Privacy Policy

1. Who We Are

OWorkly Private Limited is a workforce readiness and intelligence platform incorporated in India, with registered offices in Pune, Maharashtra. We provide enterprise software solutions for onboarding, attendance, compliance, payroll, and training management for blue-collar and contractor workforces.

For privacy-related enquiries, you may contact our designated Data Protection Officer at hello@oworkly.com.

2. Information We Collect

We collect information in the following categories:

• Enquiry and contact data: When you submit a contact or demo-request form, we collect your name, work email address, company name, phone number, industry, and message content.
• Account and platform data: If you are an enterprise client or an authorised administrator, we collect account credentials, organisational details, and configuration preferences.
• Worker and contractor data (on behalf of clients): OWorkly processes personal data of workers and contractors — including identity documents, biometric records, attendance data, training records, and payroll information — strictly as a data processor acting on the instructions of our enterprise clients (data controllers).
• Usage and analytics data: We collect IP address, browser type, pages visited, session duration, and interaction events through Google Analytics 4 to understand how our website is used and improve it.
• Technical data: Cookies, log files, and similar tracking technologies as described in our Cookie Policy.

3. How We Use Your Information

We use the information we collect to:

• Respond to demo requests and enquiries from prospective clients.
• Provide, operate, and improve the OWorkly platform and associated services.
• Send transactional communications such as account confirmations, onboarding materials, and service updates.
• Send marketing communications where you have given explicit consent or where permitted by applicable law.
• Fulfil our contractual obligations to enterprise clients under the applicable Master Service Agreement or Data Processing Agreement.
• Comply with legal obligations under the Information Technology Act, 2000 (India), the Digital Personal Data Protection Act, 2023 (India), and other applicable regulations.
• Detect, prevent, and address security incidents, fraud, or unauthorised access.

4. Legal Basis for Processing

Depending on how you interact with us, we rely on the following legal bases:

• Contractual necessity: Processing required to fulfil our agreement with enterprise clients.
• Legitimate interests: Responding to enquiries, analysing website usage, and improving our services.
• Consent: Marketing communications and non-essential cookies, where you have opted in.
• Legal obligation: Compliance with applicable Indian and international laws.

5. Information Sharing

We do not sell your personal information. We share data only in the following circumstances:

• Service providers: Trusted third-party vendors who assist us in operating our website and platform (e.g., cloud infrastructure on Amazon Web Services, email delivery via EmailJS, analytics via Google Analytics 4). These parties process data only on our instructions and under contractual obligations of confidentiality.
• Enterprise clients: Where OWorkly acts as data processor, information is shared with or made accessible to the relevant enterprise client as data controller.
• Legal requirements: We may disclose information where required by law, court order, or government authority.
• Business transfers: In the event of a merger, acquisition, or sale of assets, personal data may transfer to the acquiring entity subject to equivalent privacy protections.

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law. Specifically:

• Enquiry and contact data: retained for up to 24 months from the date of last interaction, unless an ongoing commercial relationship exists.
• Platform and client data: retained for the duration of the client contract plus any period required by applicable labour and compliance regulations.
• Analytics and log data: retained for a maximum of 26 months in Google Analytics (configurable by your administrator).

7. Data Security

OWorkly employs industry-standard technical and organisational security measures:

• Encryption in transit (HTTPS/TLS) and at rest for all sensitive data.
• Role-based access control and multi-factor authentication.
• Cloud-native architecture on AWS with VPC isolation.
• Regular Vulnerability Assessment and Penetration Testing (VAPT).
• Certifications: SOC 3 and ISO 27001 (see our Trust & Security page for current certificates).

While we take all reasonable precautions, no transmission over the internet is 100% secure. You use the platform at your own risk and should notify us immediately of any suspected security breach.

8. Your Rights

Subject to applicable law, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request erasure of your personal data where there is no overriding legal basis for continued processing.
• Objection / Restriction: Object to or request restriction of certain processing activities.
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at hello@oworkly.com. We will respond within 30 days.

9. International Data Transfers

OWorkly is primarily operated from India. If you access our platform from outside India, your data may be transferred to, and processed in, India and other countries where our service providers operate (including the United States, via AWS). We ensure appropriate safeguards are in place for all international transfers.

10. Children’s Privacy

OWorkly is an enterprise platform and is not directed at or intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified to enterprise clients via email and displayed prominently on this page. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of OWorkly after changes are published constitutes acceptance of the revised policy.

12. Contact Us