Privacy Policy

• Identity and contact details: name, work and personal email, phone number, employee code, designation, department, location, and date of joining.
• A profile photo, if you choose to upload one.
• Attendance records: check-in/check-out timestamps, and the device time zone used to compute your working day.
• Leave requests and balances, and any reason or note you attach to a request.
• Expense claims: category, amount, date, merchant, an optional description, and a photo of the receipt if you attach one.
• Payslip and salary records generated by the payroll module.
• A push-notification token from Firebase Cloud Messaging, so the Android app can notify you about approvals or decisions on your requests.
• Basic technical data any app or website receives automatically: IP address, browser or device type, and request timestamps, captured in server logs.

We use this information to run the HR functions the Service exists for: recording attendance, processing leave and expense requests, routing approvals to the right manager, generating payslips, and notifying you when something you submitted is decided. We do not use it for advertising, and we do not sell it.

Access is role-based. You can always see your own records. Your manager and the relevant approvers (HR, finance, or payroll, depending on the request) can see what they need to approve or process. Nobody outside ArcGX TechLabs is given access to employee data, except the service providers below, each acting only on our instructions.

• Zoho: for signing in (we do not store your Zoho password).
• Firebase Cloud Messaging (Google): to deliver push notifications to the Android app.
• Cloudflare R2: to store uploaded files such as receipts and profile photos.
• ZeptoMail (Zoho): to send transactional emails such as approval requests and payslip notices.
• Neon (PostgreSQL hosting): our database provider.

We keep employment-related records (attendance, leave, expense, and payroll data) for as long as your employment continues and for the period afterward required by Indian labour and tax law. Device push tokens are removed as soon as you sign out. Uploaded photos and receipts are removed if you delete the record they belong to, where the Service allows that.

Data is encrypted in transit (HTTPS/TLS) and at rest in our database and file storage. Access within the Service is controlled by the role-based permissions described above, and administrative actions are logged.

You can view and, for most fields, correct your own profile information from within the Service. For anything you cannot change yourself, or to request a copy or deletion of your data, contact HR using the details below.

If you apply for a role through our careers site, we collect what you enter on the form: your name, email address, phone number (optional), your resume as a PDF, an optional note, and your answers to any screening questions. Your IP address is also used briefly to limit repeated submissions, and Cloudflare Turnstile may check that the application comes from a person.

We use this only to consider you for the role you applied for and for other suitable openings, and to contact you about it. It is seen by the ArcGX TechLabs hiring team and the interviewers involved, and stored with the providers listed above. We do not sell it or use it for advertising. To ask for a copy of your application or to have it deleted, email privacy@arcgx.in.

The Service is for ArcGX TechLabs employees and is not directed at, or knowingly used by, children.

If we make a material change to this policy, we will update the date at the top of this page and, where appropriate, notify employees directly.

Questions about this policy or your data can be sent to your HR representative, or to privacy@arcgx.in.