Privacy Policy

1. Who we are and what this covers

TezzHR is HR, attendance, leave, payroll and field-staff software, provided as a service on the web and as a mobile app for Android and iPhone. TezzHR is a product of Tezzsoft (tezzsoft.com), referred to here as "we", "us" or "our".

This policy covers our website, the company (HR) panel, the employee portal, the TezzHR mobile app and our support. It explains what personal data we process, why, and the choices and rights you have. We follow the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.

2. Your employer and us

Most personal data in TezzHR is entered or created by a business that uses TezzHR to manage its staff (the "company").

The company decides what employee data to collect and how to use it (for example, whether check-in needs a selfie or a location). For that data the company is the data fiduciary (controller), and we process it on the company's behalf as its data processor, under our agreement with the company.
We are the data fiduciary for data about the people who sign up, buy and manage TezzHR accounts, for website visitors and enquiries, and for data we need to run, secure and bill the service.

If you are an employee: questions about why your employer collects something, or requests to see, correct or delete your HR records, should go first to your company's HR team. We help companies answer them. You can also contact us (section 15).

3. Information we collect

From companies and HR admins

Company details: name, address, GST and statutory registration numbers, logo, brand colour, office location and geofence settings.
Admin accounts: name, email, phone, role and permissions, password (stored only as a one-way hash), sign-in and security events.
Billing: plan, invoices and payment status. Card and UPI details are handled by the payment provider; we do not store full card numbers.

About employees (entered by the company or the employee)

Identity and contact: name, employee code, photo, email, phone, date of birth, gender, address, emergency contact, family details.
Employment: department, designation, manager, branch, shift, joining date, documents, letters, appraisals, assets, resignation and exit records.
Attendance and leave: check-in/check-out times, work mode, leave, work-from-home, overtime and correction requests.
Payroll (when the company uses it): salary structure, payslips, bank account, PAN, UAN, ESIC, tax declarations, loans and expenses.
Government IDs the company chooses to record (for example Aadhaar, PAN, passport). These are masked on screen wherever possible.

Collected automatically

Device and log data: IP address, browser or app version, device type and model, operating system, time of requests and errors - used for security, troubleshooting and fraud prevention.
Push notification tokens, so we can send the alerts you enable.

From visitors and enquiries

Details you send through contact, demo or trial forms (name, company, email, phone, message).

4. Location, photos and face data

These features are switched on by each company. When they are on, the app or portal tells you before it uses them.

Data	When it is collected	Why
Location at check-in / check-out	Only at the moment you punch in or out.	To record where attendance was marked and, if the company uses a geofence, to check you are at the office.
Field-staff location tracking	Only for employees set up as field staff, and only while a field duty is running (from "Start duty" to "End duty").	Route, distance and visit records for field work. Tracking stops when the duty ends.
Selfie photos	At check-in/out when the company asks for a photo.	Proof of attendance, visible to authorised HR staff of your company.
Face data	When face check-in is enrolled and used.	To confirm the person checking in is the enrolled employee. We store a numeric face template (a list of numbers), not used for any other purpose, never sold and never shared outside your company's account.

We do not track location in the background outside these situations, and we do not use location, photos or face data for advertising.

5. How we use information

To provide the service the company has signed up for: attendance, leave, payroll, documents, approvals, ID cards, notices, field work and reports.
To send account, security, approval and payslip messages by email, SMS, WhatsApp or push notification, as configured.
To keep accounts secure: sign-in checks, one-time passwords, detecting misuse and preventing fraud.
To provide support, fix problems and improve the product, using aggregated or de-identified usage information where possible.
For billing, accounting and meeting legal obligations (for example tax records or lawful requests from authorities).

We do not sell personal data, and we do not use employee data to show advertising.

Within your company's account: employee data is visible to the company's authorised admins and managers according to the roles the company sets. Each company's data is kept separate from every other company's.
Service providers who help us run TezzHR, under contracts that require them to protect the data and use it only for us: cloud hosting and backup storage, email and SMS delivery, push notifications (Google Firebase), payment gateways (for example Razorpay or PayPal) and support tools.
Partners and resellers who sold or manage a company's subscription may see that company's account and billing details, not employee HR records.
Integrations the company enables (for example the API, webhooks or biometric devices) receive the data the company chooses to send.
Legal reasons: when required by law, court order or a lawful government request, or to protect the rights, safety and security of our users or the public.
Business transfer: if Tezzsoft is involved in a merger or acquisition, data may move to the new owner under this policy.

7. How long we keep it

Company and employee data is kept while the company's subscription is active and the company keeps it in TezzHR.
After a subscription ends, we keep the data for a limited period so the company can renew or export it, and then delete it, unless the law requires us to keep some records longer (for example payroll and tax records).
Backups are overwritten on a rolling schedule. Logs are kept only as long as needed for security and troubleshooting.
Companies can delete individual records and documents at any time within the limits of the law.

8. How we protect it

Encrypted connections (HTTPS) between your browser or app and our servers.
Passwords stored only as one-way hashes; optional two-step sign-in with one-time passwords.
Role-based permissions inside each company; files such as documents, payslips and selfies are only served to signed-in users who are allowed to see them.
Separation of each company's data, regular backups, monitoring and limited staff access on a need-to-know basis.

No online service can be completely secure. If a breach affects personal data, we will act quickly to contain it and inform the affected companies, and the Data Protection Board of India where required.

9. Your rights

Subject to the law, you can:

ask what personal data is processed about you and get a summary;
ask for incorrect or incomplete data to be corrected or completed (employees can request profile changes in My Profile, which HR approves);
ask for data to be erased when it is no longer needed, unless it must be kept by law;
withdraw consent where processing is based on consent (for example push notifications or camera access) - this does not affect processing before withdrawal, and some features may stop working;
nominate another person to exercise your rights in case of death or incapacity;
raise a grievance with us (section 15) and, if not resolved, with the Data Protection Board of India.

Employees should normally send requests to their employer's HR team, because the company controls its HR records. We will help the company respond.

10. Mobile app permissions

Location: to record where you check in or out, and during field duty if you are field staff. You can refuse; some companies require location to mark attendance.
Camera: for check-in selfies, face check-in and scanning or photographing receipts and documents.
Photos / files: only when you choose to attach a document or receipt.
Notifications: for approvals, payslips, notices and reminders. You can turn them off in your phone's settings.
Fingerprint / face unlock: handled by your phone. The app only receives a yes/no result; your biometric data never leaves your device.

11. Cookies

We use essential cookies to keep you signed in and to protect forms against misuse. The website may use basic analytics to understand visits, if enabled. We do not use advertising cookies. You can block cookies in your browser, but signing in will not work without the essential ones.

12. Children

TezzHR is a workplace service for businesses and their adult staff. It is not meant for children, and we do not knowingly collect personal data of anyone under 18. If a company employs someone under 18, the company is responsible for any consent required by law.

13. Where data is stored

Data is stored on servers chosen by us and our hosting providers, normally in India. Some service providers (for example push notification or email delivery) may process limited data outside India, only as permitted under Indian law and with appropriate safeguards.

14. Changes to this policy

We may update this policy when the product or the law changes. The date at the top shows the latest version. For significant changes we will notify company admins by email or in the app before they take effect.

15. Contact and grievances

For privacy questions, requests or complaints, contact our Grievance Officer:

Email: [email protected] (subject: "Privacy")
Website: tezzsoft.com · contact form

We aim to acknowledge requests within 48 hours and resolve them within 30 days.

Privacy policy