1. Introduction
This Data Policy governs how Dzab Soft Pvt Ltd (“we”, “us”, or “our”) collects, stores, processes, and uses data (“Client Data”) of our business clients and their end-users in connection with our software products, including PresenTrak, attendance and leave management modules, salary slip module, mobile applications, APIs, and web dashboards (collectively, the “Services”).
By engaging our Services, you (the Client) consent to the collection and processing of your data (and your users’ data) as described in this Policy.
2. Scope & Definitions
- Client: The business entity contracting our Services.
- End-User: Employees, contractors or users of the Client for whom the Services are used (e.g., marking attendance, applying leave, viewing payslips).
- Client Data: Any data provided by the Client or generated via the Services relating to the Client’s organisation or its End-Users, including personal data, attendance records, leave history, salary details, geo-location check-in/out, device identifiers, user login credentials, etc.
- Processing: Collection, storage, use, disclosure, modification, deletion or other handling of Client Data.
- Personal Data: Any data relating to an identified or identifiable End-User.
- Services: The software, apps, platform and related features delivered by Dzab Soft to the Client (e.g., attendance tracking, geo-fencing, leave management, salary slip viewing).
3. Purposes of Data Processing
- To provide and operate the Services as configured by the Client.
- To maintain, secure, and improve the Services (e.g., analytics, error monitoring).
- To comply with applicable laws or regulations (e.g., taxation, labour audits).
- To communicate with the Client or End-Users about the Services.
- To perform anonymised analyses for product improvement.
4. Types of Data Collected
- Client identity & contact details.
- End-User details (e.g., employee name, ID, department).
- Attendance data (timestamps, geo-location if enabled).
- Leave records and balances.
- Salary & compensation details (salary slabs, deductions, payslips).
- Shift & roster information.
- Device and technical data (IP, browser, logs).
- Usage and performance data.
5. Legal Basis & Client Obligations
- The Client acts as Data Controller; Dzab Soft acts as Data Processor.
- The Client must secure lawful basis and consent where required.
- Data input must comply with local and international laws.
- Geo-fencing and tracking must be properly disclosed to End-Users.
6. Storage, Retention & Deletion
Client Data is stored during the contract term and deleted or anonymised thereafter unless legally required to retain. Clients may export their data before termination.
7. Security Measures
- Encryption (TLS) for data in transit and at rest.
- Role-based access and authentication.
- Regular monitoring, patching, and backups.
- Security audits and disaster recovery systems.
Clients must also ensure secure handling of user credentials and devices.
8. Data Transfers & Hosting
Data is hosted in India (or other notified regions). Cross-border transfers, if any, are subject to safeguards such as standard contractual clauses or local law compliance.
9. Sub-processors
We may engage vetted third-party providers (e.g., hosting, analytics). Sub-processors are bound by data-protection obligations equivalent to this Policy.
10. Access, Correction & Deletion
- Clients and End-Users may request access, correction, or deletion.
- Requests by End-Users should be routed via the Client.
- We assist Clients to the extent contractually agreed.
11. Data Breach Notification
In the event of a confirmed data breach, we will promptly notify the Client with relevant details and assist in meeting legal obligations.
12. Audit & Compliance
- Clients may request documentation or reports on our practices.
- We may undergo periodic audits to maintain compliance.
- Clients remain responsible for their own regulatory compliance.
13. Confidentiality & Proprietary Rights
All Client Data remains the property of the Client. We treat it as confidential and will not use or share it for commercial purposes without authorisation, except in anonymised form.
14. Anonymised & Aggregated Data
We may derive anonymised insights (e.g., usage statistics) for internal improvement, ensuring no Client or End-User is identifiable.
15. Changes to this Policy
We may update this Policy as required. Material updates will be communicated to Clients, who may terminate Services if they do not accept changes.
16. Contact & Governance
Dzab Soft Pvt Ltd
Office No. 135-136-137, 1st Floor, ARG North Avenue, Opp Krishi Mandi, Sikar Road, VKI, Jaipur-302039, Rajasthan, India.
Email: support@presentrak.com
Phone: +91-9784798976
Notes & Recommendations
- Ensure employee consent for geo-fencing/location tracking.
- Restrict access to salary data; maintain audit logs.
- Cross-border clients should assess additional compliance (GDPR, UK-GDPR, etc.).
- Define your data retention schedule per statutory requirements.
- Include a link to this policy in employee onboarding or HR materials.