Privacy Policy

1. Information We Collect

We collect information that translates into three primary categories:

• Personal Identification: Name, professional email, phone number, and physical address provided during organization setup.
• Operational Data: Employee records, payroll history, invoices, bills, tasks, and files processed through the dashboard.
• Technical Data: IP addresses, browser types, and platform interaction logs to ensure security and improve system performance.

2. AI & Data Isolation

Unlike consumer AI tools, Smart Dhandha uses **Isolated Agentic Workflows**. This means:

• Your data stays within your organization's context boundary.
• Our language models process your data in real-time but do not weight or retain it for training global foundation models.
• AI inferences are performed via encrypted channels with enterprise-level metadata protection.

3. How We Use Data

We use your information exclusively to provide the platform services:

• Automating payroll calculations and generating compliance reports.
• Running AI agents to categorize your banking transactions or draft invoices.
• Providing customer support and technical troubleshooting.
• Verifying authorized access and protecting against fraudulent activity.

4. Data Security

We implement enterprise-grade security protocols, including:

• Encryption: All data is encrypted at rest using AES-256 and in transit via TLS 1.3.
• Anonymized Logs: System logs used for debugging are stripped of personally identifiable information where possible.
• Zero-Knowledge Principles: We treat sensitive fields like API keys and passwords with cryptographic hashing (bcrypt/argon2), ensuring even our system administrators cannot read them.

5. Data Sharing & Third Parties

We do not disclose your data to third parties except in the following limited circumstances:

• Service Providers: Targeted tools that enable our infrastructure (e.g., Vercel for hosting, AWS for storage), subject to strict confidentiality agreements.
• Legal Obligations: When required by Indian law or valid legal processes (e.g., a court order).
• Explicit Consent: Only when you explicitly authorize an integration with a third-party app via our API.

6. Your Rights

As a user of Smart Dhandha, you have full control over your data:

• Access: You can download and export your organizational data at any time.
• Correction: You can update any information directly through the cockpit.
• Deletion: You can choose to delete your organization and all associated data. We provide a full wipe of your organizational records upon account closure, subject to statutory tax retention requirements in India.

7. Cookies & Tracking

We use minimal cookies necessary for the platform to function, such as session management and security tokens. We do not use third-party advertising trackers on the dashboard.

8. Contact Us

For any privacy-related inquiries, data access requests, or to report a security concern, please reach out to our data protection team: