Privacy Policy

1. Information We Collect

1.1 Personal Information

When you use HrNexto, we may collect:

• Account Information: Name, email address, phone number, company name
• Employee Data: Employee details uploaded by your organization including names, contact info, department, designation
• Attendance Data: Clock-in/out times, GPS location (with consent), biometric data hashes
• Usage Data: Features used, pages visited, time spent on platform
• Device Information: Device type, operating system, browser type, IP address

1.2 Payment Information

Payment processing is handled by secure third-party providers (Razorpay/Stripe). We do not store complete credit card numbers or CVV codes on our servers.

2. How We Use Your Information

We use collected information to:

• Provide and maintain our HR management services
• Process attendance, leave requests, and work logs
• Generate reports and analytics for your organization
• Send important notifications and updates
• Improve our platform and develop new features
• Provide customer support
• Ensure security and prevent fraud
• Comply with legal obligations

3. Data Storage and Security

3.1 Data Storage

Your data is stored on secure servers with industry-standard encryption. We use PostgreSQL databases with encryption at rest and in transit (TLS 1.3).

3.2 Security Measures

• End-to-end encryption for sensitive data
• Regular security audits and penetration testing
• Multi-factor authentication support
• Role-based access control (RBAC)
• Regular automated backups
• 99.9% uptime SLA with redundant infrastructure

4. Data Sharing

We do NOT sell your personal data. We may share data only in these circumstances:

• Within Your Organization: Admins and HR personnel can access employee data as per their roles
• Service Providers: Third-party services that help us operate (cloud hosting, payment processing, email delivery)
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In case of merger or acquisition (with prior notice)

5. Multi-Tenant Data Isolation

HrNexto is a multi-tenant SaaS platform. Each organization's data is logically isolated and cannot be accessed by other tenants. We implement strict tenant-level access controls at the database level.

6. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate data
• Deletion: Request deletion of your data (subject to legal retention requirements)
• Export: Export your data in a machine-readable format
• Opt-out: Unsubscribe from marketing communications
• Withdraw Consent: Withdraw previously given consent for data processing

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. After account termination, we retain data for up to 90 days for backup purposes, then permanently delete it. Legal and compliance data may be retained longer as required by law.

8. Cookies and Tracking

We use cookies for:

• Essential Cookies: Required for platform functionality (authentication, session management)
• Analytics Cookies: To understand usage patterns and improve our services
• Preference Cookies: To remember your settings and preferences

You can control cookies through your browser settings.

9. Children's Privacy

HrNexto is designed for business use and is not intended for children under 18. We do not knowingly collect personal information from children.

10. International Data Transfers

Your data may be processed in servers located in India. We ensure appropriate safeguards are in place for any international data transfers in compliance with applicable laws.

11. Changes to This Policy

We may update this policy periodically. We will notify you of significant changes via email or prominent notice on our platform. Continued use after changes constitutes acceptance.

12. Contact Us