Privacy notice

JantaHR Cloud is operated by JantaHR. For employee records, your employer is the data fiduciary under the Digital Personal Data Protection Act, 2023 and we process that data on its instructions. For the account details of people who sign up or contact us, we are the data fiduciary.

Account data (name, work email, phone, company), the HR and payroll records your employer enters, usage logs kept for security, and payment details handled by Razorpay (we never see full card numbers).

In India, in Supabase Postgres in the Mumbai region, encrypted at rest and in transit. PAN, Aadhaar and bank account numbers are additionally encrypted field by field with AES-256-GCM.

While your company’s account exists. A cancelled subscription moves the company to the Free plan and keeps its data; to close the account and delete its data, the account owner writes to us and we delete it within 30 days, except invoices, which tax law requires us to keep for eight years. Access logs are kept for one year. Statutory payroll records of employees who have left follow the retention your employer sets under Data protection.

Employees can view, download and request correction or erasure of their data from Privacy in the app; requests are answered within 90 days. Account holders can write to us at the address below. You may complain to the Data Protection Board of India.

If a personal data breach affects your data we will tell you without delay and report to the Data Protection Board within 72 hours, as the DPDP Rules require.