Privacy Policy

Effective Date: May 2026

1. Introduction

Welcome to the Digital Book of India staffypie Platform ("Platform", "we", "us", or "our"). We are committed to protecting the privacy, security, and confidentiality of your personal and corporate data. This Privacy Policy outlines our practices regarding the collection, use, processing, and disclosure of information when you use our comprehensive Software-as-a-Service (SaaS) employee management system, which includes our main website, Company Admin Dashboard, Super Admin Dashboard, and Employee Mobile Application (available on Google Play Store and Apple App Store).

By accessing or using our Platform, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. If you are using our services on behalf of an organization (e.g., your employer), your use of the Platform is additionally governed by your organization's internal privacy policies and administrative configurations.

2. Information We Collect

We collect varying types of information depending on your interaction with our Platform—whether you are a Company Administrator managing employees or an Employee using our Mobile App.

  • Personal Information: Name, email address, phone number, date of birth, emergency contacts, and demographic details.
  • Employment & Corporate Data: Employee ID, job title, department, shift configurations, salary structures, payroll data, bank account details, and employment history.
  • Device & Log Information: IP address, device type, operating system, app version, unique device identifiers, and Firebase notification tokens (FCM tokens).
  • Attendance & Work Records: Time-in/time-out logs, geofence validations, leave requests, approval statuses, and work performance metrics.
  • Uploaded Documents: Profile pictures, identity documents (Aadhaar, PAN), medical certificates for sick leaves, and custom attachments uploaded via Cloudflare R2 storage.
  • Authentication Logs: Timestamps, JWT tokens, login sessions, and role-based access control (RBAC) validations.

3. GPS, Location Tracking, and Field Visits

IMPORTANT DISCLOSURE FOR MOBILE APP USERS (Google Play & App Store Compliance)

Our Employee Mobile App provides critical attendance and field tracking functionalities that require access to your device's location services.

  • Geofence Attendance: To mark attendance securely, we collect your precise geographic location (GPS) at the exact moment you tap "Check In" or "Check Out" to verify that you are within the authorized geographical boundary (geofence) defined by your employer.
  • Live GPS Tracking & Field Visits: For employees assigned to field roles, we collect and transmit your real-time location data to your Company Admin. This includes background location access. Background location tracking is strictly activated only when you explicitly initiate a "Start Tracking" session or during an active "Field Visit."
  • Employee Movement Tracking: During an active field session, route histories and breadcrumbs are captured to validate client visits and calculate travel reimbursements. Tracking automatically ceases when you tap "Stop Tracking" or "Check Out".

Note: We do not track your location outside of your designated working hours, nor do we track you when you have not actively started a session. You can revoke location permissions at any time via your device settings, though this may prevent you from utilizing the attendance and field visit features.

4. Face AI and Biometric Data

BIOMETRIC DATA CONSENT

To prevent attendance fraud (such as "buddy punching"), our Platform utilizes advanced Face AI for identity verification.

  • Face Verification & Anti-Spoofing: When marking attendance, the app captures your photo and runs liveliness detection/anti-spoofing algorithms to ensure a real person is present.
  • Facial Vectors: We do not store raw facial images permanently for verification. Instead, we generate secure mathematical representations (facial vectors/templates) of your face.
  • Storage & Security: Biometric templates are encrypted and stored securely. They are strictly used for attendance matching purposes and are never sold, traded, or shared with external third-party marketing entities.

5. How We Use Your Data

We process the collected data solely to deliver, maintain, and improve our staffypie services:

  • Attendance Validation: Utilizing location and Face AI to log accurate work hours.
  • Payroll Processing: Automatically computing salaries, overtime, deductions, and tax compliance based on verified attendance and shift data.
  • Leave Management: Processing holiday requests, comp-offs, and tracking leave balances.
  • Security & Monitoring: Auditing RBAC activities, detecting fraudulent logins, and ensuring tenant isolation.
  • Analytics: Providing Company Admins with performance dashboards and attendance reports.

6. Firebase Notifications & Background Services

Our Platform utilizes Firebase Cloud Messaging (FCM) to deliver critical push notifications. This includes:

  • Approval Alerts: Notifying employees of leave approvals or payroll disbursements.
  • Reminders: Prompting users to Check Out at the end of a shift or alerting them of upcoming field visits.
  • Background Sync: The app may perform background synchronization to update local offline data caches securely.

7. Data Sharing and Third-Party Providers

We respect your privacy and limit data sharing to strict operational necessities:

  • Company Administrators: As an enterprise SaaS, your employer (Company Admin) has full access to your employment data, attendance logs, live location (during work hours), and uploaded documents.
  • Cloud Storage (Cloudflare R2): All user-uploaded documents (e.g., medical certificates, profile photos) are securely stored in our Cloudflare R2 buckets.
  • Payment Processing (Razorpay): For B2B subscription and billing, company admins process payments via Razorpay. We do not store full credit card details on our servers.
  • Legal Compliance: We may disclose data if required by law, subpoena, or valid legal process in compliance with applicable government authorities.

8. Data Retention and Deletion

We retain personal data for as long as your company maintains an active subscription with us, or as required by statutory labor and payroll laws.

  • Audit Logs & Payroll Records: Retained securely to comply with financial auditing regulations.
  • Delete Account Policy: Users can request account deletion via the Mobile App (Settings > Delete Account). For employees, this initiates a "Soft Deletion" request to your Company Admin, as payroll and taxation laws often mandate the retention of financial records for a specified number of years.
  • Company Churn: If a company terminates its subscription, all associated tenant data is securely wiped after a grace period, barring legally required audit preservation.

9. Security Practices & Employee Monitoring

Employee Monitoring Disclosure: By using the Platform, you acknowledge that your employer monitors your digital and physical footprint (via GPS and attendance logs) during designated work hours to ensure operational efficiency.

We implement enterprise-grade security protocols:

  • Encryption: Data is encrypted at rest (AES-256) and in transit (TLS 1.3).
  • Authentication: Secure JWT-based authentication with strict token expiration.
  • Tenant Isolation: Robust multi-tenant architecture ensures one company cannot access another company's data.

10. International Compliance & User Rights

We operate in compliance with the Information Technology Act (India) and respect core privacy principles akin to GDPR. Depending on your jurisdiction, you have the right to:

  • Access the personal data held about you.
  • Request corrections to inaccurate payroll or profile data (via your HR admin).
  • Revoke device permissions (Camera, Location) at any time, acknowledging it may limit app functionality.

Children's Privacy:

Our platform is designed strictly for corporate workforce management and is not intended for individuals under the age of 18. We do not knowingly collect data from minors.

11. International Data Transfers and Server Jurisdiction

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. Our primary infrastructure, including database nodes and cloud computing servers provided by third-party services (such as AWS, Google Cloud Platform, and Cloudflare), are globally distributed but primarily hosted within the Republic of India to comply with local data localization mandates.

If you are located outside India and choose to provide information to us, please note that we transfer the data, including Personal Data, to India and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

12. Compliance with Global Privacy Frameworks (GDPR & CCPA)

Although our primary operations are based in India, we recognize the global nature of modern enterprises. For users accessing our Platform from the European Economic Area (EEA), we abide by the principles of the General Data Protection Regulation (GDPR). Similarly, for residents of California, we observe the California Consumer Privacy Act (CCPA).

  • Right to Access: You have the right to request copies of your personal data. We may charge you a small fee for this service.
  • Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or incomplete.
  • Right to Erasure (Right to be Forgotten): You have the right to request that we erase your personal data, under certain conditions. Note that employment records may be exempt due to statutory tax and payroll laws.
  • Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
  • Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
  • Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

13. Vendor Sub-Processing & API Integrations

To provide our comprehensive SaaS offering, we engage various third-party sub-processors. We maintain strict Data Processing Agreements (DPAs) with these vendors to ensure they uphold privacy standards identical or superior to our own.

  • Cloudflare: Utilized for CDN, DDoS protection, and secure R2 object storage for identity documents and profile images.
  • Razorpay: Utilized exclusively for processing B2B subscription payments from Company Admins. No raw credit card data traverses our proprietary backend servers.
  • Firebase (Google): Utilized for dispatching real-time push notifications. FCM tokens are collected uniquely per device.
  • Mapping Providers: Google Maps APIs or Mapbox may be utilized to render geofence boundaries and field visit tracks visually on the administrative dashboards.

14. Cookie Policy and Web Beacons

Our Web Administrator and Super Admin dashboards employ cookies, web beacons, and similar tracking technologies to enhance user experience, track session states, and monitor platform performance.

  • Strictly Necessary Cookies: Required for authentication, JWT storage, and security verifications. These cannot be disabled without breaking platform functionality.
  • Performance Cookies: Utilized to track API response times and frontend rendering delays.
  • Targeting Cookies: We do NOT use targeting cookies for ad-retargeting. Your corporate HR data is never monetized or sold to advertisers.

15. Incident Response and Breach Notification

In the unlikely event of a data breach that compromises the confidentiality, integrity, or availability of Personal Data, we have a robust Incident Response Plan (IRP) in place. We will notify the affected Company Administrators without undue delay, and in any event within 72 hours of becoming aware of the breach, providing comprehensive details of the nature of the breach, the specific data compromised, and the immediate mitigation steps deployed.

16. Amendments to this Policy

We reserve the right to update, amend, or modify this Privacy Policy at any time to reflect changes in our technological infrastructure, legal compliance requirements, or business operations. Any substantial changes will be communicated to Company Administrators via email and through in-app platform notifications prior to the changes taking effect. Continued use of the Platform after the effective date constitutes your binding acceptance of the revised Policy.

17. Data Retention and Deletion Schedules

We retain Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. The specific retention periods vary depending on the nature of the data and the corresponding legal obligations.

  • Biometric Data: Face vectors used for attendance verification are retained only as long as the employee is actively employed. Upon termination, biometric data is permanently purged within 30 days.
  • GPS Tracking Data: Routine location data collected during field visits is retained for a maximum of 12 months to allow companies to perform annual audits, after which it is anonymized or deleted.
  • Financial Records: Payroll and tax-related information generated by our Platform may be retained for up to 7 years to comply with statutory taxation and corporate auditing laws.
  • Application Logs: System and security logs containing IP addresses and user agents are kept for 90 days for forensic analysis and debugging.

18. Artificial Intelligence and Automated Decision-Making

The Platform employs advanced Artificial Intelligence (AI) and Machine Learning (ML) algorithms, primarily for facial recognition during attendance logging. We want to be fully transparent about how these systems operate:

Our Face AI system creates a mathematical representation (a "vector") of your face. We do not store raw images of your face for daily attendance checks; rather, we compare the live vector against the enrolled vector. The AI does not make employment decisions, such as hiring or firing. It solely determines whether the face presented matches the enrolled profile with a high degree of confidence. We regularly audit our AI models to mitigate biases based on race, gender, or age, ensuring fair and equitable performance across diverse demographics.

19. Law Enforcement and Government Data Requests

We may disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency). Our policy for handling such requests includes:

  • Validity Check: We rigorously review all subpoenas, search warrants, and court orders to ensure they are legally valid and properly scoped.
  • Notification: Unless prohibited by law or court order, we will attempt to notify the relevant Company Administrator before disclosing any employee data, giving them an opportunity to seek a protective order.
  • Data Minimization: If disclosure is unavoidable, we provide only the specific data elements legally compelled by the order, and nothing more.

20. Children's Privacy

Our Platform is intended strictly for corporate and enterprise use, specifically for managing adult workforce populations. We do not knowingly collect, maintain, or process Personal Data from anyone under the age of 18. If a parent or guardian becomes aware that their child has provided us with Personal Data without parental consent, they should contact our support team immediately. If we become aware that we have collected Personal Data from anyone under the age of 18, we will take immediate steps to remove that information from our active databases and servers.

21. Business Transfers and Mergers

If Digital Book of India is involved in a merger, acquisition, asset sale, bankruptcy, or corporate restructuring, your Personal Data may be transferred as a business asset. In such an event, we will provide notice to all Company Administrators before your Personal Data is transferred and becomes subject to a different Privacy Policy. The acquiring entity will be bound by the same obligations of confidentiality and security as outlined in this document.

22. Subpoenas and Legal Compulsion Procedures

In the event that Digital Book of India receives a subpoena, warrant, or other legal order requiring the disclosure of your Personal Data, our standard procedure dictates that we will first attempt to notify the affected Company Administrator to allow them an opportunity to file a motion to quash or seek a protective order, unless such notification is legally prohibited. We mandate that any requesting law enforcement agency produce a valid court order before any data is surrendered. Furthermore, we practice strict data minimization, meaning we will only provide the precise data points explicitly detailed in the legal order.

23. Vulnerability Disclosure and Bug Bounty Program

To continually fortify our defenses, Digital Book of India operates a coordinated vulnerability disclosure program. Security researchers who discover potential vulnerabilities in our Platform are encouraged to report them to our security team. We maintain strict confidentiality during the triage and remediation process. Under no circumstances will we penalize well-intentioned researchers who comply with our safe harbor guidelines. Reports that lead to significant security enhancements may be eligible for financial rewards at the sole discretion of our Security Council.

24. Handling of Geolocation Anomalies and Spoofing Attempts

Our advanced GPS tracking infrastructure is designed to identify and flag anomalies, such as impossible travel speeds, GPS spoofing, or the use of virtual private networks (VPNs) designed to obscure true locations. When such anomalies are detected, the Platform logs the event for auditing purposes. While we do not automatically take punitive action against employees, these logs are made available to Company Administrators who retain the right to investigate and act upon suspected fraudulent attendance or field visit check-ins according to their internal corporate policies.

25. Bring Your Own Device (BYOD) Privacy Implications

We recognize that many organizations operate under a Bring Your Own Device (BYOD) policy. Our Employee Mobile App is explicitly designed to sandbox corporate data from personal data. We do not inspect personal SMS messages, personal browsing history, or non-work-related application usage. Location tracking is strictly activated only when explicitly triggered by attendance check-ins or during scheduled field visits. Employees retain full control over operating-system-level permissions and can revoke GPS or camera access at any time, acknowledging that doing so may restrict their ability to utilize core Platform features.

26. Anonymization and Pseudonymization of Analytics Data

To improve Platform performance and develop new features, we occasionally analyze usage patterns. Before this data enters our analytics pipelines, it undergoes a rigorous anonymization or pseudonymization process. Direct identifiers (such as names, exact employee codes, and email addresses) are stripped or hashed using strong cryptographic algorithms. This ensures that the resulting datasets used by our product engineering teams cannot be reverse-engineered to identify any specific individual, thereby preserving employee privacy while allowing for continuous technological innovation.

27. Third-Party Authentication and Single Sign-On (SSO)

Organizations utilizing Enterprise tiers of the Platform may configure Single Sign-On (SSO) integrations using protocols such as SAML 2.0 or OAuth2 (e.g., Google Workspace, Microsoft Entra ID). When SSO is utilized, we receive identity tokens from the Identity Provider (IdP). We only extract and store the minimal information required to provision the user account (typically email address and basic profile info). We do not receive, store, or have any access to the user's master password associated with their corporate directory.

28. Rights Related to Automated Decision Making

While our Face AI model evaluates facial vectors to authenticate attendance, it is designed strictly as a verification tool rather than a decision-making entity. Employees have the right to request manual intervention if they believe the AI has incorrectly rejected their attendance check-in due to lighting, facial hair changes, or physical injuries. Company Administrators retain full override capabilities to manually approve attendance logs that fail automated verification.

29. Specialized Provisions for Healthcare and Financial Sector Clients

Organizations operating within strictly regulated industries (such as healthcare under HIPAA or finance under PCI-DSS) are subject to specialized data processing addendums. While Digital Book of India is not inherently a processor of protected health information (PHI) or primary cardholder data, any incidental exposure is governed by strict compartmentalization rules. Clients in these sectors must engage with our legal team to sign appropriate specialized NDAs and DPAs before onboarding.

30. Cryptographic Standards and Data Security

All data transmitted between the client applications and our API servers is secured using Transport Layer Security (TLS 1.2 or higher) with strong cipher suites. Data at rest, particularly sensitive fields such as payroll figures and biometric vectors, is encrypted using AES-256 block-level encryption. Access to cryptographic keys is strictly managed through secure hardware security modules (HSMs) and audited cloud key management services (KMS).

31. Offboarding and End-of-Contract Data Purge

Upon the termination of a Master Service Agreement (MSA) or subscription cancellation, Digital Book of India initiates a structured offboarding process. The Company Administrator is provided a 30-day grace period to export their organizational data (including attendance logs, payslips, and employee rosters) via secure, structured formats (CSV/JSON). At the conclusion of this grace period, all tenant-specific data is irreversibly destroyed from our primary databases and cascading deletion is triggered across our backup infrastructure, ensuring complete data obliteration within 90 days of contract termination.

32. Impact Assessments and Privacy by Design

We strictly adhere to the doctrine of "Privacy by Design." Before any major feature (such as advanced analytics or new biometric integrations) is deployed to production, our internal legal and security teams conduct comprehensive Data Protection Impact Assessments (DPIAs). These assessments evaluate potential risks to employee privacy, ensuring that mitigating controls are baked into the software architecture before a single line of code is shipped.

33. Contact Information

If you have any questions about this Privacy Policy, your biometric data, or our location tracking practices, please contact our support team at:

Digital Book of India staffypie Support

Email: support@biddingindia.com