How We Handle Your Personal Data

This policy applies to employees, contractors, and other authorised personnel of a Client Organisation who use the App to access HR services provided by their employer. The App is not intended for use by the general public and is not directed at children.

• To authenticate you and provide secure access to the App.
• To record, verify, and report attendance (punch in/out location and photo capture) to your employer.
• To process leave applications, regularisation requests, and reflect approvals/rejections.
• To display your payslips, holiday calendar, and profile information.
• To support your offboarding process, where applicable.
• To maintain the security, integrity, and proper functioning of the App.
• To comply with applicable labour, tax, and statutory record-keeping laws.

We (and the Client Organisation, as your employer) process your personal data primarily on the basis of the employment relationship and applicable labour law obligations, and, where required for camera and location capture, on the basis of your consent given at the time these permissions are requested within the App.

You may withdraw consent for camera/location permissions through your device settings; doing so may prevent you from marking attendance through the App, and you should follow your organisation's alternate attendance process in that case.

• Camera and location are accessed only at the moment you tap punch in or punch out (and, where applicable, when submitting a regularisation request) " not continuously or in the background.
• The captured photo and location are transmitted securely and stored as part of your attendance record.
• Retention of attendance photos and location data: 7 years after separation.

We do not sell your personal data. We share your data only in the following circumstances:

• With your Client Organisation (your employer) and its authorised HR/reporting personnel, for legitimate HR and payroll purposes.
• With trusted service providers who host, store, or process data on our behalf (e.g., cloud hosting: Acintyo Tech Innovations Private Limited), under contractual confidentiality and data protection obligations.
• With government authorities, regulators, or courts where required by applicable law, statutory reporting, or a valid legal process.
• As part of a business transaction such as a merger, acquisition, or asset sale, subject to equivalent data protection commitments.

We retain personal data for as long as necessary to fulfil the purposes described in this policy, for the duration of your employment with the Client Organisation, and thereafter for 7 years to meet statutory, tax, and labour law record-keeping obligations, after which it is securely deleted or anonymised.

• Data in transit is encrypted (TLS/HTTPS).
• Passwords are stored in hashed/encrypted form and are never visible to us in plain text.
• Access to employee data within our systems is restricted by role-based access controls.
• We take reasonable technical and organisational measures to protect data against unauthorised access, alteration, disclosure, or destruction, though no method of transmission or storage is 100% secure.

Subject to applicable law (including the Digital Personal Data Protection Act, 2023, where applicable), you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data, subject to statutory retention requirements.
• Withdraw consent for camera/location capture (noting the impact on attendance marking described above).
• Raise a grievance regarding the handling of your personal data.

To exercise these rights, please contact your HR department or our Grievance Officer at Karedla Veera Manikanta, support@thelocal.co.in, 2nd floor, Sri Sai Arcade, above Polimeras, Kukatpally Housing Board Colony, Vivekananda Nagar, Kukatpally, Hyderabad, Telangana 500072.

The App is intended solely for use by employees and is not directed at, nor knowingly used by, individuals under the age of 18.

Where data is stored or processed outside India, we ensure appropriate safeguards are in place consistent with applicable law.

We may update this Privacy Policy from time to time. Material changes will be notified to you within the App or through your Client Organisation.