1. Introduction
Tornotron E-Commerce Private Limited ("the Company", "we", "us", or "our") operates Echno Console ("the Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Platform. We are committed to protecting your privacy in accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDPA) of India.
2. Information We Collect
2.1 Information You Provide
- Account Information: Username, full name, email address, password, phone number, date of birth, and gender.
- Profile Information: Role, organization details, and professional information you choose to provide.
- Employment Data: Department, designation, employee ID, reporting manager, and other workforce-related information.
- Attendance Data: Clock-in/clock-out times, location data (if enabled), and attendance records.
- Leave Records: Leave applications, leave balances, and approval history.
- Project Data: Project details, task assignments, and progress information.
2.2 Information Collected Automatically
- Device Information: Browser type, operating system, and device identifiers.
- Usage Data: Pages visited, features used, and interaction patterns.
- Log Data: IP address, access times, and referring URLs.
- Cookies: Session cookies and authentication tokens necessary for the Platform to function.
3. How We Use Your Information
We use your information to:
- Provide, maintain, and improve the Platform's services.
- Authenticate your identity and manage your account access.
- Process workforce management operations including attendance, leaves, and project assignments.
- Enable organizational features such as employee management and team collaboration.
- Send service-related notifications, updates, and security alerts.
- Analyze usage patterns to improve user experience and Platform performance.
- Comply with legal obligations and enforce our terms of service.
4. Data Sharing and Disclosure
We may share your information with:
- Your Organization: If you are part of an organization on the Platform, your employer/organization administrators may access your employment-related data as part of their workforce management.
- Service Providers: Third-party vendors who assist us in operating the Platform (e.g., cloud hosting, authentication services). These providers are contractually bound to protect your data.
- Legal Requirements: When required by law, court order, or governmental authority.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction.
We do not sell your personal information to third parties.
5. Data Security
We implement industry-standard security measures to protect your personal information, including:
- Encryption of data in transit (TLS/SSL) and at rest.
- Secure authentication through Keycloak identity management with role-based access control.
- Regular security assessments and vulnerability testing.
- Access controls limiting employee access to personal data on a need-to-know basis.
While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with our services. We may also retain data as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer required, it will be securely deleted or anonymized.
7. Your Rights
Under applicable data protection laws, you have the right to:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete personal data.
- Erasure: Request deletion of your personal data, subject to legal retention requirements.
- Withdraw Consent: Withdraw your consent for data processing at any time, where consent is the basis for processing.
- Grievance Redressal: Lodge a complaint with us or the relevant data protection authority.
To exercise any of these rights, please contact us using the details provided below.
8. Cookies and Tracking
The Platform uses essential cookies required for authentication and session management. These cookies are strictly necessary for the Platform to function and cannot be disabled. We do not use advertising or third-party tracking cookies.
9. Children's Privacy
The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.
10. Third-Party Services
The Platform integrates with third-party services for authentication (Keycloak) and other functionalities. These services have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of third-party services.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Platform or sending you an email. The "Last updated" date at the top of this policy indicates when it was last revised.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us: