Privacy Policy

1. Introduction

This policy explains how Robert Louis Investment Ltd, trading under the seytech.ai brand, processes personal data in connection with PayrollSC, in accordance with the Seychelles Data Protection Act 2023. Contact for all data protection matters: info@seytech.ai.

Two roles apply. For account data (your login email, company details, subscription records) we act as data controller. For employee data that you enter (names, identity numbers, salaries, leave and disciplinary records), you are the data controller as employer and we process it on your behalf, solely to provide the service.

2. What we collect

• Account data: login email, password (stored only as a bcrypt hash), company name, address, TIN, contact details, logo.
• Employee data you enter: identification (name, NIN or passport, GOP details, date of birth, address), employment terms, salary and payroll history, leave, discipline and termination records, bank account details for salary payments.
• Usage data: an audit log of actions performed in your account (kept for your own compliance records), and standard technical logs (IP address, time) for security.

We do not use tracking or advertising cookies. The only cookie is the session cookie required to keep you signed in.

3. Why we process it

• To provide the service (performance of contract) — payroll computation, document generation, statutory export files.
• To manage subscriptions and payments (performance of contract, legal obligation).
• To secure the service and prevent abuse (legitimate interest).
• To communicate service and legal-change notices (legitimate interest).

We do not sell personal data, use it for marketing to your employees, or share it with third parties except as described below.

4. Where data lives and who can see it

Data is stored on our servers in an encrypted-in-transit environment (HTTPS). Each company’s data is logically isolated — one company can never see another’s records. Access on our side is limited to authorised personnel for support and maintenance. Statutory export files (SRC, SPF) are generated for you to download; you submit them to the authorities — we do not transmit data to SRC or SPF ourselves.

5. Retention

Your data is retained while your account is active, including in read-only status after a subscription lapses. If you request account deletion (info@seytech.ai), all company and employee data is permanently deleted within 30 days, except where a longer period is required by law. Backups are retained on a rolling schedule and are overwritten automatically.

6. Your rights and your employees’ rights

Under the Data Protection Act 2023, data subjects have rights of access, rectification, erasure, restriction and objection. Account holders can exercise these directly in the application (editing or exporting records) or by emailing us. Employee requests should be addressed to their employer as controller; we will assist the employer in fulfilling them. Complaints may be lodged with the Seychelles Information Commission.

7. Security

• HTTPS everywhere; session cookies are httpOnly and secure.
• Passwords hashed with bcrypt; sessions expire automatically.
• Per-company data isolation enforced at the query layer.
• Daily encrypted backups; audit trail of account actions.

If we become aware of a personal data breach likely to result in a risk to data subjects, we will notify affected customers and the Information Commission as required by the Act.

8. Changes

We may update this policy; material changes will be announced in the application or by email before they take effect. The current version is always available at this address.