Privacy Policy

OrgNest Technologies Pvt. Ltd. ("OrgNest", "we", "us") provides HR, payroll, and PSA software to organizations. This policy explains how we handle personal data we collect through our websites, web application, and the OrgNest mobile apps for iOS and Android.

The OrgNest mobile app is an employee self-service tool. Your account is created and managed by your employer, and you sign in with credentials your employer provides. When you use OrgNest as an employer, you are the data controller for your employees' data and OrgNest is the processor.

Account data — name, email, phone, job title, employer.

Usage data — pages and screens visited, features used, and browser information.

Mobile & device data — device model, operating system, app version, and diagnostic logs. On mobile we also collect the specific data described in "Mobile app permissions" below.

Employee data — when you use OrgNest as an employer, you provide personal data about your employees (for example attendance, leave, and payroll records). You are the controller; we are the processor.

To deliver, secure, and improve the service, including attendance, leave, payroll, and employee self-service features.

To communicate with you about updates, outages, approvals, and billing.

To comply with applicable law, including India's Digital Personal Data Protection (DPDP) Act.

The OrgNest mobile app requests only the permissions its features need. You can grant or deny each one in your device settings; some features will not work without the relevant permission.

Location (precise and approximate) — captured only at the moment you clock in or out, so your attendance can be geo-tagged for your employer. Location is used only while the app is in the foreground; we do not track your location in the background, and we never sell it.

Camera and photos — used only when you choose to set or update your profile photo, or attach an image to a request.

Biometric unlock (Face ID, Touch ID, or fingerprint) — used to unlock the app. Biometric matching is performed entirely by your device's operating system; OrgNest never receives, sees, or stores your biometric data — only a success or failure result.

Notifications — used to alert you about approvals, payslips, attendance reminders, and other work updates.

Your authentication token is stored securely in the device Keychain (iOS) or Keystore (Android) and is removed when you sign out or delete the app.

We share data only with vetted sub-processors (hosting, email, error monitoring). A full list is available on request.

We do not sell personal data. Ever.

You may access, correct, export, or delete your personal data. Email privacy@orgnest.com — we respond within 30 days.

Your OrgNest account is created and managed by your employer. To delete your account and the personal data associated with it, either ask your employer's HR or admin to remove your profile, or email privacy@orgnest.com from your registered address with the subject "Account deletion".

We verify the request and complete deletion within 30 days. Some records must be retained where the law requires it — for example statutory payroll, tax, and provident-fund records under Indian law — and are deleted once those retention periods end.

Uninstalling the mobile app from your device removes locally stored data (such as your saved session) but does not by itself delete your OrgNest account. Use the steps above to delete the account.

AES-256 encryption at rest, TLS 1.3 in transit, MFA-protected production access, and SOC 2-aligned processes. See our Security page for the full stack.

OrgNest is a workplace tool intended for use by employees aged 16 and older. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact privacy@orgnest.com and we will delete it.

Data Protection Officer: dpo@orgnest.com. Postal address: OrgNest Technologies, Koramangala, Bengaluru 560095, India.