Privacy Policy
Payroll software holds some of the most sensitive data a company has. This policy explains what we collect, why, and how it is protected.
01 Two kinds of data
We handle two kinds of personal data. Account data is about the people who sign up and manage an account, such as name, work email, designation and company details. Workforce data is what your company enters or collects about its employees: employee master records, salary structures, bank details, attendance punches, leave, tax declarations, hiring and performance records.
For workforce data, your company is the data owner and decides why and how it is processed. We process it only on your company’s instructions, to provide the service.
02 What we collect
- Sign-up and contact form details: name, work email, company, designation, headcount, states of operation and current payroll method.
- Employee records your company uploads: identity details, PAN, UAN, ESI number, bank account, salary and statutory data.
- Attendance data: punch time, punch source and, for mobile punch-in, the location at the moment of punch-in and punch-out.
- Usage data: log-in times, actions taken and device information, kept for security and audit.
03 How we use it
- To calculate attendance, leave, payroll and statutory deductions on the rules your company configures.
- To generate payslips, bank files, statutory files and reports.
- To let HR Copilot answer each employee from your policies and that employee’s own records.
- To send service emails such as login details, reminders and security notices.
We do not sell personal data, and we do not use workforce data to advertise to anyone.
04 HR Copilot and AI features
AI features work within your account. HR Copilot answers employees only from the policies your company provides and the asking employee’s own records. Pre-run checks and résumé ranking produce suggestions for people to review; they do not change salaries or reject candidates.
Résumé ranking does not use age, gender, religion, caste, marital status, photographs or similar personal details. Your workforce data is not used to train models shared with other customers.
05 Location data
Location is captured only when an employee punches in or out on the mobile app, and only if your company enables geo-fenced attendance. We do not track location continuously and do not read personal content on employees’ devices.
06 Security
Data is encrypted in transit and at rest. Access is role-based, salary and bank fields can be restricted further, and changes to salary or bank details are logged with the user and time. Staff access to customer data is limited to what is needed for support and is logged.
07 Sharing
We share data only with service providers needed to run the service, such as hosting, email delivery and messaging providers, under contracts that limit their use of it. We disclose data to authorities only where the law requires it.
08 Retention and return
Workforce data is kept while your subscription is active. Your company can export its data at any time. After the subscription ends, data is kept for a short period to allow export and is then deleted, except where the law requires us to keep records for longer.
09 Your choices
Employees should contact their employer’s HR team to access or correct their records, since the employer controls workforce data. Account users can ask us to access, correct or delete their account data through the contact page.