Plain summary: we collect what we need to run your payroll and nothing else. Your workers' data belongs to you. We do not sell it, and we do not share it with anyone who isn't helping us run RozFlow.
1. Who we are
RozFlow is a product of Apothem IT Solutions LLP (LLPIN ACD-1434), a limited liability partnership registered in India, with its office at Office No. 249, Vision Flora, Pimple Saudagar, Pune 411027. In this policy, "we", "us" and "RozFlow" mean Apothem IT Solutions LLP.
This policy explains what personal data we handle, why, and what you can do about it. It applies to www.rozflow.com and to the RozFlow application.
2. Two kinds of people, two kinds of data
a. You — the contractor who subscribes
When you sign up, trial or contact us, we collect: your name, business name, phone number, email address, billing address, GSTIN if you give one, and your payment records. We collect this because we cannot invoice you or support you without it.
b. Your workers — whose data you enter
You enter data about the people you employ: name, phone number, address, photograph, role, daily wage rate, attendance, advances, kharchi and payout history. You may also upload identity documents.
This data is yours, not ours. For it, you are the Data Fiduciary and we are the Data Processor: we store and process it on your instructions, to run the service you have asked for. We do not use it for our own purposes.
Your responsibility: you must have a lawful basis for entering your workers' personal data, and you must tell them you are doing it. Do not upload identity documents you are not entitled to hold.
3. What we do with it
- Run the service: attendance, wage calculation, advances, payouts, reports.
- Bill you and keep the records the law requires us to keep.
- Support you when you call or write.
- Keep the service secure, and investigate misuse.
- Improve RozFlow — using aggregate, non-identifying usage patterns only.
We do not sell personal data. We do not share it with advertisers. We do not use your workers' data to train anything.
4. Who else sees it
Only service providers who help us run RozFlow, and only as far as they need to:
- Our own team, when you ask us for support and we need to look at your account to help you.
- Cloud hosting, on servers located in India. Our hosting provider stores the data; it does not read it or use it.
- Razorpay, our payment gateway. They handle your card or UPI details — we never see or store them.
- Google Analytics, which tells us how the website is used. It does not receive your workers' data.
That is the complete list. Nobody else.
We may also disclose data where the law compels us to, or to protect our rights or someone's safety. We will tell you if that happens, unless we are forbidden from doing so.
5. Where it lives, and for how long
Your data is stored on servers located in India. We keep it for as long as your account is active. If you close your account, we delete or irreversibly anonymise your data within 30 days, except where we are required by law to retain financial records.
You can ask for an export of your data at any time — the product also lets you export it yourself, in Excel, PDF or CSV.
6. Security
Data is encrypted in transit and at rest. Access is limited to staff who need it to do their job. We review our security practices regularly.
No system is perfectly secure, and we will not pretend otherwise. If a breach affects your data, we will tell you and the relevant authority, promptly and honestly.
7. Your rights
You may ask us to show you the personal data we hold about you, correct it, delete it, or stop processing it. You may withdraw consent where we relied on it. Write to us and we will respond within 30 days.
If a worker whose data you entered asks us to exercise these rights, we will direct them to you, because the data is yours.
8. Cookies
We use cookies that are necessary to keep you logged in and to keep the service secure. We also use Google Analytics to understand how the website is used — which pages people read, and where they leave. We do not use advertising cookies, and we do not sell what Analytics tells us. You can block these cookies in your browser settings without breaking the site.
9. Children
RozFlow is not for anyone under 18, and we do not knowingly collect their data. Do not enter data about child labour into RozFlow.
10. Grievance Officer
As required under Indian law:
Pranav Mankar
Grievance Officer, Apothem IT Solutions LLP
Office No. 249, Vision Flora, Pimple Saudagar, Pune 411027
Email: contact@rozflow.com · Phone: +91 88880 88224
We acknowledge complaints within 24 hours and resolve them within 15 days.
11. Changes
If we change this policy materially, we will tell you by email or in the app before it takes effect.