Privacy Policy

1. Introduction

StaffSynchr ("we", "us", "our") provides a cloud-based Human Resources Management System (HRMS) and Payroll platform. We are committed to protecting your privacy and ensuring the security of your personal data.

This Privacy Policy explains how we collect, process, and safeguard your data when you visit our website, use our platform, or interact with our services, in accordance with applicable Indian data protection laws, including the Digital Personal Data Protection Act, 2023 (DPDP Act).

2. Information We Collect

We collect information to provide and improve our services. The types of data we collect include:

• Website Visitors & Leads: When you request a demo or contact us, we collect your name, work email, phone number, company name, and technical data (IP address, browser type).
• Customer Data (Employers): Billing details, legal entity information, and administrative contact details.
• Employee Data (Data Principals): For employee information processed on behalf of our business customers, StaffSynchr processes personal data only under the instructions of the customer, who is responsible for determining the purposes of such processing. This includes identity details, contact information, attendance records, biometric logs (if synced from compatible devices), compensation structures, statutory compliance data (PF, PT, LWF, TDS), and performance evaluations.

3. How We Use Your Data

We process your personal data only for lawful purposes, including:

• Delivering our HR, attendance, and payroll services efficiently.
• Processing payroll calculations, tax deductions, and statutory compliance reporting.
• Authenticating users and ensuring platform security.
• Communicating important service updates, technical notices, and security alerts.
• Responding to your inquiries and providing customer support.

We never sell, rent, or trade your personal data to advertisers or data brokers.

4. Data Sharing and Sub-processors

We may engage trusted third-party service providers to support cloud infrastructure, email delivery, security, payment processing, and other operational services. These providers process personal data only as necessary to deliver our services or comply with applicable law.

5. Data Retention & Erasure

We retain personal data only for as long as necessary to provide our services, comply with applicable legal obligations, resolve disputes, and enforce our agreements. Upon termination of services, customer data is handled in accordance with our contractual commitments and applicable law.

6. Your Rights Under the DPDP Act 2023

As a Data Principal in India, you are guaranteed specific rights regarding your personal data:

• Right to Information: You can request a summary of the personal data being processed and the identities of all Data Fiduciaries with whom the data has been shared.
• Right to Correction & Erasure: You can request the correction of inaccurate data or the erasure of data that is no longer necessary for its original purpose. (Note: Employees must typically route erasure requests through their Employer).
• Right to Grievance Redressal: You have the right to register a grievance with us or the Data Protection Board of India.
• Right to Nominate: You may nominate another individual to exercise your rights in the event of death or incapacity.

7. Security Safeguards

We implement robust, documented security measures to protect your data. This includes strict tenant isolation, Role-Based Access Control (RBAC) across all multi-entity hierarchies, and immutable append-only audit logs to track any modifications to security privileges or sensitive records.

8. Cookies

We use cookies and similar technologies necessary for the operation, security, and performance of our website and platform. Where optional cookies are introduced in the future, we will provide appropriate notice and choices where required by applicable law.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or business practices. The updated version will be published on our website and within the StaffSynchr platform with the revised "Last updated" date.

10. Contact

If you have questions regarding this Privacy Policy or wish to exercise your rights under the DPDP Act, you may contact our Data Protection Officer at: