Privacy Policy

1. Scope

This policy covers two roles. On duohr.com (this website), Impacteers Technologies Pvt Ltd (“DuoHR”, “we”) is the data controller for visitor, demo-request, and signup information. Inside the DuoHR HRMS product (app.duohr.com), we act as a data processor: employee, attendance, leave, and payroll data belongs to the tenant organisation that uploaded it, and we process it on that organisation's instructions.

2. Information we collect

• Website visitors: pages viewed and referrer, via Google Analytics when configured, with IP addresses anonymised.
• Demo requests: name, work email, company name, phone number, industry, and company size, submitted through the demo form.
• Signup / trial workspace creation: company name, industry, country, employee count range, selected plan and modules, and the admin's name, work email, and password (stored as a salted hash, never in plain text).
• Billing: subscription plan, billing cycle, and invoice history. Card and UPI details are captured and processed directly by Razorpay; DuoHR does not receive or store full card numbers.
• Tenant HRMS data (processor role): whatever the customer organisation enters into its workspace — employee profiles, attendance and leave records, payroll and statutory data, documents, and support tickets.

3. How we use it

Website and signup data is used to respond to enquiries, provision trial and paid workspaces, send account and billing notifications, and improve the product and website. Tenant HRMS data is used only to provide the HRMS service to that tenant, including features the tenant enables (for example, AI-assisted analytics or letter drafting) — never to train models for other customers and never sold or shared with third parties for their own marketing.

4. Legal basis and DPDP Act, 2023

For users and customers in India, we process personal data under the Digital Personal Data Protection Act, 2023, relying on consent (for demo requests and marketing communications) and contractual necessity (for signup, billing, and providing the HRMS service). Tenant admins act as the data fiduciary for the employee data they load into their workspace; DuoHR acts as a data processor on their behalf under the subscription agreement.

5. Storage, isolation, and retention

Every tenant's data is logically isolated by a tenant identifier enforced at the database layer, so one organisation can never query or see another's records. Records are soft-deleted (marked inactive) rather than immediately purged, which lets an admin recover an accidental deletion; deleted records are excluded from the product and from tenant-facing views. Trial workspace data follows the retention window described in our Refund & Cancellation Policy.

6. Sub-processors

We use a small number of sub-processors to run the service: cloud infrastructure for hosting and backups, Razorpay for payment processing, and — only for tenants that enable AI features — a language-model provider to generate assistance such as summaries or letter drafts. Sub-processors are bound by confidentiality and data-protection obligations and do not use tenant HR data for their own purposes.

7. Your rights

You can ask to access, correct, or delete the personal data we hold about you as a website visitor or signup contact by emailing privacy@duohr.com. If your data was entered into a DuoHR workspace by your employer, please contact that organisation's HR admin first, since they control that data; we will support their request as the processor.

8. Cookies

The website uses essential cookies to remember your cookie-consent choice and, where you accept analytics cookies, Google Analytics cookies to understand aggregate site usage. We do not use third-party advertising cookies.

9. Changes to this policy

We may update this policy as the product or our sub-processors change. Material changes will be posted here with an updated effective date; where required by law, we will also notify tenant admins directly.