Last updated 5 October 2026
Privacy policy
DialHRM is software that small businesses in India use to run attendance, leave and salary for their staff. It is made and run by Creativedial Services Private Limited (“Creativedial”, “we”). This policy explains what personal data DialHRM holds, why, who handles it, how long we keep it, and what you can ask us to do.
1. Who decides what is collected
If you work for a company that uses DialHRM, your employer decides what information about you goes into DialHRM and what it is used for. Under India’s Digital Personal Data Protection Act, 2023, your employer is the Data Fiduciary for your work records and we handle them on its behalf. Your employer should tell you what it records and why.
If you sign up for DialHRM, ask us for a trial or write to us, we decide how that information is used, and this policy is our notice to you.
2. What DialHRM holds
| Kind of data | What it includes | Where it comes from |
|---|---|---|
| Identity and contact | Name, email address, phone number, employee ID, profile photo | Your employer, or you when you edit your profile |
| Job details | Designation, department, manager, joining date, shift and week-off settings, whether you still work there | Your employer |
| Personal details | Gender, address, emergency contact, father’s and mother’s names | Your employer, or you |
| Government ID and bank details | Aadhaar number and card images, PAN and card image, bank name, account number and IFSC | Your employer, only if it uses DialHRM for payroll and statutory filings |
| Attendance | Punch-in and punch-out times, a photo taken when you punch, where you punched when your employer turns location on, the kiosk or phone used, overtime | The DialHRM app, your company’s shared kiosk, or your employer’s corrections |
| Leave and approvals | Leave dates, type and reason, documents you attach (for example a medical certificate), who approved what | You and your managers |
| Pay | Salary, deductions, overtime, payslips, incentives, appraisal letters, tax-saving declarations (tax regime, Section 80C and 80D amounts, rent paid), expense claims and receipts | Your employer and you |
| Messages | Announcements, notifications, and chat messages, which are deleted automatically after 24 hours | Your employer and colleagues |
| Sign-in and security | When you sign in, your device and browser type, and the internet (IP) address recorded with sensitive actions | Our systems |
| Business enquiries | Name, company, phone, email, city, team size and your message, plus a scrambled (hashed) form of your internet address that we use only to stop spam | You, through our trial form |
3. What we use it for
- To run the service your employer or your business signed up for: recording attendance, working out leave balances and salary, approvals, payslips and reports.
- To send the emails the service needs, such as account set-up, password resets, alerts and payslip notices.
- To keep accounts secure, keep each company’s data separate and stop misuse.
- To help when you or your employer ask for support.
- To answer trial requests and other enquiries.
- To meet our legal obligations.
We do not sell personal data, show advertising, or use your data to build marketing profiles.
4. Who handles it
Inside your company, people see what their role allows: your managers and admins see your work records, and colleagues see only what DialHRM shows to everyone in the company, such as your name and photo in chat. We open a company’s data only when it asks us for support or to fix a fault. These providers handle data for us, each only to provide its service:
| Provider | What it does | Where |
|---|---|---|
| Supabase, on Amazon Web Services | Database, sign-in and file storage | Mumbai, India |
| Vercel | Runs DialHRM’s servers and delivers its pages | Servers in Mumbai; pages delivered through Vercel’s worldwide network |
| Resend | Sends DialHRM’s emails | Japan; Resend is a US company |
| Google Fonts | Supplies the typefaces. Your browser fetches them straight from Google, which sees your internet address | Google’s worldwide network |
| Apple App Store and Google Play | Distribute the DialHRM apps | Their own privacy policies apply |
We give data to the government or the police only when the law requires it.
5. How long we keep it
- While your employer uses DialHRM, your records stay for as long as your employer needs them.
- When someone leaves a company, their attendance, leave, salary and tax records stay with the employer for as long as labour and tax laws require employers to keep such records.
- Chat messages are deleted after 24 hours.
- Security and access logs are kept for at least one year.
- When a business stops using DialHRM, we keep its data for 90 days so that it can ask for a copy, then delete it. Backup copies are overwritten within a further 30 days.
- Enquiries that do not lead to an account are deleted 24 months after our last contact.
6. How we protect it
- Every connection is encrypted (HTTPS), and stored data is encrypted by our hosting providers.
- Each company’s data is kept apart inside the database, so one company cannot see another’s.
- ID copies, certificates, receipts, chat files and attendance photos are kept in private storage and open only through the app. Profile photos are the exception: anyone who has the exact web address of a photo can open it.
- Passwords are never stored in readable form, and our secret keys are kept out of our code.
- If a breach affects your data, we tell your employer, and you where we can, without delay, and the authorities as the law requires.
7. What you can ask for
- See and correct your data. Most of your details are on your Profile page. Ask your company’s admin to correct what you cannot change yourself.
- Delete your account. See how to delete your account. Records your employer must keep by law stay with your employer for that period.
- Withdraw consent for anything that was collected with your consent.
- Nominate someone to act for you if you die or cannot act yourself.
- Complain. Write to our Grievance Officer below. We acknowledge within 2 working days and reply in full within 30 days. If you are not satisfied, you can complain to the Data Protection Board of India.
Because your employer decides about your work records, we may pass a request about them to your employer, and we help your employer answer it.
8. Children
DialHRM is meant for workplaces and for people aged 18 or over. If we learn that a child’s data was added without the consent the law requires, we ask the employer to remove it.
9. Contact us
Write to us about privacy, a request or a complaint. Please put “Privacy” in the subject line.
Grievance Officer: Dushyant Pratap Singh Chauhan
Email: office@creativedial.in
Creativedial Services Private Limited, Delhi, India · CIN U74999DL2013PTC262566
10. Changes to this policy
If we change this policy in a way that matters, we show a notice in DialHRM or email each company’s admins before the change takes effect. The date at the top shows when it last changed. Questions about this page: office@creativedial.in.