Privacy Policy

This policy covers Wintrage People, the HR, attendance, and payroll product available at organization subdomains of people.wintrage.com and this marketing site. It is separate from the privacy policy at wintrage.com, which covers Wintrage Technologies' corporate website and consulting business, not this product.

When your organization ("Customer") uses Wintrage People, your organization is the data controller (or data fiduciary, under India's DPDP Act) for the personal data of your employees entered into the product — your organization decides what employee data to collect and why. Wintrage Technologies acts as the data processor, storing and processing that data on your organization's instructions, under a services agreement with your organization.

If you are an employee of a Wintrage People customer, your employer is responsible for your data and is the right first point of contact for questions about it. We respond to requests routed through your employer, and directly where required by applicable law.

Organizations use Wintrage People to store the following categories of employee data on our servers:

• Personal details — name, gender, date of birth, marital status, blood group, nationality, personal and work contact details
• Addresses and emergency contact details
• Identity documents — document type and number (e.g. government ID numbers), as entered by your organization
• Bank account details — account number, IFSC/routing code, and bank name, used for payroll
• Employment details — branch, department, designation, manager, employment dates, and status
• Attendance data — punch-in/out times and source, including data received from registered biometric devices
• Biometric data — fingerprint templates enrolled on biometric attendance devices connected to your organization's account, used solely to match attendance punches to an employee
• Payroll data — salary structure, pay components, and payroll run history
• Account and access data — login email, role, and permissions within your organization's workspace

This data is entered by your organization's administrators or synced from biometric devices your organization registers — Wintrage People does not independently collect data about employees from any other source.

Data is used only to provide the product to your organization: maintaining employee records, recording and reconciling attendance, administering leave, running payroll and applying statutory deductions (PF, ESI, professional tax, TDS), and giving your organization's authorized users role-appropriate access to this information. We do not sell this data, and we do not use it for advertising.

Data is stored in our production database and servers, isolated per organization — each organization's data is kept separate from every other organization's, and is only accessible to that organization's authorized users through their own subdomain. Access within an organization is controlled by role-based permissions, so a given user only sees the records their role is granted access to.

We do not sell employee or organization data. We share data only with service providers who help us run the product on your organization's behalf — for example, our hosting infrastructure, and biometric device hardware/firmware from device manufacturers your organization connects directly. Visitors to this website should also read section 10. Where we introduce new categories of subprocessor, we will update this policy.

We retain employee data for as long as your organization's account is active, and for a reasonable period after an employee exits or your organization's account is closed, to meet statutory record-keeping obligations (including payroll and tax records) and to allow data export. Specific retention periods are set out in the services agreement with your organization.

We apply reasonable technical and organizational measures to protect this data, including encrypted connections, per-organization data isolation, and role-based access controls. No system is completely secure, and we work to improve these measures as the product and its customer base grow.

Depending on applicable law — including India's Digital Personal Data Protection Act — employees may have rights to access, correct, or request deletion of their personal data. Employees should raise these requests with their employer in the first instance, as the employer controls the data. Organizations can contact us directly at info@wintrage.com for assistance with any such request.

This section applies to people who browse the public pages of Wintrage People (home, features, pricing, book a demo and this policy). It does not apply to anyone signed in to an organization's workspace.

Enquiry forms. When you request a demo or a quote we collect your name, work email, company, an optional phone number and an optional message. We use these only to reply to you and to follow up on your enquiry. The form is delivered to our mailbox through the EmailJS email service. We keep enquiries for as long as needed to deal with them and for a reasonable period afterwards. We do not sell this information or use it for anything unrelated to your enquiry.

Analytics and advertising cookies. If you choose Accept on the cookie banner, we use Google Analytics to understand which pages are visited, and Google Ads to measure whether our advertising leads to demo requests. Google sets cookies such as _ga, _ga_* and _gcl_auin your browser and receives your IP address and usage information about these pages. If you choose Reject, or do not answer, none of these are loaded. You can change your choice at any time using "Cookie settings" in the page footer, and you can manage Google's ad personalization at adssettings.google.com. These tools run only on the public pages, never inside a customer workspace, and they never receive employee or payroll data.

We may update this policy as the product and the law change. Material changes will be communicated to customer organizations.

Questions about this policy or how Wintrage People handles data can be sent to info@wintrage.com.