Privacy Policy

Your employer or organisation (the "Company") decides what is put into EtheronOS, including attendance and location records about its people. For that data the Company decides why and how it is used, and we process it on the Company’s behalf to provide the service.

For your account itself (sign-in, security, billing) we decide how data is used.

• Account: your name, email address and a securely hashed password. If you add a passkey, its public key (never your fingerprint or face).
• Workspace content: tasks, comments, chat messages, files and voice notes, leave requests and supporting documents, and the categories, routines and settings your Company creates.
• Attendance: check-in and check-out times and, when you check in or out, your device’s location coordinates and whether the check was confirmed with your passkey. Location is read only at that moment, never in the background.
• Technical data: IP address and browser details used to secure sessions and detect abuse, push-notification tokens for devices you enable, and server logs.
• Billing: for Company owners, subscription status and invoices. Card and UPI details are handled by Razorpay and never reach our servers.
• Messages you send us, for example through the contact form.

• to provide and secure the service and show the right data to the right people;
• to send notifications, reminders and service emails (invitations, password resets, receipts);
• to take payments and prevent fraud and abuse;
• to fix problems and improve the product;
• to meet legal obligations.

We do not sell personal data and we do not use it for advertising or for building advertising profiles.

By using EtheronOS you agree to this processing. Companies are responsible for telling their Members what is collected about them (for example attendance and location) and for having a lawful basis to do so. If you have questions about what your employer does with your data, ask them first.

Within a Company, visibility follows roles: Members see their own data and shared work; Admins and Owners can also see attendance, leave and team records, as described in the product. Leave documents are visible only to the requester and Admins.

Each Company’s data is kept separate from every other Company’s.

We never give one Company access to another’s data. A small number of our staff may access a Company’s data only to provide support or fix a problem, and such access is logged.

Only the service providers we need to run EtheronOS:

• Razorpay, to process payments;
• our hosting and network providers, including Cloudflare for delivery and protection;
• browser and device push services (such as those of Google, Apple and Microsoft) to deliver notifications you opt in to.

We may also disclose data if the law requires it or to protect people’s safety or our rights.

We use one essential cookie that keeps you signed in. We do not use advertising or cross-site tracking cookies.

We keep your data while your account or Company is active. When an Owner deletes a Company, its data and uploaded files are deleted immediately from our live systems and disappear from backups within the normal backup cycle. When you delete your account we remove your sign-in details and passkeys; work you did remains in your Company under your name so that its records stay intact.

Billing records are kept as long as Indian tax and accounting law requires.

We protect data with encrypted connections, hashed passwords, strict separation between Companies, rate limiting on sensitive actions and access controls. No system is perfectly secure, so if we ever learn of a breach affecting you we will tell you and the authorities as the law requires.

• access the personal data we hold about you;
• correct or update it (most of it you can edit in Settings);
• ask us to erase it, or withdraw your consent;
• export your Company’s data (Owners), and delete the Company;
• nominate someone to exercise your rights, and make a complaint.

To use these rights, or to raise a grievance, write to [email protected]. We will respond within a reasonable time and in line with applicable law. You may also complain to the Data Protection Board of India.

EtheronOS is for workplaces and is not intended for anyone under 18. We do not knowingly collect data from children.

If we change this policy in a way that matters to you we will tell you by email or in the product. The date at the top shows when it was last updated.