3. How we use your information

• Provide, maintain, and improve Saptta HRMS, Accounts, and Mobile products
• Process payroll, attendance, GST, and statutory compliance on your instructions
• Authenticate users, prevent fraud, and enforce security controls
• Send service announcements, billing notices, and support responses
• Analyse aggregated usage to improve performance and user experience
• Comply with legal obligations under Indian law

4. Legal basis & your rights

We process data based on contract performance (delivering subscribed services), legitimate interests (security, product improvement), consent (marketing cookies and optional communications), and legal compliance.

Depending on applicable law, you may have rights to access, correct, delete, restrict, or port your personal data, and to withdraw consent where processing is consent-based.

Organisation admins control employee data in Saptta; employees should contact their employer first. You may also contact us at privacy@saptta.com.

5. Sharing & subprocessors

We do not sell personal information. We share data only with trusted service providers who help us operate Saptta (hosting, email, payment gateways, analytics where permitted), under contractual confidentiality and security obligations.

We may disclose information if required by law, court order, or to protect rights, safety, and integrity of our platform.

• Cloud infrastructure providers (India or approved regions)
• Payment processors (e.g. Razorpay) for subscriptions
• Email and notification services
• Biometric device integrations (e.g. ZKTeco) when you enable them

6. Data retention

We retain account and billing records for as long as your subscription is active and for a reasonable period thereafter as required for tax, audit, and legal purposes.

Customer-uploaded HR and finance data is retained per your organisation settings and applicable statutory requirements (e.g. payroll records under Indian labour laws).

Marketing site analytics may be retained in aggregated form after identifiers are removed.

7. Security

We implement technical and organisational measures including encryption in transit (TLS), role-based access control, audit logs, and regular security reviews.

See our Security page for more detail. No method of transmission over the internet is 100% secure; we encourage strong passwords and MFA where available.

8. Cookies & tracking

We use cookies and similar technologies to operate the website, remember preferences, and—only with your consent—understand how visitors use our marketing pages.

9. International transfers

Saptta is built for Indian businesses. Primary data processing is intended within India. If we use infrastructure outside India, we apply appropriate safeguards consistent with applicable regulations.

10. Children

Saptta is a business-to-business platform and is not directed at individuals under 18. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page with an updated "Last updated" date. Material changes may be notified via email or in-product notice.

12. Contact us

Data protection enquiries: privacy@saptta.com

General support: info@saptta.com

Saptta Tech Solutions, India