This agreement is part of our terms of service. It covers the personal information a customer keeps in BeeHR, mostly about its employees, and how BeeHR handles it on the customer’s behalf. It follows Egypt’s Personal Data Protection Law, Law No. 151 of 2020.

In it, “you” is the customer, and “we” or “BeeHR” is BeeHR, the company that runs beehr.app.

Who decides

  • You are the controller. You decide what personal information goes into BeeHR, about whom, why, and for how long.
  • We are the processor. We handle it only to provide BeeHR to you, on your instructions. Your instructions are these terms, the way you set up BeeHR, and what you ask us in writing.
  • If we think an instruction breaks the law, we’ll tell you, and we may hold it until we agree.

What we process

  • Whose information: your employees, former employees and job applicants you add, their family members and emergency contacts, and the people you invite to BeeHR.
  • What information: what the BeeHR modules you use hold: identity and contact details, job records, pay and bank details, attendance (including the check-in location, if you turn that on), leave, requests and claims, documents, equipment, training, announcements and reports raised through SpeakUp. Our privacy policy lists it in more detail.
  • Sensitive data: some of it is sensitive under Egyptian law, such as financial information (salaries, bank accounts) and health information (blood type, sick-leave notes). You’re responsible for having the legal grounds, consents or permits the law requires for it.
  • What we do with it: store it, show it to the right people, calculate with it (payroll, leave balances, attendance), send the notifications you set up, back it up, keep it secure, and, if you use Bee AI, send what a question needs to the AI service that answers it.
  • For how long: while your subscription runs, and until it’s deleted after the end (see When the subscription ends).

Our people

Only BeeHR staff who need it for their work can reach your information, and each is bound to keep it confidential. When you ask our support for help, they open your BeeHR in a read-only session that ends on its own; each session is recorded, and you can ask us for that record.

Security

We protect your information with the measures on Security at BeeHR, and we keep them up to date. We may change a measure, but not in a way that lowers the protection of your information.

Sub-processors

  • You agree that we use the companies on our sub-processors page to provide BeeHR.
  • Each one is bound by a written contract to protect your information at least as well as this agreement does. We remain responsible to you for them.
  • We tell you by email at least 30 days before we add or replace a sub-processor. If you object for a good reason about data protection, we’ll try to find a solution with you. If we can’t, you can end the affected part of your subscription and get back the fees paid for the time left.

Where it’s kept

In Frankfurt, Germany (Amazon Web Services and Neon). Your information therefore leaves Egypt, and we transfer it under the conditions Egyptian law sets for transfers abroad. We won’t move where it’s kept to another country without telling you at least 30 days before.

Requests from your employees

When an employee asks to see, correct or delete their information, you answer them. Most changes can be made directly in BeeHR. If a request reaches us, we pass it on to you without delay and don’t answer it ourselves, unless you ask us to. We help you with what BeeHR can do and what you can’t do yourself.

Breaches

If we learn of a breach of security that affects your personal information, we tell you without undue delay, and within 72 hours. We tell you what happened, what information and people it affects, what we’ve done about it, and who to contact. We help you with the notices you must give the authorities and the people affected.

Help with your obligations

We give you the information you reasonably need to show that you meet the law’s requirements for the processing we do, and we help with assessments of how BeeHR affects your employees’ privacy. Once a year, or after a breach, you may ask to audit our compliance with this agreement: we first answer your written questions; if that isn’t enough, we agree the time and scope of an audit, which mustn’t expose other customers’ information. Each side bears its own costs.

When the subscription ends

You have 30 days after your subscription ends to export your records. After that we delete your personal information within 90 days, including from our systems’ backups within a further 35 days, except what the law requires us to keep. When you ask, we confirm the deletion in writing.

What we use for ourselves

To run BeeHR, we also keep some information for our own purposes, as its controller: the details of the people who manage your account and your billing, sign-in and security records, and measures of how BeeHR is used and performs, which we use in a form that doesn’t identify anyone. The privacy policy covers these.

Liability and order

Each side’s liability under this agreement follows the limits in the terms of service. If this agreement and the terms disagree about personal information, this agreement wins.

Contact

BeeHR · beehr.app

Our contact form, topic “Privacy and my data”.