Privacy Policy

Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide when using our services:

• Account Information: Name, email address, phone number, job title, company name, billing address
• HRMS Data: Employee records, payroll information, attendance data, performance reviews, organizational structure
• Industrial Operations Data: Vehicle information, dispatch records, weighbridge data, RFID tags, GPS coordinates, material tracking
• Communication Data: Support tickets, feedback, survey responses, email correspondence
• Payment Information: Billing details (processed securely through third-party payment processors)

1.2 Automatically Collected Information

• Usage Data: IP address, browser type, device information, operating system, pages visited, time spent
• Cookies & Tracking: Session cookies, preference cookies, analytics cookies (see Cookie Policy)
• Log Data: System logs, error reports, API usage, authentication events
• IoT & Sensor Data: RFID reads, GPS locations, weighbridge measurements, gate automation events

1.3 Third-Party Sources

• Government APIs: Vahan/Sarathi data, e-Way Bill information, e-Invoice data, GST records
• Integration Partners: Data from ERP systems, accounting software, biometric devices
• Public Sources: Publicly available business information for compliance verification

How We Use Your Information

We use collected information for the following purposes:

2.1 Service Provision

• Provide, operate, and maintain our HRMS and industrial automation platform
• Process payroll, attendance, performance management, and HR workflows
• Manage dispatch operations, fleet tracking, material movement, and gate automation
• Generate compliance reports, e-Way Bills, e-Invoices, and government filings
• Facilitate real-time IoT integration, RFID tracking, and GPS monitoring

2.2 Platform Improvement

• Analyze usage patterns to improve features and user experience
• Develop AI-powered insights, predictive analytics, and automation
• Conduct research and development for new capabilities
• Test, troubleshoot, and optimize platform performance

2.3 Communication

• Send service updates, security alerts, and system notifications
• Provide customer support and respond to inquiries
• Send marketing communications (with your consent, opt-out anytime)
• Conduct surveys and gather feedback

2.4 Legal & Compliance

• Comply with applicable laws, regulations, and government requests
• Enforce our Terms of Service and other agreements
• Protect against fraud, security threats, and illegal activities
• Maintain audit trails and regulatory compliance records

Data Protection & Security

We implement industry-leading security measures to protect your data:

3.1 Technical Safeguards

• Encryption: End-to-end encryption for data in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Role-based access control (RBAC), multi-factor authentication (MFA)
• Infrastructure Security: Cloud-native architecture with auto-scaling, DDoS protection
• Network Security: Firewalls, intrusion detection/prevention systems (IDS/IPS)
• Data Isolation: Tenant isolation, separate database instances for enterprise clients

3.2 Organizational Safeguards

• Security Audits: Regular penetration testing, vulnerability assessments, third-party audits
• Employee Training: Mandatory security awareness training, background checks
• Incident Response: 24/7 security monitoring, incident response team, breach notification procedures
• Data Minimization: Collect only necessary data, automated data retention policies

3.3 Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy:

• Active Accounts: Data retained while account is active and for business purposes
• HRMS Data: 7 years post-employment (as per Indian labor laws)
• Financial Records: 7 years (as per Indian accounting regulations)
• Compliance Data: Retained per regulatory requirements (e.g., GST, e-Way Bill records)
• Backup Data: Automated deletion after 90 days unless required for legal purposes

Your Privacy Rights

Under GDPR and Indian data protection laws, you have the following rights:

To exercise your rights, contact us at:

International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including:

• India: Primary data processing and storage (Pune, Bhubaneswar)
• UAE: Regional operations and support (Abu Dhabi office)
• Cloud Providers: AWS/Azure data centers (India region with geo-restriction)

We ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by EU Commission
• Data Processing Agreements (DPAs) with all third-party processors
• Regular compliance audits and certifications
• Encryption of all data in transit and at rest

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices: