PRIVACY POLICY FOR CREDIBLE HR

Last Revised: June 4, 2026

At Techcredible IT Solutions Private Limited (including our divisions, subsidiaries, or affiliated companies, henceforth referred to as ‘Techcredible’, ‘we’, ‘us’, or the ‘Company’), we understand that you are trusting us with confidential information. We believe you have a right to know our practices regarding the information we may collect and use when you use our service or interact with us in any manner.

Credible HR is a cloud-based web platform that enables organizations to manage their human resources and process payroll. Credible HR Mobile Apps are also part of the same offering. In addition, Techcredible operates the techcredibleitsolutions.com and credible-hr.com website.

A user may be either:

The Customer: An entity (for example, an employer) which has executed an agreement with Techcredible or with Techcredible’s resellers or distributors to provide our services.

The End User(s): A Customer’s authorized users, such as a Customer’s employees, users of the Services, or visitors of the Website.

Throughout this policy, the Customer and the end user shall collectively be referred to as “users” or “you”.

This Privacy Policy describes the policies and procedures of Techcredible on the collection, use, access, correction, and disclosure of your personal information on techcrddibleitsolutions.com or credible-hr.com (the “Site”) and our Mobile Apps. This privacy policy does not relate to any personal information that Techcredible collects on behalf of, or under the direction of, its clients. When you log on to the Platform, you will have access to the specific privacy policy of your employer/prospective employer (our Client), which explains how they process your personal information and your rights. We will amend, update, or delete your personal information on behalf of our clients in accordance with the terms of our contract with them.

Your personal information includes any information which, either alone or with other data, is reasonably available to us and relates to you (“Personal Information”). This policy also covers Personal Information provided to us for marketing our services, features, or content (the “Services”) or for support in connection with the Services and Mobile Apps. This policy does not apply to any third-party applications or software accessed through our platform, such as external applicant tracking systems or social media portals (“Third-Party Services”).

By using our Services, you acknowledge you have read and understood this privacy policy. For the purposes of the EU GDPR, the Data Controller of the data processed through the Service is our Customer (your employer). For data collected directly on our website for marketing and communication purposes, Techcredible acts as the Data Controller.

1. Information We Collect and How We Use It

A. Personal Information

Personal Information gathered through the Service consists of details provided consciously and voluntarily by our Customer (Employer), the end user, or the Customer’s administrator. This includes:

First and last name, nickname, birthdate, gender, nationality, job title, and phone number(s).

Employment details: date of joining, department, employee ID, national security numbers, system status, and emergency contacts.

Family status: spouse’s and dependents' names, genders, and birth dates.

Financial and Payroll details: bank name, account number, branch address, salary structures (pay period, base salary, gross salary, overtime, bonuses, commissions), tax codes, and user tax declarations.

Statutory parameters: processing parameters for Indian statutory compliance requirements including Provident Fund (PF), Employee State Insurance Corporation (ESIC), Professional Tax (PT), and Labour Welfare Fund (LWF).

IP addresses, system identifiers, termination dates, and termination reasons.

B. Location Information

We do not access or track location-based information from your mobile device automatically upon download. However, if you use the Credible HR Mobile App, your employer can enable location tracking and Geofencing technology for timekeeping and field deployment tracking purposes. The legal basis under GDPR for processing this information is the contractual obligation to your employer to perform the Services. If you apply for a job at Techcredible through our Site and use the “Locate me” feature, we use your location with your explicit consent to show available jobs near you.

C. Attendance Logs & Biometric Verification

If our Customer chooses to utilize our Time and Attendance software, we retain and process transaction logs for calculating attendance and payroll based on the rules configured by the Customer. The information collected consists of employee IDs alongside timestamps of punches (in and out entries).

Where the Customer activates advanced verification, the platform utilizes facial recognition tools. Raw images are processed locally or via API to generate an encrypted mathematical biometric face template for secure access control and fraud prevention.

D. Contact Information

When you express interest in obtaining information about our Services, the Site, or Mobile Apps, we collect your name, email address, and phone number. We use this information based on our legitimate interest to communicate with you and respond to your requests or questions.

E. Device Information

When using our Mobile Apps, we may request access to your device’s camera and photo storage to allow you to take and upload profile pictures or expense receipts. This access is only used in ways you choose, and permissions can be revoked at the device level at any time. We use mobile analytics software to monitor aggregated usage and performance statistics. This infrastructure automatically collects device metrics (operating system version, hardware statistics, etc.) under the contractual obligation to perform services for your employer.

2. Data Collected as a Service Provider

As a service provider, Techcredible systems only collect information as per the Customer’s (employer's) specific operational requirement. Our Master Subscription Agreement governs the delivery, access, and processing of data within these accounts. The Customer controls their platform platform environment and client data. Under applicable data frameworks like GDPR, Techcredible acts as the Data Processor of Customer data, and the Customer acts as the Data Controller.

3. Sharing of Your Information

A. Third-Party Services

We are not responsible for the privacy policies or practices of external Third-Party Services linked within our Site. You are responsible for reading and understanding their respective policies.

B. Information Shared with Our Service Providers & Sub-Processors

We engage trusted people and entities (our “Sub-Processors”) to perform structural tasks under our control. They are authorized to use your Personal Information only as necessary to provide these services to us. These services include email operations, mapping integration, customer support, and secure cloud infrastructure.

4. Business Transfers and Legal Disclosures

A. Business Transfers

In cases of corporate restructuring, mergers, asset sales, or bankruptcy, user information is typically considered a transferable business asset. If Techcredible or substantially all of its assets are acquired, you acknowledge that the acquiring party may continue to use your Personal Information as set forth in this Privacy Policy, and you will be notified of any changes via email or a prominent notice on our Site.

B. Legal Protection and Compliance

We reserve the right to access, preserve, and disclose any information we reasonably believe is necessary to satisfy applicable laws, regulations, legal processes, or lawful governmental requests; enforce our terms and investigate potential violations; detect and prevent fraud, malware, or security issues; and protect the rights, property, or safety of Techcredible, our users, and the public.

5. Data Retention

Operational Data: We retain personal data processed on behalf of our Customers only for as long as required to provide the Service, resolve disputes, and enforce our agreements. System backups are kept for up to 30 days for business continuity purposes.

Deletion Cycle: Upon termination of services by a Customer, an automated deletion cycle begins that permanently and irreversibly wipes the active data profiles within the next consecutive cycle (ranging from a quarter to a half-year).

Metadata & Analytics: Techcredible collects and retains anonymized metadata and statistical usage metrics to conduct and optimize its business operations. You will not be identifiable from this retained information.

Corporate Records: Core contracts, subscription details, and billing information are retained for a minimum of 5 years following the termination or expiration of the client contract.

6. Where Do We Store Your Data?

The data we collect is hosted on secure cloud infrastructure located primarily in Central India data centers, ensuring compliance with local statutory standards, ISO certifications, and digital privacy regulations. While Techcredible is headquartered in Ahmedabad, India—from where we provide administrative and customer support services—raw database assets remain fully isolated within designated enterprise cloud ecosystems. Any cross-border data transfer executed for international clients will strictly comply with applicable regional data protection laws and recognized adequacy mechanisms.

7. Security and Integrity of Information

Techcredible is committed to maintaining robust security protocols. We implement, enforce, and maintain ongoing physical and digital security policies to protect personal data against unauthorized access, destruction, modification, or disclosure.

We limit data access strictly to personnel who require it to fulfill contractual obligations.

All processing personnel undergo periodic training on data handling privacy and are bound by strict confidentiality agreements.

In the event of a verified data breach, Techcredible will promptly notify the affected Customer administrators and co-operate fully to implement immediate containment and remedial isolation measures.

8. Your Rights & The Right to Nominate

Depending on your regional jurisdiction (such as the UK, EU, or India), you may have specific statutory rights regarding your personal information. These include the right to access, correct, or delete your data, object to or restrict certain processing activities, or request data portability. To update your profile information or resolve errors, you can manage your settings directly inside the Employee Self-Service (ESS) portal or contact your internal HR administrator.

🇮🇳 Special Provision: Right to Nominate (DPDP Act, 2023)

In accordance with the provisions of the Indian Digital Personal Data Protection (DPDP) Act, 2023, end users retain the Right to Nominate another individual who can exercise their privacy rights under this policy in the event of death or medical incapacity. Techcredible reserves the right to request appropriate verification data to validate and confirm any nomination before modifying platform profiles.

9. Changes to this Privacy Policy

Techcredible may amend or update this Privacy Policy from time to time. The most current version will always be accessible at techcredible.in/privacy-policy. We will endeavor to notify users of material changes via homepage banner alerts or direct electronic communication 7 days before changes take effect. Your continued use of the platform constitutes active acceptance of the updated terms.

10. Grievance and Data Protection Contacts

If you have any questions, complaints, or feedback concerning our data practices, please contact our officers directly:

Grievance Officer: info@techcredibleitsolutions.com

Corporate Headquarters: Techcredible IT Solutions Pvt. Ltd., C-410, Siddhivinayak Tower, SG Highway, Ahmedabad, Gujarat - 380051.