Privacy Policy - Leave Management System

1. Data Collected

We collect various types of information including account details, payroll and HR data, usage patterns, and cookies. Specifically, this includes names, email addresses, employee IDs, department, leave records, and login activity. This information is gathered directly from users during account registration or through system usage. No biometric or sensitive financial data is collected.

2. Purpose of Data Use

The data is used to manage leave requests, track attendance, generate reports, and support internal HR processes. We may also use the data to improve our platform, provide user support, and send service-related notifications.

3. Lawful Basis

We process personal data under lawful bases such as user consent, performance of a contract (employment), and legitimate interest in managing workforce operations. You have the right to withdraw consent at any time without affecting prior processing.

4. Data Sharing

We do not sell or rent personal information. Data may be shared with authorized company administrators or service providers strictly for operational purposes. All third-party partners are under strict data protection agreements.

5. International Transfers

In rare cases, data may be processed in countries outside your jurisdiction. When such transfers occur, we ensure appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent measures are in place to maintain data security and compliance with applicable laws.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined above or as required by law. Data is retained until the customer deletes their account. Backups of data are maintained for up to 30 days for recovery purposes. Once data is no longer needed, it is securely deleted or anonymized in accordance with our data retention policy.

7. Data Security

We implement industry-standard security measures including encryption, access control, and regular system audits. Specifically, we use TLS 1.2+ for secure data transmission, Role-Based Access Control (RBAC), and Two-Factor Authentication (2FA) for administrators. Regular security scans are performed to identify and mitigate vulnerabilities. While no system is fully immune to breaches, we take all reasonable precautions to safeguard personal data against unauthorized access.

8. User Rights

Users have the right to access, update, correct, or delete their personal information. You may also request data portability or object to certain processing activities. Requests can be submitted via our support contact details. We are committed to respecting your privacy and will respond promptly to all requests related to your personal data. Users can contact support to exercise these rights or to ask any questions about data handling practices.Email [email protected] to exercise these rights.

9. Children’s Privacy

Our system is intended for use by adults within organizational settings and is not directed at children under the age of 16. We do not knowingly collect or process data from children. If discovered, such data will be deleted immediately.

10. Policy Changes

We may update this Privacy Policy to reflect changes in law, technology, or our services. Users will be notified of significant updates via email or system alerts. Continued use after changes means you accept the revised policy.

11. Governing Law

This Privacy Policy is governed by the laws of India. All disputes arising in connection with this policy shall fall under the exclusive jurisdiction of the courts in Delhi. Users agree to resolve disputes in accordance with Indian law.

12. Contact Information

If you have questions or requests regarding your personal data or this Privacy Policy, please contact our support team. We are committed to resolving all privacy concerns responsibly and promptly.
Sales & General: [email protected]
Product Support: [email protected]