Effective Date: June 30, 2026

EfroTech is committed to protecting the privacy of our customers, users, and website visitors. This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you use our website, mobile applications (including TimeTrax), desktop software, cloud services, and other products or services (collectively referred to as the “Services”).

By using our Services, you agree to the practices described in this Privacy Policy.

Contact Information

EfroTech

12-C, Block 6, P.E.C.H.S.,

Off. Shahrah-e-Faisal,

Karachi, Sindh 75400, Pakistan

Email: info@efrotech.com

Phone: +92 21 111-123-377

Information We Collect

Depending on the Services you use, we may collect the following types of information.

Information You Provide

You may voluntarily provide information including:

• Name
• Company name
• Email address
• Phone number
• Postal address
• Login credentials
• Customer support requests
• Survey responses
• Registration information
• Any other information you choose to submit

Information Collected Automatically

When you access our website or mobile applications, we may automatically collect certain technical information, including:

• IP address
• Browser type
• Operating system
• Device model
• Device operating system version
• Application version
• Language and region settings
• Date and time of access
• Crash reports and diagnostic information
• Log information necessary for security and troubleshooting

This information helps us maintain, improve, and secure our Services.

Permissions Used by Our Mobile Applications

Depending on the features available within our mobile applications, we may request access to certain device permissions, including:

Camera

Used only when required to capture photos or documents as part of the application’s functionality.

Storage or Photos

Used to allow users to upload or download files, documents, reports, or images.

Notifications

Used to deliver important service-related notifications, reminders, and application updates.

Location (if applicable)

Location access is requested only where required for features such as attendance tracking, field operations, or location-based services. Location information is collected only when authorized by the user.

We request only the permissions necessary for the intended functionality of our applications.

How We Use Your Information

We use the information we collect to:

• Provide and maintain our Services
• Authenticate users
• Process customer requests
• Deliver customer support
• Improve application performance and user experience
• Respond to technical issues
• Protect against unauthorized access and fraud
• Send service-related notifications
• Comply with applicable legal obligations
• Send marketing communications where permitted by applicable law

Information Sharing

EfroTech does not sell your personal information.

We may share information only when necessary with:

• Cloud hosting providers
• Technology service providers supporting our Services
• Payment processors (where applicable)
• Professional advisers
• Government or regulatory authorities when required by law
• Business partners involved in providing contracted services

All third-party service providers are expected to protect personal information in accordance with applicable privacy laws.

Third-Party Services

Our Services may integrate with trusted third-party platforms or service providers to improve functionality, security, communication, analytics, cloud hosting, or technical support.

These third parties process information only as necessary to provide their services and according to their own privacy policies.

Cookies and Similar Technologies

Our website may use cookies and similar technologies necessary for website functionality, security, user preferences, and performance improvements.

Where applicable, cookies may also be used for analytics or improving user experience.

Users may control cookie preferences through their browser settings.

Data Security

EfroTech implements reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, alteration, disclosure, misuse, or destruction.

These measures include, where appropriate:

• Secure servers
• Access controls
• Password protection
• Encrypted communications
• Regular security monitoring
• Restricted employee access to personal information

While we strive to protect your information, no method of electronic transmission or storage can be guaranteed to be completely secure.

Data Retention

We retain personal information only for as long as necessary to:

• Provide our Services
• Maintain active customer accounts
• Fulfill contractual obligations
• Resolve disputes
• Enforce agreements
• Comply with applicable legal, regulatory, or accounting requirements

For licensed software customers, information is generally retained while an active subscription, maintenance agreement, or software license remains in effect.

Data Deletion

When a customer permanently discontinues the use of our Services by cancelling the applicable agreement or allowing the software license to expire without renewal, associated customer data will generally be removed from our active systems within 30 days, unless a longer retention period is required by law or necessary for legitimate business purposes.

Customers may also request deletion of their personal information at any time by contacting us using the information provided in the Contact Information section.

We will verify the request before processing it.

Access, Correction and Your Rights

Depending on applicable laws, you may have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your personal information
• Restrict or object to certain processing activities
• Withdraw consent where processing is based on consent
• Request information regarding how your data is processed

We will respond to legitimate requests within a reasonable timeframe and in accordance with applicable laws.

International Data Transfers

Depending on the Services you use, your information may be processed or stored in countries other than your own.

Where international transfers occur, EfroTech takes reasonable steps to ensure appropriate safeguards are in place to protect personal information.

Children’s Privacy

Our Services are not intended for children under the age of 13, and we do not knowingly collect personal information from children.

If we become aware that personal information has been collected from a child without appropriate consent, we will take reasonable steps to delete such information.

Marketing Communications

Where permitted by law, we may send newsletters, product announcements, or promotional communications.

You may opt out of marketing communications at any time by following the unsubscribe instructions provided in the communication or by contacting us directly.

Service-related communications necessary for providing our Services may still be sent.

Legal Basis for Processing (Where Applicable)

Where required by applicable privacy laws, EfroTech processes personal information based on one or more of the following legal grounds:

• Performance of a contract
• Compliance with legal obligations
• Legitimate business interests
• User consent

Changes to this Privacy Policy

EfroTech may update this Privacy Policy from time to time to reflect changes in our Services, technology, legal requirements, or business practices.

The updated version will be published on this page together with the revised Effective Date.

Continued use of our Services after any changes become effective constitutes acceptance of the updated Privacy Policy.

Contact Us

If you have any questions regarding this Privacy Policy, your personal information, or would like to submit a data access or deletion request, please contact:

EfroTech

12-C, Block 6, P.E.C.H.S.,

Off. Shahrah-e-Faisal,

Karachi, Sindh 75400, Pakistan

Email: info@efrotech.com

Phone: +92 21 111-123-377