Data Protection

MyWorkara is built to help Indian employers meet their obligations under the Digital Personal Data Protection (DPDP) Act 2023. We process personal data lawfully, for clear purposes, and only as needed to provide the service.

For the employee data in your workspace, your organisation is the Data Fiduciary (it decides why and how the data is used) and MyWorkara acts as a Data Processor, handling that data on your instructions. For your own account data (as the person signing up), we are the fiduciary.

Depending on which modules you use: employee profile details, contact information, attendance and location check-ins, leave records, payroll and statutory details (PF/ESI/TDS/PT), documents you upload, and recruitment candidate information. We only process what the features you enable require.

Personal data is processed to deliver the HR functions you use — running payroll, tracking attendance, managing leave, and so on. We do not sell personal data, and we do not use it for purposes unrelated to providing the service.

Individuals can request access to, and correction or erasure of, their personal data, and raise grievances. Where your employer is the fiduciary, we support them in honouring these requests; you can also contact us directly and we will route it appropriately.

Data is stored with managed, industry-standard cloud infrastructure. We aim to keep data hosting appropriate for Indian businesses and will keep this page updated as our infrastructure and the DPDP rules evolve.

We retain personal data for as long as your workspace is active or as needed to meet legal and statutory obligations. On account closure, data can be exported and then deleted on request, subject to any records the law requires us to keep.

We rely on a small set of trusted infrastructure providers (for database hosting, application hosting, authentication and transactional email) to run the service. Each is bound to protect the data they process on our behalf.