Privacy Policy

This Privacy Policy describes how Omnivoo Inc. (a Delaware, USA corporation) and its Indian subsidiary Dynalize Technologies Pvt Ltd (collectively, "Omnivoo," "we," "us," or "our") collect, use, share, and protect your personal information when you use our platform at omnivoo.com and app.omnivoo.com (the "Platform"). Omnivoo is an AI-Native Employer of Record (EOR) platform for India, providing employee onboarding, payroll processing, contract management, compliance, and international payout services.

By using our Platform, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Platform.

1. Information We Collect

Personal Information

• Full name, email address, phone number, and mailing address
• Date of birth, gender, and nationality
• Government-issued identification numbers (Aadhaar, PAN, passport)
• Profile photos and digital signatures
• Login credentials and authentication data

Employment Data

• Employment contracts, offer letters, and engagement terms
• Job title, department, work location, and reporting structure
• Compensation details including salary, bonuses, and benefits
• Leave records, attendance data, and timesheet submissions
• Performance records and employment history
• Emergency contact information and nominee details

Financial Data

• Bank account details for salary disbursement
• Tax-related information (PAN, Form 16, investment declarations for TDS)
• Provident Fund (PF) and Employee State Insurance (ESI) account details
• Payment transaction history and payslip records
• Billing information for employer accounts (processed via Stripe and Cashfree)

Usage Data

• IP address, browser type, device information, and operating system
• Pages visited, features used, and time spent on the Platform
• Referral URLs and interaction patterns
• Error logs and performance data

2. How We Use Your Information

We use the information we collect for the following purposes:

• EOR Services: To act as the Employer of Record in India, including hiring, onboarding, and managing employees on behalf of client companies
• Payroll Processing: To calculate and disburse salaries, including statutory deductions for Provident Fund (PF), Employee State Insurance (ESI), Tax Deducted at Source (TDS), and Professional Tax
• Compliance: To file statutory returns, generate compliance reports, and ensure adherence to Indian labour laws across all 28 states
• Contract Management: To create, manage, and store employment contracts and engagement agreements
• Benefits Administration: To administer employee benefits programs including insurance, leave policies, and other entitlements
• Communications: To send transactional emails (payslips, contract notifications, compliance updates) and, with your consent, marketing communications about our services
• Platform Improvement: To analyze usage patterns, fix bugs, and improve the Platform's features and performance
• Legal Obligations: To comply with applicable laws, regulations, and legal processes
• Security: To detect, prevent, and respond to fraud, abuse, and security incidents

3. How We Share Your Information

We do not sell your personal information. We share your data only in the following circumstances:

• With Employers: We share employee data with client companies as necessary to fulfil our EOR obligations. This includes employment records, payroll summaries, and compliance documentation
• Government Authorities: We submit data to Indian government bodies as required by law, including EPFO (for Provident Fund), ESIC (for ESI), the Income Tax Department (for TDS filings), and state-level Professional Tax authorities
• Payment Processors: We use Stripe for international payments and ACH transactions, and Cashfree for India domestic payments. These processors receive only the financial data necessary to execute transactions
• Cloud Service Providers: We use Amazon Web Services (AWS) and Google Cloud for infrastructure, storage, email delivery, and other operational services. These providers process data on our behalf under strict contractual obligations
• Professional Advisors: We may share information with auditors, legal counsel, and consultants as needed for business operations and compliance
• Legal Requirements: We may disclose information when required by law, subpoena, court order, or governmental regulation
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change

4. Data Security

We implement industry-standard security measures to protect your personal information:

• All data in transit is encrypted using TLS 1.2 or higher
• Data at rest is encrypted using AES-256 encryption
• Authentication is managed through secure HTTP-only cookies with JWT tokens
• Access to personal data is restricted on a need-to-know basis with role-based access controls
• Support staff access to user accounts is read-only, requires a documented reason, and is fully audited
• We conduct regular security assessments and vulnerability testing
• Our infrastructure is hosted on SOC 2-compliant cloud providers

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining the highest practical standards.

5. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations:

• Active Accounts: Data is retained for the duration of the employment relationship or service agreement
• Post-Termination: Employment records, payroll data, and tax filings are retained for a minimum of 8 years after the end of the employment relationship, as required by Indian labour and tax laws
• Financial Records: Transaction records and invoices are retained for a minimum of 8 years in accordance with the Indian Companies Act and Income Tax Act
• Usage Data: Anonymized usage data may be retained indefinitely for analytics purposes
• Account Deletion: Upon request, we will delete or anonymize your personal data, except where retention is required by law

6. International Data Transfers

Omnivoo operates across the United States and India. Your personal information may be transferred to and processed in countries other than your country of residence:

• US-India Transfers: Data flows between Omnivoo Inc. (Delaware, USA) and Dynalize Technologies Pvt Ltd (India) as necessary to deliver our services
• Safeguards: We implement appropriate contractual and organizational safeguards to protect your data during international transfers, including standard contractual clauses and data processing agreements
• Indian Data Protection: We comply with the Digital Personal Data Protection Act, 2023 (DPDPA) and related regulations for data processed in India
• US Data Protection: For data processed in the United States, we comply with applicable federal and state privacy laws

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete personal information
• Deletion: Request deletion of your personal information, subject to legal retention requirements
• Portability: Request your data in a structured, commonly used, machine-readable format
• Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing
• Grievance Redressal: Under the DPDPA, you have the right to file a complaint with the Data Protection Board of India

To exercise any of these rights, please contact us at contact@omnivoo.com. We will respond to your request within 30 days.

8. Cookies and Tracking

We use cookies and similar tracking technologies to operate and improve our Platform:

• Essential Cookies: Required for authentication, security, and core Platform functionality. These cannot be disabled
• Analytics Cookies: Help us understand how users interact with the Platform so we can improve the experience
• Preference Cookies: Remember your settings and preferences across sessions

You can control cookies through your browser settings. Disabling essential cookies may prevent you from using certain features of the Platform.

9. Children's Privacy

Our Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information promptly. If you believe we have inadvertently collected information from a child, please contact us at contact@omnivoo.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we may also notify you via email or through a notice on the Platform. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: contact@omnivoo.com
• US Entity: Omnivoo Inc., Delaware, United States
• India Entity: Dynalize Technologies Pvt Ltd, India
• Website: omnivoo.com