Privacy Policy

1Who We Are

PrimeHR is a B2B SaaS platform for HRMS, payroll, field force automation, and finance · developed and operated by Techstuff Pvt Ltd, incorporated in India with its registered office in Indore, Madhya Pradesh.

Techstuff Pvt Ltd is the data controller for data collected via this website. For employee data processed inside the app, your employer is the controller and PrimeHR acts as the data processor.

2Information We Collect

2.1 Account & Organisation Data

• Administrator name, work email, phone number, designation
• Company name, GST number, PAN, registered address, industry
• Billing details · invoiced to the organisation, not individuals

2.2 Employee Data

• Name, gender, date of birth, photograph, Aadhaar (masked), PAN, bank account details
• Salary components, statutory deductions (PF, ESI, TDS), payslips
• Attendance logs, leave balances, geo-location check-ins
• Reimbursement claims, field-force GPS tracks, visit photos, collection records

2.3 Usage & Technical Data

• IP address, browser type, operating system
• Pages visited, session duration, feature interactions
• Error logs, API call metadata (no payload content)

3How We Use Your Information

• Service delivery · payroll processing, attendance tracking, invoice generation
• Account management · onboarding, billing, authentication, access control
• Customer support · responding to tickets and troubleshooting
• Product improvement · analysing anonymised usage patterns
• Compliance · meeting statutory obligations under Indian labour & tax law
• Security · fraud detection, abuse prevention, audit logs
• Marketing (only with consent) · newsletters, product updates

4Legal Basis for Processing

• Contract performance · processing necessary to provide the service you subscribed to
• Legitimate interests · security monitoring, fraud prevention, product analytics
• Legal obligation · compliance with PF, ESI, TDS, and other statutory requirements
• Consent · marketing communications (you may withdraw at any time)

5Data Sharing & Third Parties

We share data only to the extent necessary to operate our platform, with the following sub-processors:

• Google Firebase / GCP · application hosting, database (Firestore), file storage, authentication — Mumbai (asia-south1), India
• MongoDB Atlas (AWS) · application database — AWS Mumbai (ap-south-1), India
• Twilio SendGrid · transactional emails (payslips, OTPs, notifications) — processed in the United States
• Razorpay / payment gateway · subscription billing (card data never touches our servers)
• Government portals · EPFO, ESIC, TRACES for statutory filing at your direction
• Analytics tools · anonymised, aggregated usage data only

All sub-processors are bound by confidentiality obligations and data-processing agreements. A full, current sub-processor list is maintained in our Data Processing Agreement.

6Data Retention

• Active subscriptions · retained for the duration of the subscription
• After cancellation · 60 days to allow export, then permanently deleted
• Payroll & statutory records · 7 years as required by Indian labour law
• Support tickets · 3 years
• Marketing enquiries · 2 years or until consent is withdrawn

Request early deletion of non-statutory data by contacting support@primehr.in.

7Data Security

PrimeHR implements controls including:

• TLS enforced on all client-server and service-to-service communication; encryption at rest (Google-managed for Firestore, AWS-managed for MongoDB Atlas)
• Role-based access control (RBAC) via our Roles & Permissions module, with module- and record-level scoping
• Centralized audit logging of user actions across modules
• Logical segregation of each customer's data within our multi-tenant platform
• Weekly data backups, retained for 3 months
• Internal security review process, with third-party penetration testing planned
• 24-hour breach notification to affected customers

See our Security page for a detailed infrastructure overview.

8Your Rights

• Access · obtain a copy of the personal data we hold
• Correction · request rectification of inaccurate data
• Deletion · request erasure (subject to legal obligations)
• Portability · receive your data in a machine-readable format
• Objection · object to processing based on legitimate interests
• Withdrawal of consent · opt out of marketing at any time

For employee data contact your HR admin. For account-level data email support@primehr.in. We respond within 30 days.

9Cookies & Tracking

• Essential cookies · session management, CSRF protection (cannot be disabled)
• Analytics cookies · anonymised page view statistics
• Preference cookies · remembering UI settings

The PrimeHR application (app.primehr.in) uses strictly necessary cookies only. We do not use third-party advertising cookies. See our full Cookie Policy for details and to manage your preferences.

10Children's Privacy

PrimeHR is a B2B platform intended solely for organisations and their adult employees. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor's data has been submitted, we will delete it promptly.

11International Transfers

Customer and employee data is hosted in Mumbai, India — via Google Firebase/GCP (asia-south1) and MongoDB Atlas on AWS (ap-south-1). One sub-processor, Twilio SendGrid, processes transactional email (payslip notifications, OTPs) in the United States — this is the only sub-processor that routinely handles personal data outside India. We do not transfer personal data to any other country without your consent. Remote staff access is limited, logged, and governed by strict internal policies.

12Changes to This Policy

We may update this Privacy Policy to reflect changes in practices or applicable law. We will notify account administrators by email at least 14 days before material changes take effect, and update the date above. Continued use after the effective date constitutes acceptance.

13Contact Us

• Email: support@primehr.in
• Postal: Techstuff Pvt Ltd, Indore, Madhya Pradesh, India
• Response time: Within 30 calendar days