DPDP Act 2023 compliance

1. Roles

• Data fiduciary: Tecnior Technologies Pvt Ltd, with respect to tenant administrators and account-level data.
• Data processor: Tecnior Technologies Pvt Ltd, with respect to employee data uploaded by tenants. The tenant remains the data fiduciary for its own employee data; we process it on the tenant's behalf.

2. Lawful basis

We process personal data on three bases:

• Performance of contract — to provide the OfficHR service to subscribed tenants.
• Legal obligation — to meet statutory requirements under the Income-Tax Act, EPF Act, ESI Act, and similar.
• Consent — for any optional, non-essential processing (e.g. product update emails, beta features).

3. Data principal rights

Every individual whose data we process has the following rights, exercisable through the tenant administrator or directly via [email protected]:

• Right to access — receive a copy of personal data we hold.
• Right to correction — fix inaccurate or incomplete data.
• Right to erasure — request deletion when retention is no longer required.
• Right to grievance redressal — escalate to our grievance officer.
• Right to nominate — appoint a representative to exercise rights on your behalf in case of incapacity.

4. Notice and consent

Where consent is the basis, we provide a clear notice in plain English (and Hindi where the platform is presented in Hindi) describing what data is collected, the purpose, and the consequences of withdrawing consent. Consent is captured in a tamper-evident ledger.

5. Children's data

OfficHR is not intended for use by individuals under 18. We do not knowingly process children's data. If you believe we hold children's data, contact [email protected].

6. Cross-border transfer

We do not transfer personal data outside India. Our infrastructure, backups, and support team operations are entirely within India.

7. Security safeguards

See the Security page for a detailed breakdown — encryption, access control, audit logging, and incident response.

8. Data breach notification

In the event of a personal-data breach, we will notify the Data Protection Board of India and affected data principals within 72 hours of becoming aware, in line with the DPDP Act and applicable rules.

9. Grievance officer

Mahip Gupta
Grievance Officer, Tecnior Technologies Pvt Ltd
Email: [email protected]
Acknowledgement: 48 hours · Resolution: 30 days.

10. Updates

The DPDP Act and its rules are evolving. We will update this page as the legal landscape develops and notify tenant administrators of any material change.