Privacy policy

Your privacy matters to us

Hrixio handles workforce and operational information with appropriate confidentiality and access control. This policy explains what data we collect, how we use it, and the choices available to authorized users.

Information we collect

  • Identity and employment data such as name, employee ID, role, department, office assignment, and contact details.
  • Operational records required to run the platform, such as attendance entries, leave requests, onboarding tasks, documents, and approval activity.
  • Technical and usage data needed to secure and improve the platform, including login events, device/browser details, and workflow activity history.

Location data

  • The Hrixio mobile app collects precise (GPS) location data, including in the background while the app is closed or not in active use, to support geofence-based attendance.
  • Background and foreground location is used to verify that a check-in or check-out happens at or near your assigned office, and to automatically record a check-in or check-out when you enter or leave that office's geofence.
  • Background location is only active for employees whose organization has enabled geofence-based attendance, and only while signed in to a work account on the Hrixio app.
  • Location data is used solely for attendance verification, is stored as part of your employer's attendance records, and is never sold or shared with advertisers or other third parties.
  • You can revoke location permission at any time in your device settings. Doing so disables automatic geofence check-in/check-out — attendance will then need to be recorded manually or regularized by your organization.

Camera and photos

  • The Hrixio mobile app requests camera and photo library access so you can capture or select photos and files to upload as employee documents (for example onboarding paperwork, identity/qualification documents, or a profile photo).
  • The app may also save a generated file (such as a payslip or an uploaded document) to your device's photo library or files when you choose to export or download it.
  • Photos and documents you upload are stored as part of your employer's records on the platform, are not accessed by the app for any purpose other than the upload/download you initiate, and are never sold or shared with advertisers or other third parties.
  • You can deny or revoke camera and photo library permission at any time in your device settings; document upload/download will then require selecting an existing file another way, where supported.

How we use your information

  • To provide employee, HR, manager, and administrator access to the Hrixio web workspace.
  • To operate attendance, leave, onboarding, payroll-readiness, document, and announcement workflows.
  • To maintain security, auditability, support, and operational reporting for authorized business users.
  • To comply with legal, contractual, regulatory, or internal governance obligations that apply to the platform.

How we protect your data

  • Role-based access controls ensure only authorised personnel can view sensitive information.
  • Data is stored on secure infrastructure with encryption at rest and in transit.
  • Regular audits and ISO 27001 aligned controls maintain the integrity of systems and processes.

Your rights

  • Request access to the personal data we hold about you.
  • Ask for corrections or updates to inaccurate or incomplete information.
  • Withdraw consent for specific data uses, subject to contractual or legal constraints.
  • Request deletion of your data where permissible under applicable law.

Account & data deletion

  • Employee accounts on Hrixio are created and managed by your employer's HR or platform administrator rather than self-registered, so deletion requests are handled the same way — through your organization, or directly with us.
  • To request deletion of your account or personal data, ask your organization's HR/administrator to remove your record, or email contact@hrixio.com with your name, employer, and employee ID and we will process or route the request.
  • We aim to act on verified deletion requests within 30 days.
  • Some records — for example payroll, tax (PF/ESI/PT/TDS), and other statutory compliance data — may be retained beyond a deletion request where retention is required by applicable labor, tax, or financial regulations. Everything else is deleted or anonymized.
  • Deletion of a currently active employee's core record isn't available while employment is ongoing, since it underpins attendance, leave, and payroll for that period; your administrator can process this once employment ends.

Contact our Data Protection Officer

  • For privacy-related requests, contact the Hrixio support team through the contact page or your organization's authorized HR or platform administrator.