Launching soon: RootWave CWM, contract worker management for manpower providers. Early access is open

Legal

Privacy Policy

This policy explains what personal data RootWave Technologies collects through this website and through our software products, RootWave HRMS and RootWave CWM, why we collect it, and the choices you have. It is written to follow India's Digital Personal Data Protection Act, 2023.

Who we are

RootWave Technologies is a micro enterprise registered with the Ministry of Micro, Small and Medium Enterprises, Government of India (Udyam UDYAM-MH-04-0262347), based in Chhatrapati Sambhajinagar (Aurangabad), Maharashtra 431133, India.

You can reach us about anything in this policy at rootwavet@gmail.com.

What we collect on this website

When you send an enquiry through the form, we receive your name, email address, company name (if you give it) and the details of your project. The enquiry is saved in a Google Sheet in our Google account and emailed to us, so we can reply. If the form cannot send, it opens your email app instead.

We do not use advertising or tracking cookies. We may use privacy-friendly, cookie-free analytics that count visits without identifying you. Our website is hosted by Cloudflare, and its fonts are loaded from Google Fonts, which means your browser shares your IP address with those services when the page loads.

Data in RootWave HRMS and RootWave CWM

When a company uses our products, it adds data about its employees or workers: for example profile and contact details, attendance records including location and photos taken at punch-in, leave, salary and statutory details, and documents.

For this data the company is the Data Fiduciary, and RootWave acts as its Data Processor: we process the data only to provide the service, on the company's instructions. If you are an employee and have a question about your data, please contact your employer first; we will help them respond.

How we use personal data

We do not sell personal data, and we do not use product data for advertising.

  • To reply to your enquiry and prepare a proposal or quote.
  • To provide, support and improve our products for our customers.
  • To send service messages, such as payslips, approvals and account notices.
  • To meet legal, tax and accounting duties.

Where data is stored and who we share it with

RootWave HRMS runs on Microsoft Azure cloud servers. This website is hosted on Cloudflare, and website enquiries are stored in Google Sheets and Gmail.

We share data only with service providers that help us run our business, such as cloud hosting, email and messaging, and payment providers when you pay for a subscription, and only as much as they need. We may also disclose data when the law requires it.

How we protect data

Each company's data is kept separate from other companies. Every request needs a signed-in user, access depends on the user's role, accounts lock after repeated wrong passwords, and all traffic is encrypted with HTTPS. No system is perfectly secure, but we work to protect data and will inform affected customers and the authorities of a breach as the law requires.

How long we keep data

We keep enquiries for as long as we are in conversation with you, and for up to 24 months after that unless you ask us to delete them sooner. Product data is kept for as long as the customer's subscription is active. When a subscription ends, we delete the data within 90 days, unless the customer asks for an export first or the law requires us to keep it longer.

Your rights

You can ask us to tell you what personal data we hold about you, to correct or complete it, or to delete it, and you can withdraw consent you have given. You can also nominate someone to exercise these rights on your behalf. To do any of this, contact us at the details below.

Grievances

For any complaint about how we handle personal data, write to our Grievance Officer at rootwavet@gmail.com. We aim to respond within 7 working days. If you are not satisfied with our response, you may approach the Data Protection Board of India.

Children

This website and our products are meant for businesses and are not directed at children under 18.

Changes to this policy

We may update this policy. The date at the top shows when it last changed.