Privacy Policy

NityaHR provides a Software-as-a-Service HR management platform. This policy explains what personal data we collect, why we collect it, and what controls you have over it.

1. Who is responsible for your data

Your employer (Customer) is the Data Fiduciary. NityaHR is the Data Processor — we process data on the Customer's instructions.

2. What we collect

• Account data: name, email, mobile, role.
• Employment data: salary structure, attendance, leave, payroll runs, performance.
• Statutory identifiers: PAN, Aadhaar, UAN, bank account — encrypted at rest.
• Biometric data (opt-in): face-recognition embeddings — encrypted at rest.
• Operational metadata: IP, user-agent, login times — kept for audit + security.

3. Why we collect it

• To deliver the HRMS service.
• To meet Indian statutory obligations (PF / ESI / TDS / LWF).
• To detect fraud / unauthorised access.
• To improve reliability via anonymous error reporting.

4. Who we share with

• Your employer.
• Statutory portals (EPFO / ESIC / Income Tax) — only the specific fields each filing requires.
• Sub-processors (Google Cloud for AI with PII-redacted inputs only, Hostinger for hosting, Resend / SendGrid for email).
• We never sell personal data.

5. Your DPDP rights

Access, correct, erase, withdraw consent, complain to the Data Protection Board of India.

6. Contact

Privacy queries: no-reply@nityahr.com. We respond within 30 days as required by DPDP.