This privacy policy ("policy") will help you understand how Nhancesmart ("us", "we", "our") uses and protects the data you provide to us when you visit and use our website www.Nhancesmart.com ("website", "service").

We reserve the right to change this policy at any given time, of which you will be promptly updated. If you want to make sure that you are up to date with the latest changes, we advise you to frequently visit this page.

What User Data We Collect

When you visit the website, we may collect the following data:

• Your IP address.
• Your contact information and email address.
• Other information such as interests and preferences.
• Data profile regarding your online behavior on our website.
• To provide regular updates about Nhancesmart.com
• For receiving feedback and recommendations

Why We Collect Your Data

We are collecting your data for several reasons:

• To better understand your needs.
• To improve our services and products.
• To send you promotional emails containing the information we think you will find interesting.
• To contact you to fill out surveys and participate in other types of market research.
• To customize our website according to your online behaviour and personal preferences.

Safeguarding and Securing the Data

Nhancesmart is committed to securing your data and keeping it confidential. Nhancesmart has done all in its power to prevent data theft, unauthorized access, and disclosure by implementing the latest technologies and software, which help us safeguard all the information we collect online.

Security of Your Information

Although we take appropriate measures to safeguard against unauthorized disclosures of personally identifiable information, we cannot guarantee that personally identifiable information in our possession will never be disclosed in a manner that is inconsistent with this Privacy Policy. Unauthorized entry or use, hardware or software failure, and other factors may compromise the security of user information at any time.

We otherwise store all our information, including your IP address information, using industry standard techniques. We do not guarantee or warrant that such techniques will prevent unauthorized access to information about you that we store, Personal Information or otherwise.

Information Disclosed for Our Protection and the Protection of Others

We also reserve the right to access, read, preserve and disclose any information that we reasonably believe is necessary to (i) satisfy any applicable law, regulation, legal process, or governmental request (ii) enforce this Privacy Policy, including investigation of potential violations hereof (iii) detect, prevent, or otherwise address fraud, security, or technical issues, (iv) respond to user support requests, or (v) protect our rights, property, or safety, our users and the public. This includes exchanging information with other companies and organizations for fraud protection and spam/ malware prevention.

Cookies and Our Cookie Policy

Cookies are pieces of text that may be provided to your computer through your web browser when you access a website. We use cookies to enable our servers to recognize your web browser and tell us how and when you visit the Site and otherwise use the Services through the internet.

Our cookies do not, by themselves, contain Personal Information, and we do not combine the general information collected through cookies with your Personal Information to tell us who you are.

Your web browser places cookies on your hard drive for record-keeping purposes and sometimes to track your information. You may choose to set their web browser to refuse cookies, or to alert you when cookies are being sent. If you do so, note that some parts of the Site may not function properly.

Once you agree to allow our website to use cookies, you also agree to use the data it collects regarding your online behavior (analyze web traffic, web pages you spend the most time on, and websites you visit).

The data we collect by using cookies is used to customize our website to your needs. After we use the data for statistical analysis, the data is completely removed from our systems.

Please note that cookies don't allow us to gain control of your computer in any way. They are strictly used to monitor which pages you find useful and which you do not so that we can provide a better experience for you.

If you want to disable cookies, you can do it by accessing the settings of your internet browser. (Provide links for cookie settings for major internet browsers).

Links to Other Websites

Our website contains links that lead to other websites. If you click on these links Nhancesmart shall not be held responsible for your data and privacy protection. Visiting those websites is not governed by this privacy policy agreement. Make sure to read the privacy policy documentation of the website you go to from our website.

Restricting the Collection of your Personal Data

At some point, you might wish to restrict the use and collection of your personal data. You can achieve this by doing the following:

When you are filling the forms on the website, make sure to check if there is a box which you can leave unchecked, if you don't want to disclose your personal information.

If you have already agreed to share your information with us, feel free to contact us via email and we will be more than happy to change this for you.

Nhancesmart will not lease, sell or distribute your personal information to any third parties, unless we have your permission. We might do so if the law forces us. Your personal information will be used when we need to send you promotional materials if you agree to this privacy policy.

Changes to this Privacy Policy

This policy will be continuously assessed against new technologies, business practices and our customer’s needs. We may change this policy from time to time by updating this page.

You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from 5-09-2022.

Third-Party Service Providers and Data Sharing

1. Amazon Web Services (AWS)

To securely host our software application, all associated data, and infrastructure. AWS provides the necessary technical environment for the availability and security of our services.

2. Payment Gateway

To process payments for our services, manage billing, and conduct related financial transactions.

3. Google Analytics,

To collect and analyze data on user behavior to understand and improve the performance, features, and user experience of our software.

4. CRM/Support Platform

To manage customer interactions, provide support, and process user inquiries efficiently.

Note : We may use other third-party vendors for specific functions (such as email delivery, SMS services, or specialized integrations), and we maintain a list of all data processors and sub-processors with whom we share data as part of our internal compliance records. We will not share your Personal Data with third parties for their direct marketing purposes without your explicit consent.

Grievance Redressal and Contact Information

In compliance with the provisions of the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, we have appointed a Grievance Officer to address any discrepancies and grievances you may have regarding the processing of your personal data.

We use the information we collect for various business and commercial purposes, based on the principle of 'Consent' or 'Legitimate Use' as defined under India’s Digital Personal Data Protection (DPDP) Act, 2023.

1. To Provide, Maintain, and Secure the Core Service

This is the primary purpose of data processing, necessary for the performance of our contract with your organization.

• Account Management: To create, maintain, and service your user accounts, and provide customer support.
• Service Delivery: To execute the softwares core functions, such as processing payroll, managing employee records, tracking compliance tasks, and generating reports.
• Security and Fraud Prevention: To protect our services and users by detecting and preventing fraud, unauthorized access, and other malicious activities.
• Compliance with Legal Obligations: To comply with any applicable laws, court orders, or governmental regulations (e.g., maintaining financial records for tax purposes)..

2. For Product Improvement and Analysis

We use data to ensure our software remains reliable, secure, and meets user needs.

• Analytics and Research: To monitor and analyze usage and activity trends, measure the success of new features, and understand which parts of the service are most effective.
• Troubleshooting: To diagnose and fix technological problems, and to improve the speed and performance of our applications and infrastructure.

3. For Communication, Marketing, and Events

This processing requires your specific consent, which you have the right to withdraw at any time.

• Direct Communication: To send you service announcements, security alerts, and administrative messages.
• Marketing & Promotional Content (Consent-Based): To send you newsletters, special offers, or information about new features, products, or services that we believe may be of interest to you, based on your stated preferences or website activity.
• Event Management: To register you for events (like webinars or conferences), share event-related communications, and follow up afterward.
• Targeted Advertising (Consent-Based): To measure the effectiveness of our advertising campaigns and to deliver relevant advertisements to you on our platform or third-party websites, based on the Marketing & Event Data collected (via cookies and other trackers).

Disclosure and Sharing of Your Personal Data

We, as the Data Processor (or Data Fiduciary in certain contexts) for our clients (your employers, the primary Data Fiduciaries), are committed to protecting the personal data entrusted to us. We will only disclose or share your Personal Data and Sensitive Personal Data or Information (SPDI) as described in this section, and strictly in accordance with your employer's instructions, your consent, and applicable Indian laws, including the DPDP Act.

1. Disclosures to Data Processors and Service Providers

We engage trusted third-party companies and individuals to perform specific functions necessary for the operation and provision of the Nhancesmart platform and related services ("Data Processors").

• Purpose of Disclosure: To facilitate the provision of our HR management services, including, but not limited to:
• Cloud hosting and infrastructure services (for data storage and operation).
• Email and communication services (for notifications and alerts).
• Security and data analytics services (for improving service functionality and security).
• Analytics and performance monitoring services.
• Data Shared: Only the Personal Data or SPDI strictly necessary for the Data Processor to perform their contracted function (e.g., your name and email for a notification service).
• Safeguards: Our contracts with these Data Processors require them to:
• Process your data solely for the purposes for which we hired them.
• Implement and maintain reasonable security safeguards in line with Indian law.
• Adhere to our data protection and confidentiality standards.

2. Disclosures to Your Employer/Client (The Data Fiduciary)

As our primary client and your employer, they are the main Data Fiduciary responsible for determining the purpose and means of processing your data.

• Purpose of Disclosure: Your data is continuously made available to and shared with your employer as part of the normal operation of the Nhancesmart HR platform. This includes, for example, making your leave applications, performance reviews, payroll information, and personal details accessible to your employer's authorised HR and management personnel.

3. Disclosures for Business Operations

We may share your information with Affiliates, Group Companies, or Third Parties for legitimate business interests, provided such sharing complies with the purposes notified to you and the DPDP Act.

• For Corporate Transactions: If Nhancesmart is involved in a merger, acquisition, sale of assets, or other change of ownership, your Personal Data may be transferred to the new entity. We will notify you via email and/or a prominent notice on our website of any such change in ownership or control.
• For Legal and Regulatory Compliance: We may disclose your data where we believe it is necessary to:
• Comply with a legal obligation, such as responding to a subpoena, court order, or other lawful governmental request (e.g., tax or law enforcement authorities).
• Protect our rights, property, or safety, or that of our clients or others.
• Investigate fraud, security issues, or enforce our policies and contracts.

4. Disclosures with Your Consent

We may disclose your Personal Data for any other purpose with your explicit, specific, informed, and unambiguous consent (clear affirmative action), as required by the DPDP Act.