Privacy Policy

This Privacy Policy explains how MIS-Tech collects, uses, stores, shares, and protects information when you visit our website, register an organization, use MIS-Tech HRMS, submit a request, or use our related services.

By using our website or HRMS application, you agree to the collection and use of information as described in this Privacy Policy.

1. Information We Collect

We may collect the following categories of information:

• Organization information: organization name, business email, subscription details, billing/contact details, user count, and account status.
• User account information: name, email address, employee code, role, access type, login credentials, password reset information, OTP details, and account activity.
• Employee HR information: employee profile details, date of joining, reporting manager, supervisor, shift details, roster, attendance, leave, reimbursement, and other HRMS records.
• Uploaded documents: profile photos, employee documents, reimbursement bills, and other files uploaded by authorized users.
• Website lead information: name, company name, email, phone number, request type, message, IP address, page URL, and browser/device details submitted through forms.
• Technical information: IP address, browser type, device information, login session, system logs, usage events, error logs, and security-related information.
• Analytics information: website traffic, page views, approximate location, device/browser type, referral source, and interaction data collected through analytics tools.

2. How We Collect Information

We collect information when:

• You register an organization.
• You create or update user/employee records.
• You log in or use the HRMS application.
• You submit attendance, leave, roster, reimbursement, or document information.
• You contact us through the website form.
• You request a demo, subscription discussion, custom tool, support, or early access.
• You browse our website and analytics/cookies are used.
• System logs are generated for security, troubleshooting, or audit purposes.

3. Purpose of Using Information

We use information for the following purposes:

• To create and manage organization accounts.
• To provide HRMS features such as employee management, attendance, roster, leave, reimbursement, documents, reports, and notifications.
• To authenticate users and protect accounts.
• To manage role-based access and permissions.
• To send OTPs, login-related messages, alerts, notifications, and system emails.
• To respond to demo requests, sales inquiries, custom tool requests, and support requests.
• To improve website performance, product features, user experience, and service quality.
• To maintain audit trails, security logs, and operational records.
• To manage subscriptions, billing discussions, renewals, and account status.
• To comply with legal, regulatory, contractual, and security obligations.

4. Legal Basis and Consent

We process information based on user consent, contractual necessity, legitimate business purposes, legal obligations, security requirements, and customer instructions.

When an organization registers, the registering user confirms that they are authorized to provide organization and user information and accept this Privacy Policy on behalf of the organization.

For employee information entered into HRMS, the customer organization is responsible for ensuring that it has the required authority, notice, consent, or lawful basis to collect and process such data.

5. Cookies and Analytics

Our website may use cookies, analytics scripts, or similar technologies to understand website traffic, visitor behavior, page performance, and marketing effectiveness.

We may use Google Analytics or similar analytics tools. These tools may collect information such as page visits, browser/device details, approximate location, referral source, and interaction data.

You can control cookies through your browser settings. Disabling cookies may affect some website functionality or analytics tracking.

6. How We Share Information

We do not sell customer or employee information. We may share information only in limited cases:

• With authorized users within the same customer organization based on their role and access permissions.
• With service providers such as hosting providers, email providers, analytics providers, payment processors, or technical support providers.
• When required by law, regulation, court order, government request, or legal process.
• To protect the rights, security, property, or safety of MIS-Tech, customers, users, or others.
• With customer approval for implementation, support, migration, reporting, or custom development work.

7. Data Storage and Security

We use reasonable security measures to protect information against unauthorized access, misuse, loss, disclosure, alteration, or destruction.

Security measures may include:

• Authentication and password controls.
• Role-based access control.
• Secure file access through controlled handlers.
• Server-side validation and database security controls.
• Audit trails and login/session tracking.
• Hosting-level security controls.

However, no internet-based system or electronic storage method is completely secure. Customers and users must also protect their login credentials and devices.

8. Data Retention

We retain information as long as necessary to provide services, maintain accounts, support customers, meet legal or contractual obligations, resolve disputes, maintain audit records, and enforce agreements.

Customers may request account closure or data deletion, subject to applicable law, backup retention, payment obligations, audit requirements, and technical limitations.

9. User Rights and Requests

Depending on applicable law, users may have rights to access, correct, update, delete, or request information about their personal data.

For employee HRMS data, employees should first contact their organization admin or employer because the organization controls and manages employee records in the HRMS.

Organization admins may contact MIS-Tech for technical assistance with data access, correction, export, or deletion requests.

10. Children’s Data

MIS-Tech HRMS is intended for business and organizational use. It is not intended for use by children. Customers should not knowingly enter children’s personal data unless they have appropriate legal authority and compliance measures in place.

11. International Access and Hosting

Depending on hosting, support, analytics, or third-party services, information may be processed or accessed from locations outside your city, state, or country. We use reasonable measures to protect information according to this Privacy Policy and applicable requirements.

12. Third-Party Links

Our website or HRMS may contain links to third-party websites, tools, or services. We are not responsible for the privacy practices, content, security, or policies of third-party websites or services.

13. Customer Responsibilities

Customer organizations are responsible for:

• Providing accurate employee and organization information.
• Granting access only to authorized users.
• Removing access when users leave or no longer require access.
• Obtaining required employee notices, consents, or legal permissions.
• Using HRMS in compliance with applicable employment, privacy, and data protection laws.
• Reviewing exported reports and downloaded data handling within their organization.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updated versions will be posted on this page with a revised effective date. Continued use of the website or HRMS after changes means you accept the updated Privacy Policy.

15. Contact Us

For privacy questions, data requests, support, or complaints, contact MIS-Tech through the website contact form or email us at:

Email: support@mis-tech.co.in