Privacy Policy
Last updated:
INDPayroll ("we", "us", "our"), a product of CRMLeaf, provides payroll and compliance software to businesses in India. This policy explains what data we collect, why, and how it is protected - both for the people who sign up for INDPayroll ("Customers") and the employees whose payroll data Customers process through the platform ("Employees").
1. Information we collect
- Account information: name, work email, company name and phone number provided when you sign up or request a demo.
- Payroll data: employee names, salary components, bank details, PAN/Aadhaar references, attendance and statutory identifiers (PF/ESI/UAN numbers) that Customers enter to run payroll. This data belongs to the Customer; INDPayroll processes it on the Customer's behalf.
- Usage data: log data, device information and product analytics collected when you use the platform or website.
- Cookies: essential cookies required for the site to function, and optional analytics cookies used only with consent.
2. How we use information
We use this information to provide and improve the service, calculate statutory compliance (PF, ESI, TDS, Professional Tax), generate payslips and reports, respond to support requests, and communicate product or billing updates. Payroll data is never used to train third-party models or sold to advertisers.
3. Sharing of information
We share data only with sub-processors necessary to run the service - for example, hosting infrastructure and payment processors - under written data processing agreements. We do not sell personal data. Data may be disclosed if required by law or a valid government or judicial request.
4. Data security
Data is encrypted in transit with 256-bit TLS and hosted on servers located in India. Access to Customer payroll data is restricted to authorized personnel on a need-to-know basis.
5. Data retention
Payroll data is retained for as long as the Customer's account is active, and for a limited period afterward as required for statutory record-keeping obligations under Indian labour law, after which it is deleted or anonymized.
6. Your rights
Depending on applicable law, including the Digital Personal Data Protection Act, 2023, you may have the right to access, correct, or request deletion of your personal data. Employees should raise such requests with their employer (the Customer), who controls the data; Customers can contact us directly at privacy@indpayroll.com.
7. Grievance officer
In accordance with applicable Indian IT rules, grievances regarding this policy may be addressed to our Grievance Officer at grievance@indpayroll.com. [Name, designation and full address to be added.]
8. Changes to this policy
We may update this policy from time to time. Material changes will be notified to Customers by email or an in-product notice.
9. Contact
Questions about this policy can be sent to privacy@indpayroll.com.