or you upload.
• Attendance: the times you clock in and out. If you allow it, the place you were when you did, and a photo if your employer asks for one.
• Expense claims you submit, including receipt photos.
• Notifications sent to you, and the push token of the phone that receives them.
• A record of actions taken in the service (who changed what, and when), which your employer's administrators and White Sun support can see.

If you are the person signing a company up (starting a trial), we also hold the company details and the contact details you give, and the payment receipts you send us.

Location, camera and photos (mobile app)

Location is requested only while the app is open, to note where a clock-in or clock-out happened. It is optional: if you decline, clocking in and out still works. The app does not track you in the background. The camera and photo library are used only when you choose to attach a document, receipt or clock-in photo.

Who can see it

Your data belongs to your employer's workspace and is visible only to people in that company whose role allows it (for example, HR sees employee records; a manager sees their team's requests; you see your own payslips). One company cannot see another's data. White Sun staff access a company's data only to run and support the service.

Where it is kept and who else handles it

• Data is stored with Amazon Web Services in India (Mumbai) and is encrypted in transit.
• Push notifications go through Expo's push service and Apple or Google to reach your phone; they carry the notification text and your device's token.
• Emails (invitations, password resets, payslip and billing notices) are sent through an email provider on our behalf.
• AI assistant. If your company has the AI assistant and you use it, your question and the information the assistant looks up to answer it (for example your leave balance, headcount, or a payroll summary you are allowed to see) are sent to Anthropic, which provides the AI model, to produce the answer. It is used only when you ask the assistant something.
• Connected services. If your employer turns on an integration (electronic signing with MV Sign, accounting with WS Ledger, or project costing with DPMi360), the relevant records are shared with that service for that purpose, and only for the companies that connect it.

There is no advertising, no tracking across other apps or sites, and no analytics in the website or the mobile app. Data is not sold.

On your device

The website keeps your sign-in, and a Light or Dark choice if you make one, in your browser's local storage; it does not use cookies (see Cookies & storage). The mobile app keeps your sign-in in the phone's secure storage and a local copy of recently viewed information so it works without a signal. Signing out clears your sign-in and that local copy, and stops notifications to that phone.

How long we keep it

We keep a company's information for as long as the company has a workspace with us. We do not delete it automatically when a plan ends; the company stays able to view and download its records. A company that has left, or an employee whose employer asks us to, can ask for deletion by writing toinfo@whitesun.mv.

Your choices

Your employer controls your account and employment records, so requests to see, correct or delete your information go to your company's HR or administrator first. You may also have rights under the law that applies to you to see, correct or delete information about you, or to object to how it is used. If you cannot resolve something with your employer, contact White Sun at whitesun.mv/contact. You can turn off location and notifications at any time in your phone's settings.

Contact

Questions about privacy, or a request to see, correct or delete information: write to info@whitesun.mv or use whitesun.mv/contact.

Changes

When this page changes, the date at the top changes with it.