Version 0.3-draft · Effective 31/07/2026
Effective Date: July 28, 2026
We collect account information, company information, employee records, usage logs, cookies and security data to operate our Services.
For your own account data (name, email, billing) we are the Data Fiduciary.
For data you upload about your employees, you are the Data Fiduciary and we act as your Data Processor, processing only on your documented instructions. You are responsible for having a lawful basis and any consent required from your employees. See the Data Processing Addendum.
Because this is an HR and payroll product, the records are detailed. They may include:
[Lawyer: Aadhaar carries its own regime under the Aadhaar Act beyond DPDP. Confirm whether storing Aadhaar numbers is permissible in this context, what the customer must obtain from each employee, and whether the product's existing consent flag is sufficient evidence. Location and biometric-adjacent processing also carry heightened obligations.]
Customer content is not used to train public AI models.
Only with the subprocessors listed on our Subprocessors page, payment providers, or where legally required. We do not sell personal data.
Customer data remains available during the subscription. After termination it is retained for up to 90 days for export, then deleted — subject to statutory retention obligations, which for payroll and PF/ESI records may be longer.
Account and billing records: 8 years, per statutory books requirements. Audit trail: for the life of the account. Backups: 30 days rolling.
Encryption in transit and at rest, row-level isolation between customers, role-based access, audit logging and backups. See our Security Policy.
Subject to applicable law, you may request access, correction, deletion or export of personal data.
If you are an employee of one of our customers, we hold your data on their behalf — please contact your employer first, as they control it. If you cannot resolve it with them, write to us and we will assist them in responding.
To look into a problem you report, or a fault we detect, a member of our team may sign in to your workspace and see it as one of your own users would. This is for support — never for browsing.
Whenever it happens:
[Lawyer: please confirm this is sufficient disclosure for a Data Processor under the DPDP Act, and whether consent is required for each instance rather than notice plus an audit record.]
Ravi Kumar Katta · admin@dlqtechnos.com Acknowledged within 24 hours, resolved within 15 days.
Contact: admin@dlqtechnos.com