Prygenix OneLegal
Privacy Policy
This policy explains how Prygenix Innovations Pvt. Ltd. ("we") handles personal data in Prygenix One and on this website. We wrote it to be readable. It covers the Digital Personal Data Protection Act, 2023 (India) and the UAE Personal Data Protection Law, and other laws that may apply.
1. Two roles
- Customer Data. When a company uses Prygenix One, the data it enters (its employees, clients, contacts, deals, invoices, attendance and so on) belongs to that company. The company decides what goes in and why: it is the data controller (data fiduciary), and we process the data on its behalf. If you're an employee or client of one of our customers, please contact that company first about your data; we'll help them respond.
- Our own data. For website visitors, people who sign up, and our customers' admin and billing contacts, we are the data controller.
2. What we collect
| Data | Examples | Why |
|---|---|---|
| Sign-up and account details | Name, work email, phone, company, country, chosen plan and data region, password (stored only as a one-way hash) | To create and run your account |
| Data customers enter | Employee records, clients and contacts, deals, quotes and invoices, expenses and receipts, leave, daily reports | To provide the service to the customer |
| Attendance location | Device location (latitude, longitude, accuracy) at check-in, check-out and when times are corrected | So the employer can confirm where attendance was marked. Captured only at those moments, never tracked in the background, and visible only to the employer's HR and admins |
| Security and usage records | Sign-in times, IP address, failed sign-ins, changes made (audit log), two-factor settings | To keep accounts secure and show customers who did what |
| Billing | Plan, invoices, billing email, payment status and reference | To bill and keep tax records. Card and bank details are handled by the payment provider; we never see or store them |
| Messages to us | Emails, sign-up notes, questions typed to the help assistant | To answer and improve help |
3. How we use it
- to provide, secure and support Prygenix One;
- to send account emails (email confirmation, invites, password resets, receipts, important service notices);
- to bill, and to meet tax and legal obligations;
- to prevent fraud and abuse, and to investigate security issues.
We don't sell personal data, don't use Customer Data for advertising, and don't use it to train AI models.
4. Help assistant
The help assistant answers questions about using Prygenix One. Without an AI service it uses built-in answers on our servers. If AI help is switched on, the question you type is sent to the AI provider (Google Gemini or Anthropic Claude) to write the answer. The assistant never receives your company's records. Please don't type confidential information into it.
5. Where data is stored
Customer Data is stored in the data region chosen at sign-up (India; United Arab Emirates, coming soon), including uploaded files and backups. Some service providers listed below may process limited data (for example an email address or a payment) in other countries, with appropriate safeguards.
6. Who we share it with
Only with service providers that help us run Prygenix One, under contracts that require them to protect the data:
| Provider | What for | Where |
|---|---|---|
| Hostinger | Server hosting and backups (India data centre) | India |
| Your email provider (SMTP) | Sending account emails such as confirmations, invites, password resets and receipts | Depends on provider |
| Razorpay | Card, UPI and net-banking payments for customers in India | India |
| Stripe | Card payments for customers paying in AED | UAE / international |
| Google (Gemini) or Anthropic (Claude) | Answering help-assistant questions, only if AI help is switched on; receives the question typed, never your company data | International |
We may also disclose data if the law requires it, or to protect our rights, users or the public; we'll tell the affected customer where we're allowed to.
7. How long we keep it
- Customer Data: for as long as the customer's account is active, then up to 30 days for export, then deleted (backups roll off within 14 days).
- Invoices and billing records: as long as tax law requires (generally 8 years in India).
- Security records (sign-ins, audit log): up to 1 year, unless needed for an investigation.
- Sign-up requests that don't become customers: up to 12 months.
8. Security
HTTPS everywhere; passwords stored only as one-way hashes; optional and enforceable two-factor sign-in; login lockout after repeated failures; each company's data kept separate and checked on every database read; role-based access; audit logs; daily backups with restore checks. No system is perfectly secure. If a breach affects your personal data, we'll notify the affected customers and the authorities as the law requires.
9. Cookies and local storage
We use one essential cookie to keep you signed in, and your browser's local storage to remember your light/dark theme and sidebar preference. We don't use advertising or third-party tracking cookies.
10. Your rights
Depending on where you live, you can ask to access, correct, update or delete your personal data, withdraw consent, nominate someone to exercise your rights, and raise a grievance. For Customer Data, contact the company that uses Prygenix One; for data we control, contact us below. We'll respond within the time the law requires. You can also complain to the Data Protection Board of India or, in the UAE, the UAE Data Office.
11. Children
Prygenix One is a business service and isn't meant for anyone under 18. We don't knowingly collect children's data.
12. Changes
We'll post any changes here and update the date above. For significant changes we'll tell customers by email or in the app.
13. Contact and grievance officer
Prygenix Innovations Pvt. Ltd., Bangalore, Karnataka, India.
Grievance officer: Prakash Kumar, connect@prygenix.com
See also our Terms of Service.