Privacy Policy

This Privacy Policy explains how DgCrux Technology Pvt. Ltd. ("DgCrux", "we", "us", or "our") collects, uses, discloses and safeguards personal information when you use the worklyy.ai platform (the "Service"), including its website, web application, employee portal, and mobile applications.

By accessing or using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

We collect information about you in the following ways:

• Account Information: name, email address, phone number, password (hashed), and company details when you register or are onboarded by your employer.
• Employee Data: profile details such as designation, department, employment dates, salary information, attendance records, leave records, and other HR-related information provided by your employer.
• Workplace Data: attendance logs, location data when you check in/out, expense claims, asset assignments, helpdesk tickets, performance records, and recruitment information.
• Connected Accounts: if you connect a Google account, we collect limited access to send emails on your behalf (Gmail) and manage calendar events (Google Calendar) strictly for the features you enable.
• Usage Data: log data, IP address, browser type, device information, pages visited, and time spent on the Service.

We use the information we collect to:

• Provide, operate and maintain the Service and its features.
• Manage employee records, attendance, leave, payroll and other HR workflows.
• Send emails and calendar invitations through your connected Google account.
• Generate AI-powered insights, summaries and recommendations.
• Process payments, billing and invoices.
• Respond to your enquiries and provide customer support.
• Monitor and improve the Service, including security and fraud protection.
• Comply with legal obligations and enforce our terms.

We process personal information based on one or more of the following legal bases: performance of a contract with your employer, your consent, our legitimate business interests, and compliance with legal obligations.

We do not sell your personal information. We may share information:

• With your employer: employee data is processed on behalf of and shared with the organisation that provided it.
• With service providers: trusted third parties that help us operate the Service, such as cloud hosting providers (PostgreSQL, Redis), email providers (SMTP), payment processors (Razorpay), AI providers (Google Gemini), and object storage providers (DigitalOcean Spaces).
• For legal reasons: where required by law, regulation, legal process, or to protect our rights and the safety of users.

We retain personal information only as long as necessary for the purposes described in this policy, to comply with legal obligations, resolve disputes and enforce our agreements. Attendance photos are retained for up to 365 days. When your organisation terminates its subscription, we delete or anonymise data in accordance with our data deletion procedures.

We implement appropriate technical and organisational measures to protect your information, including encryption in transit and at rest, access controls, and regular security monitoring. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the right to:

• Access, correct or update your personal information.
• Request deletion of your personal information.
• Object to or restrict certain processing.
• Request a copy of your personal information in a portable format.
• Withdraw consent at any time where processing is based on consent.

To exercise these rights, contact your employer (data controller for employee data) or write to us using the contact details below.

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Service is used. You can control cookies through your browser settings.

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of the Service after changes constitutes acceptance.

If you have any questions about this Privacy Policy or our data practices, please contact us at:

DgCrux Technology Pvt. Ltd.
Email: dgcrux4@gmail.com
Website: https://worklyy.in