Visitors and customers. When you visit this website, request a demo or sign up your company, we decide why and how your data is used. For this data we are the Data Fiduciary.

Your employees’ data inside synkd. When a company uses synkd to run attendance, leave and payroll, that company (the employer) decides what employee data is collected and why. The employer is the Data Fiduciary; we process that data only on its behalf and on its instructions, as its Data Processor. Employees with questions about their data should first contact their employer’s HR team.

On this website:

• what you type into the demo request form: name, work e-mail, company, number of employees and, if you choose, a phone number;
• technical data any website receives, such as your IP address, browser type and the pages requested, kept in server logs;
• your light or dark theme choice, stored only in your own browser (no tracking cookies).

In the synkd service, on behalf of each employer: account details (name, work e-mail, phone, role), attendance punches with time, location and a selfie; leave, approvals and documents; and payroll data such as salary, bank account, PAN, Aadhaar, UAN, PF and ESI numbers and tax declarations.

The synkd apps for Android and iOS ask for these permissions. Each one is used only for the purpose shown, and you can turn it off in your phone’s settings; the related feature then stops working.

• Location (precise): read once when you punch in or out, so your employer can confirm where attendance was marked. The app does not track your location in the background or between punches.
• Camera: to take the selfie that goes with every punch, so your employer can confirm who marked attendance. Photos are taken in the app, uploaded to your employer’s account, and never read from your gallery.
• Fingerprint or face unlock: to reopen the app quickly. This uses your phone’s own biometric system; we never receive or store your fingerprint or face data.
• Notifications: approvals, reminders and announcements. A push token for your device is stored with your account so these can reach you.
• Alarms and reminders: punch reminders you set are scheduled on your phone.
• Files: payslips and documents you download are saved to your phone’s Downloads folder.

The apps also send basic technical data needed to run and improve them: app version, device model and operating system, crash reports, and anonymous usage events such as which screens are opened. They contain no advertising and no third-party advertising or tracking SDKs.

• to reply to demo requests and enquiries, and to set up and run your company’s account;
• to provide the synkd service as the employer instructs: attendance, leave, approvals, payroll, payslips, documents and notifications;
• to keep the service secure, prevent misuse and fix problems;
• to send service e-mails such as invitations, password-reset codes and important notices;
• to meet legal obligations, for example tax and accounting records.

We do not sell personal data, and we do not use your employees’ data for advertising.

We process website and customer-contact data on the basis of your consent, given when you submit a form, or for legitimate uses permitted by the DPDP Act, such as complying with law.

Employee data in the service is processed on the employer’s instructions; the employer is responsible for having a valid basis for it under the DPDP Act, including notices to its employees.

Service data is stored in India, in Amazon Web Services’ Mumbai region. We use a small number of service providers, each bound to protect the data and use it only to provide their service to us:

• Amazon Web Services (India): hosting, database and file storage;
• an e-mail delivery provider (for example Brevo): sending invitations, codes and notifications;
• Google Firebase: delivering push notifications to the mobile apps, crash reports and anonymous app usage statistics;
• Google Fonts: the fonts on this website are loaded from Google, which receives your IP address when the page loads.

Some of these providers may process limited data, such as an e-mail address being delivered, outside India, as permitted under the DPDP Act.

• Aadhaar, PAN and bank account numbers are encrypted at rest and shown masked to anyone whose role does not need them;
• each organisation’s data is isolated at the database level;
• connections are encrypted (HTTPS); platform administrators use two-step sign-in;
• an append-only audit log records who changed what.

No system is perfectly secure. If a personal data breach occurs, we will inform affected customers and the Data Protection Board of India as the DPDP Act requires.

• demo requests and enquiries: up to 24 months after our last contact, unless you become a customer;
• service data: for as long as the employer’s account is active, then deleted within 90 days of the account closing, except where the law requires longer retention (for example payroll and tax records);
• the service lets employers erase a former employee’s personal data while keeping statutory records;
• server logs: up to 90 days.

Under the DPDP Act you can ask us for a summary of your personal data and how it is processed, ask us to correct, complete, update or erase it, withdraw consent you gave (this does not affect processing already done), and nominate someone to exercise these rights for you.

For data inside synkd, please contact your employer first; we will help them respond. To exercise your rights with us, write to hello@synkd.in. We aim to respond within 30 days.

To delete your synkd account and its data, follow the steps on our account deletion page.

If you have a concern about how we handle personal data, contact our Grievance Officer at hello@synkd.in. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

synkd is a workplace tool for employers and is not meant for children. We do not knowingly collect personal data of anyone under 18 through this website.

We may update this policy. We will post the new version here with a new effective date and, for significant changes, tell customers by e-mail before they apply.

The Small Apps. E-mail: hello@synkd.in.