Privacy Policy

In the course of providing workforce attendance and payroll services, we collect and process the following categories of personal data of employees and users:

• Identity & contact data — name and phone number (used as the primary login identifier).
• Attendance records — punch-in / punch-out timestamps, GPS location at the time of punching (for geo-fenced attendance), optional selfie captured at punch, and device information (platform, OS, model, app version).
• Payroll information — salary structure, bank / UPI details, statutory identifiers (such as PF account), earnings, deductions and payslips.
• Performance data — goals, review ratings, comments and acknowledgements.
• Leave & request data — leave balances, leave and advance requests and their approval status.

We collect only the data necessary to deliver the App's services to your employer (the organisation that onboarded you).

Personal data is used strictly for legitimate workforce-management purposes, including:

• Recording and verifying attendance (including geo-fence validation).
• Calculating and disbursing payroll, allowances, deductions and generating payslips.
• Managing leave balances, advances and approvals.
• Conducting and tracking performance reviews.
• Providing reports and analytics to your employer's authorised administrators.
• Securing accounts, preventing fraud, and complying with applicable laws.

We do not use your personal data for advertising, and we do not sell your personal data.

Data is stored securely using reasonable security practices and procedures as required under the IT Act, 2000 and the IT (Amendment) Act, 2008. We apply access controls, role-based permissions, encryption in transit, and tenant-level data isolation so that each organisation's data is kept separate and accessible only to its authorised administrators.

We retain personal data for as long as your account remains active or as needed to provide services and to comply with legal, accounting or statutory payroll obligations. When data is no longer required, it is securely deleted or anonymised.

We do not share, sell, rent or trade your personal data with any third parties for their own purposes. Data is accessible only to your employer's authorised personnel (such as HR and administrators) for the purposes described above.

We may disclose data only where strictly required by law, by a valid order of a court or government authority, or to the extent necessary to the secure cloud infrastructure that hosts the App on our behalf under appropriate confidentiality obligations.

In accordance with the DPDP Act, 2023, you (as a Data Principal) have the right to:

• Access and obtain a summary of the personal data we process about you.
• Request correction, completion or updating of inaccurate or incomplete data.
• Request deletion / erasure of your personal data, subject to legal retention requirements.
• Withdraw consent previously given for processing.
• Nominate another individual to exercise your rights in the event of death or incapacity.
• Grievance redressal (see the Grievance Officer section below).

To exercise any of these rights, including a request for data deletion, please contact us at hrbo.tech@gmail.com.

For any questions, concerns or requests regarding this Privacy Policy or your personal data, reach out to us:

In compliance with the Information Technology Act, 2000, the rules framed thereunder, and the DPDP Act, 2023, the contact details of the Grievance Officer are provided below. The Grievance Officer will acknowledge and redress grievances in accordance with applicable law.