Privacy Policy

Last Updated and Effective Date: 18 August 2026

Version: 1.0

DeployWise Technologies ("DeployWise", "we", "our", or "us") respects your privacy and is dedicated to protecting the personal and business information you share with us. This Privacy Policy explains how we collect, use, disclose, store, and safeguard data when you visit our website, install our Progressive Web Application (PWA), or use our field workforce management software platform.

Please read this policy carefully. By accessing or using DeployWise, you acknowledge that you have read, understood, and agreed to the practices described herein.

1. Roles and Scope: Data Controller vs. Data Processor

To understand how your data is handled, it is important to clarify roles:

• DeployWise as a Data Controller: We act as a Data Controller regarding registration information, account holder credentials, subscription billing records, customer support communications, and website analytics.
• DeployWise as a Data Processor: When your employer or contracting organization ("Company Tenant") uses DeployWise to manage workforce records, shift schedules, GPS check-ins, advance requests, and client invoices, your employer is the Data Controller, and DeployWise processes that information solely on their behalf in accordance with their instructions and our Master Service Agreement.

2. Information We Collect

We collect information directly from you, automatically via application usage, and through authorized company administrators.

2.1 Information You and Your Organization Provide:

• Account & Profile Data: Name, work email address, telephone number, job title, company name, department, role, password hash, and profile photographs.
• Organizational & Business Details: Company legal name, registered address, GSTIN/tax identification numbers, billing contacts, and project site configurations.
• Financial & Compensation Records: Wage rates, shift allowances, advance requests, bank account identifiers (for direct payment coordination), and reimbursement expense receipts.
• Client & Vendor Information: Client company names, contact persons, billing addresses, purchase order details, and generated invoice records.

2.2 Information Collected Automatically During Field Operations:

• Precise Geolocation Data: When employees perform shift check-in or check-out, the mobile/web application requests permission to collect GPS coordinates (latitude, longitude, and accuracy radius) to verify proximity to designated project geofences. DeployWise does not perform continuous background GPS tracking when workers are clocked out.
• Device & Usage Telemetry: IP address, browser type, operating system, device identifiers, access timestamps, visited pages, network status, and error logs.
• Camera & Image Capture: If configured by the employer for visual site verification or expense receipt scanning, photos captured via the application camera interface are securely transmitted to Cloudinary storage.

3. How We Use Collected Information

We utilize the collected information for lawful business purposes, including:

1. Service Provisioning: Authenticating users, routing to company workspaces, enforcing role-based permissions, and maintaining session states.
2. Field Workforce Management: Accurately logging attendance, calculating multi-shift hours, computing overtime, and generating automated timesheets.
3. Financial Workflows: Processing advance requests, tracking project reimbursements, and facilitating client invoice creation.
4. Subscription Management: Managing billing cycles, generating plan invoices, and communicating payment updates via Razorpay.
5. Platform Security & Compliance: Detecting fraud, mitigating security vulnerabilities, maintaining immutable audit logs, and verifying legal consent.
6. Notifications & Communications: Sending shift alerts, approval reminders, password reset links, and critical policy update notices via transactional emails.

4. Legal Bases for Processing

We process personal data under the following legal frameworks (including the Digital Personal Data Protection Act / DPDP and GDPR principles):

• Contractual Necessity: To provide services agreed upon in our Terms of Service.
• Legitimate Interests: To secure our platform, prevent abuse, improve application performance, and provide technical assistance.
• Legal & Statutory Obligations: To maintain financial and tax records as required by regulatory authorities.
• Explicit Consent: Where users or employers give informed consent (such as device location permissions and cookie preferences).

5. Data Sharing and Third-Party Sub-Processors

DeployWise does not sell, rent, or trade your personal information to third parties. We share data only with trusted infrastructure and service partners strictly necessary to operate our SaaS platform:

All sub-processors are vetted for stringent security standards, confidentiality obligations, and compliance with applicable data protection legislation.

6. Data Security and Safeguards

We implement robust technical and organizational measures to safeguard your information:

• Encryption: Data in transit is protected using Transport Layer Security (TLS 1.3/HTTPS). Sensitive stored credentials (passwords) are irreversibly hashed using industry-standard bcrypt algorithms.
• Tenant Isolation: Strict logical database boundaries prevent cross-organization data leakage.
• Access Controls: Multi-factor authorization, JSON Web Token (JWT) session expirations, and fine-grained role-based permissions.
• Security Headers: HSTS, strict Content Security Policies (CSP), X-Frame-Options, and anti-CSRF token verification.

7. Data Retention and Deletion

• Active Accounts: We retain Customer Data for as long as your company maintains an active subscription.
• Terminated Accounts: Following account cancellation or termination, company data is retained for thirty (30) days to allow export, after which it is queued for permanent deletion or anonymization, except where retention is mandated by tax or labour compliance statutes.
• Audit Logs: Security and attendance audit logs may be retained in immutable archives for statutory verification.

8. Your Data Rights and Choices

Depending on your jurisdiction, you have specific rights regarding your personal information:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate, out-of-date, or incomplete records.
• Right to Erasure / Deletion: Request deletion of your personal account, subject to employer and statutory record retention requirements.
• Right to Withdraw Consent: Revoke location or camera permissions at any time via your browser or device system settings.
• Right to Data Portability: Request an export of your company records in structured, machine-readable formats (JSON/Excel).

Note: If you are an employee whose data is controlled by your employer, please direct access and correction requests to your company SuperAdmin.

9. Cookies and Local Storage

DeployWise uses essential HTTP cookies and browser LocalStorage/IndexedDB to manage authenticated sessions, preserve user UI preferences, and enable Progressive Web App (PWA) offline support. For full details on our cookie implementation, please review our Cookie Policy.

10. Children's Privacy

DeployWise is strictly an enterprise business application and is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect technological advancements, legal requirements, or operational changes. When significant changes occur, we will notify administrators via email and update the "Effective Date" at the top of this document.

12. Grievance Officer and Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our designated Grievance and Privacy Officer:

• Contact: Privacy & Compliance Team
• Email: privacy@deploywise.co.in / legal@deploywise.co.in
• Address: DeployWise Technologies, Ahmedabad, Gujarat, India