Privacy policy
Last updated: [date]
Draft. To be reviewed by a lawyer before go-live. Replace the [bracketed] parts.
இந்தப் பக்கம் தற்போது ஆங்கிலத்தில் மட்டும் உள்ளது.
BaasDesk is a service of BaasDesk ("we", "us"). This policy explains what personal data BaasDesk handles, why, and the choices you have. It follows the Digital Personal Data Protection Act, 2023 and the rules made under it.
Who is responsible
- Your account details (owner and team members who sign in): we decide how these are used, so we are the Data Fiduciary for them.
- Your workers' details that your business enters (attendance, pay, advances and so on): your business decides what to record and why, so your business is the Data Fiduciary and we process that data for you as a Data Processor, under our Terms.
What we collect
- Account: name, email, mobile number, business name, your language choice, sign-in records.
- Worker records entered by you: name, mobile number, trade, site, date of birth (to check the worker is 18 or older), photo (only with the worker's consent), UPI ID, attendance, wages, advances and payments.
- Site records entered by you: sites, budgets, money received, expenses, vendors and bill photos.
- Technical: IP address, device and browser type, and error logs, used to keep the service secure and working.
Why we use it
To provide BaasDesk (attendance, pay, site money and billing), send sign-in codes and service emails, keep accounts secure, give support, and meet legal duties such as keeping our own invoices. We do not sell personal data and we do not show advertising.
Where it is stored
On servers in India. Only people at your business with the right role see your data; our staff access it only to support you or keep the service running, and every access to the operator console is recorded.
Who we share it with
Only service providers that help us run BaasDesk — [hosting provider, India region] and Zoho (sending emails) — under contracts that require them to protect it, or authorities when the law requires.
How long we keep it
While your account is active. If your subscription ends, the account becomes read-only for [30] days, then suspended; your data is kept for [180] days in total so you can return or download it, and then deleted — except records the law requires us to keep, such as our invoices to you. Backups are overwritten within [30] days after that.
Your rights
You can ask to see, correct or delete your personal data, withdraw a consent you gave, and name someone to act for you. Workers should first ask the business that employs them, because that business controls their records; we will help the business answer. You can also complain to the Data Protection Board of India.
Cookies and storage
No advertising or tracking cookies. The app keeps your sign-in and language choice in your browser so you stay signed in.
Children
BaasDesk is for businesses. Workers under 18 cannot be added.
Grievance officer
Anish Ayyappan, BaasDesk — anppakbr@yahoo.com, +91 7639870763. We acknowledge complaints within [48 hours] and resolve them within [30] days.
Changes
We will post changes here and tell account owners by email before important changes take effect.