Privacy Policy
Last updated: TBD
Placeholder. This page will be replaced with a lawyer-reviewed policy before public launch. The final policy will be generated via Termly/iubenda and cover GDPR/DPDP/CCPA requirements specific to handling employee personal data in India and the United States.
What we'll cover
- What data we collect from prospects (this site) vs. tenants (the product)
- Data Controller vs. Data Processor responsibilities — tenants own employee data; AtrisHR processes it on their behalf
- Where data is stored (Mumbai for India tenants, us-east-1 for US tenants)
- Geolocation: captured only at punch events; never continuous
- Subprocessors (AWS, Twilio, Sentry, etc.)
- Employee right to erasure (GDPR Art. 17, DPDP Sec. 12)
- Retention windows for attendance, payroll-adjacent, and audit data
- How to contact us with a data request
Questions before this is finalized: hello@atrishr.com