Privacy Policy

Hazri Technologies (“Hazri”, “we”, “us”) provides an attendance and payroll platform to small and medium businesses in India. Under the Digital Personal Data Protection Act, 2023 (“DPDP Act”), your employer is the data fiduciary for the employee records it manages in Hazri, and we process that data on its instructions; for the account data of people who sign their company up, we act as the data fiduciary.

• Account data — name, work email, phone number, employee code, designation, department and role, provided by you or your employer.
• Location, at punch time only — when you tap Check in/Check out, your device’s GPS coordinates at that moment are sent once to verify you are within your office’s geofence. Hazri does not track location continuously, in the background, or at any other time. Each stored punch keeps the coordinates, computed distance and result.
• Selfies (optional) — if you or your employer enable selfie-at-punch, the photo you capture is stored with that punch record. Punching works without a selfie unless your employer requires it.
• Attendance & leave data — punch times, computed day statuses, leave requests, balances and approvals, medical certificates you upload.
• Salary data — the salary structure your employer sets, computed payslips and statutory deductions (PF, ESI, professional tax).
• Technical data — IP address and browser identifier on sign-in attempts (kept for account security), and server logs needed to run the service.

We do not collect Aadhaar or other government identifiers, we do not read anything else on your device, and we do not sell or share personal data with advertisers.

• To record and verify attendance (geofence check, punch history, day-status computation).
• To administer leave — balances, approvals and the audit ledger behind them.
• To compute salaries and generate payslips, including statutory deductions.
• To send service messages: welcome and password emails, leave decisions, payslip delivery.
• To keep accounts secure: login attempt logging, lockouts, session management.
• To meet legal obligations that apply to us or your employer (e.g. payroll record retention).

WhatsApp notifications are sent only if you have given consent (the opt-in flag on your profile). You can withdraw that consent at any time by telling your admin, and messages fall back to email.

Data is stored with our cloud database and storage provider and is encrypted in transit (HTTPS everywhere) and at rest. Passwords are stored only as one-way hashes (argon2id). Access inside Hazri is role-based: employees see their own records, managers their reportees’, and admins their company’s — every request is checked server-side, and every company’s data is isolated from every other’s.

• Attendance and payroll records — retained while your employer's account is active, and as required by Indian payroll and labour regulations after that (typically up to 8 years for wage records).
• Punch selfies and medical certificates — retained with their attendance/leave record.
• Login attempt logs — up to 12 months.
• When a company closes its account, its data is exported on request and then hard-deleted within 90 days, except records we must keep by law.

• Access — ask for a copy of the personal data we hold about you.
• Correction — have inaccurate or incomplete data corrected (for employment records, via your employer's admin).
• Erasure — request deletion of data that is no longer needed for the purposes above or required by law.
• Grievance redressal — raise a complaint and receive a response within the timelines the DPDP Act prescribes.
• Nomination — nominate a person to exercise these rights on your behalf in case of death or incapacity.

For records your employer controls, we will support and route your request to them; for data we control, we act on it directly.

Write to our grievance officer at grievance@hazri.app. We acknowledge complaints within 72 hours and aim to resolve them within 30 days. If you are not satisfied, you may escalate to the Data Protection Board of India.

If this policy changes materially, we will notify company admins by email and show the updated date above. Continued use after the effective date means the updated policy applies.