Privacy Policy

Kompound is an internal workforce- and business-management platform that Protean Studios uses to run its day-to-day operations. Its main features are:

• Attendance & leave — employees submit attendance and leave requests in natural language; Kompound interprets the request, records it, and routes notifications to the right place.
• Employee records (HR) — personal profiles, employment details, onboarding, and document storage.
• Payroll & payslips — salary calculation and the secure generation and delivery of payslips.
• Finance — expenses, cost centers, cash flow, profit-and-loss, and recurring entries for internal accounting.
• Staffing & work — resource allocation, project and task management, an internal wiki, and workflows.
• CRM — managing the company's customers, contacts, and sales pipeline.
• Communications — internal announcements, an activity feed, and an employee helpdesk.
• Notifications — push, Slack, and email notifications that keep staff informed.

To provide these features, Kompound processes the following categories of information:

• Account & identity — username, securely hashed password, role, department, and profile photo.
• Personal & employment data — full name, date of birth, contact details, national ID number, address, bank account details, job title, and related HR documents.
• Payroll & financial data — salary, allowances, deductions, and payslips.
• Attendance & activity — leave and attendance requests, the messages you submit, and the results produced from them.
• Device & technical data — mobile push-notification tokens, app version, IP address, and request/audit logs used for security and troubleshooting.

Passwords are stored only as salted hashes, and sensitive integration credentials are encrypted at rest. Kompound does not collect your precise location, and it accesses your device's storage only when you actively choose to upload a file, and only for that purpose.

• To operate the HR, payroll, finance, and workforce features described above.
• To process attendance and leave requests and post the appropriate notifications.
• To authenticate users and enforce role-based access controls.
• To send operational notifications by push, Slack, and email.
• To maintain security, keep audit trails, and diagnose problems.
• To meet Protean Studios' legal, tax, accounting, and labor obligations.

We do not sell your personal data, and we do not use it for advertising or for any purpose unrelated to running Protean Studios' business.

Kompound relies on a small number of trusted service providers (sub-processors), used strictly to deliver the features above:

• OpenAI — interprets natural-language attendance and leave messages.
• Slack — posts attendance and operational notifications to internal channels.
• Google (Sheets and Workspace APIs) — records attendance data in company spreadsheets.
• Firebase Cloud Messaging (Google) — delivers push notifications to the mobile app.
• Amazon Web Services (S3) — stores files and documents you upload.
• Email delivery (SMTP) — sends transactional and notification email.

Each provider processes data only to the extent necessary to provide its service to Protean Studios.

• Within Protean Studios, access is limited to authorized personnel based on their role (for example, HR, finance, or management).
• With the sub-processors listed above, only as needed to operate Kompound.
• When required by law, regulation, or valid legal process, or to protect the rights, property, and safety of Protean Studios, its staff, or others.

We never sell or rent personal data.

• Data is held in access-controlled databases and object storage.
• Access is restricted by role; passwords are hashed; sensitive integration secrets are encrypted (AES-256-GCM).
• All traffic is served over encrypted connections (HTTPS).
• We retain personal and business records for as long as your employment or engagement with Protean Studios continues, and for any additional period required by applicable tax, accounting, and labor law, after which the data is deleted or anonymized.

Kompound primarily serves users in Vietnam. Some sub-processors listed above may store or process data on servers located outside Vietnam. Where that happens, we rely on those providers' contractual and technical safeguards to protect your information.

Subject to applicable law and to records we must retain for legal reasons, you may request to access, correct, or delete your personal data. Because Kompound is an internal tool provided by your employer, such requests are normally handled through Protean Studios' People/HR team or by contacting us at the address below.

Kompound is a workplace tool intended for Protean Studios' employees and authorized personnel. It is not directed to, or intended for use by, children, and we do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and communicate material changes to staff through internal channels.