# Emplyr Privacy Policy

**Effective Date:** 2026-04-29
**Last Updated:** 2026-04-29
**Version:** 1.0

This Privacy Policy explains how Emplyr collects, uses, stores, and protects personal data of employees, candidates, contractors, and authorized users. We process data with transparency, purpose limitation, and security controls aligned with HR and payroll compliance expectations.

## Scope
- This policy applies to all personal data processed through Emplyr web, mobile, integrations, and related support channels.
- The policy covers employee lifecycle operations including recruitment, onboarding, attendance, payroll, leave, performance, helpdesk, and offboarding.

## Data We Collect
- Identity and profile data (name, employee ID, designation, department, contact details).
- Employment and payroll data (joining details, compensation, bank details, tax identifiers, statutory numbers).
- Attendance and work data (check-in/check-out, geolocation for approved attendance use-cases, leave records, shift data).
- Performance and HR records (goals, appraisals, feedback, policy acknowledgements, training records).
- Device and technical data (IP address, browser/device metadata, app diagnostics, security logs).

## How We Use Data
- To administer HR operations such as payroll, attendance, leave, and workforce management.
- To meet legal and statutory obligations related to labor, tax, social security, and compliance.
- To secure systems, prevent fraud, investigate incidents, and maintain audit trails.
- To communicate HR updates, policy changes, and essential service notifications.
- To improve system reliability, analytics, and user experience using controlled access and safeguards.

## Lawful Basis and Consent
- We process data for employment-related and legal compliance purposes where permitted under applicable law.
- Where required, we collect specific consent for optional or non-essential processing.
- If consent is used as the legal basis, users may withdraw consent as permitted by law, subject to operational and legal limits.

## Data Sharing and Third Parties
- Data may be shared with authorized service providers (for example payroll processors, infrastructure providers, or statutory partners) under contractual confidentiality and security obligations.
- Data is shared internally only on a need-to-know basis using role-based access controls.
- We do not sell personal data.

## Retention and Deletion
- Personal data is retained only as long as needed for employment administration, legal requirements, or legitimate business records.
- Retention periods vary by data category and applicable law.
- When retention is no longer required, data is deleted or anonymized using controlled processes.

## Security Safeguards
- We implement administrative, technical, and physical safeguards including encryption, access controls, monitoring, and backups.
- Sensitive HR data access is restricted and logged.
- Security incidents are handled through internal response procedures and notifications where required.

## Your Privacy Rights
- Subject to applicable law, users may request access, correction, update, deletion, restriction, or portability of personal data.
- Users may raise concerns regarding data processing and seek grievance redressal through official channels.
- We may need to verify identity before processing rights requests.

## Cross-Border Processing
- If data is processed across regions, appropriate contractual and security controls are applied in line with applicable legal requirements.

## Policy Updates
- We may update this policy periodically to reflect legal, operational, or product changes.
- The latest version date is always published on this page.

## Contact
- **Grievance Officer:** Data Protection & Grievance Officer
- **Email:** privacy@emplyr.in
- **Address:** Emplyr Technologies Pvt. Ltd., India