Privacy Policy (Zero-Telemetry Architecture)

Effective Date: October 22, 2026 · Version 1.1 · Entity: ProximaLink (Karachi, Pakistan)

    Zero-Telemetry Guarantee: ProximaHub is designed on a strict local-first architecture. By default, your employee directory, attendance punches, timestamps, and biometric fingerprint templates remain on your local computer. ProximaLink has zero access to your workforce data.
  

1. 100% On-Premises Data Storage

ProximaHub installs on your computer or local virtual machine. All operations run locally:

Employee Records: Names, card numbers, user IDs, and biometric templates reside in a local SQLite database on your host file system.
Attendance Logs: Clock-in/out timestamps and punches fetched from biometric terminals stay in your local database.
No Cloud Replication: We do not operate remote databases storing your employee attendance or biometric templates. Daily attendance operations work 100% offline without internet connectivity.

2. Hub Communication with External Servers (Licensing Only)

By default, the only external network communication performed by ProximaHub is periodic license validation with our licensing authority (https://zkadmin.proximalink.pk). This occurs once every 24 hours when online (and once at startup).

What is transmitted:

Machine Identifier: A one-way cryptographic hash derived from your CPU and motherboard serial numbers, used strictly to lock your license to your hardware.
License Key: The key string entered by your administrator to verify expiration date and permitted user/device limits.

If an administrator configures the optional outbound sync, new attendance records are POSTed to the customer-owned endpoint they specify. This is disabled by default and is not a ProximaLink cloud service.

What is NEVER transmitted to ProximaLink or our licensing authority:

Employee names, PINs, card numbers, or contact details
Biometric fingerprint or facial templates
Attendance timestamps, punch logs, or salary figures
Internal LAN topology, IP ranges, or terminal credentials

3. Website Trial Form

If you request a trial through this website, the name, work email, company, optional phone number, and employee-count range you submit are sent to a Google Apps Script endpoint and stored in a Google Sheet controlled by ProximaLink. We use this information only to follow up on your trial request and to understand aggregate demand. It is not connected to your local workforce database. Do not submit employee personal data through this form.

The website is hosted by Vercel and loads fonts from Google Fonts; those providers may receive standard request metadata such as your IP address and browser information. ProximaLink does not sell this data.

4. Local Audit Trails & Diagnostics

ProximaHub records local system logs (operator login events, device connectivity transitions, sync execution) solely on your computer. These logs are never uploaded automatically. In technical support situations, you may choose to manually inspect and share logs at your discretion.

5. Data Subject Rights & Biometric Privacy

Under applicable privacy laws, your organization is the Data Controller. You maintain complete autonomy to export, modify, or permanently wipe employee attendance data at any time via the ProximaHub interface or SQLite backups.

6. Contact Information

If you have any questions or privacy concerns regarding ProximaHub, please contact:
ProximaLink Contact
ProximaLink, Karachi, Pakistan.