Privacy Policy
Last updated: 30 October 2026
This policy explains how WorQora (“WorQora”, “we”, “us”) handles personal data when you visit worqora.in, ask us for a demo, or use the WorQora application at app.worqora.in. We follow the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the rules made under it, and the Information Technology Act, 2000.
1. Two roles we play
- Website visitors and people who ask for a demo: WorQora decides why and how this data is used, so we are the Data Fiduciary.
- Worker data inside the WorQora app: the contracting firm that uses WorQora (our customer) decides what worker data to collect and why. The customer is the Data Fiduciary and WorQora is its Data Processor. We process worker data only to provide the service, under our contract with the customer and on its instructions.
2. What we collect
From website visitors and demo requests
- Name, company name, WhatsApp/mobile number, number of sites and workers, and the plan you choose.
- How you reached us: the page address, referring site and campaign (UTM) tags, and the time of your request.
- Basic usage data (pages viewed, buttons clicked) if analytics are switched on. See section 8.
From customers using the app (processed for the customer)
- Worker identity details: name, trade, site, photo or selfie taken at check-in, and a worker PIN.
- Attendance data: time of each check-in and the phone's GPS location at that moment.
- Payroll data: wage rates, days worked, overtime, advances and deductions.
- Statutory and payment details: UAN (EPF), ESIC IP number, bank account number and IFSC, and Aadhaar number where the customer chooses to record it.
- Customer account details: names, phone numbers and emails of the customer's staff who log in.
3. Why we use it
- To reply to your demo request and arrange a call or WhatsApp conversation (based on your consent).
- To run the service for customers: record attendance, calculate wages and statutory deductions, and produce salary slips, bank files and registers (on the customer's instructions).
- To keep the service secure, prevent fraud and fix problems.
- To meet legal obligations, such as tax records or lawful requests from authorities.
We do not sell personal data. We do not use worker data for advertising.
4. Aadhaar, bank and UAN details
- Aadhaar is optional in WorQora. We recommend that customers record only the last four digits unless a law requires the full number. Full Aadhaar numbers, where stored, are kept encrypted and are shown masked (for example XXXX XXXX 1234) on screen and in exports.
- We do not collect or store Aadhaar biometrics (fingerprints or iris scans) and we do not perform Aadhaar authentication.
- Bank account numbers, IFSCs and UANs are used only to produce salary bank files, EPFO returns and salary slips for the customer. Only the customer's authorised users can see them.
5. Who we share data with
- Service providers who help us run WorQora, such as cloud hosting, database, email and messaging providers, under contracts that require them to protect the data.
- Banks, EPFO and ESIC only when the customer itself downloads and uploads files. WorQora does not send worker data to these bodies on its own.
- Government authorities when the law requires it.
Some service providers may store data outside India. We only transfer data to countries that are not restricted by the Government of India under the DPDP Act.
6. How long we keep it
- Demo requests: up to 24 months after our last conversation with you, unless you become a customer or ask us to delete it sooner.
- Customer and worker data: for as long as the customer's account is active. After the account ends, the customer has 60 days to export its data; we then delete it within the following 30 days, except where we must keep it longer by law. Customers are responsible for keeping their own statutory registers for the periods labour laws require.
- Backups: deleted data can remain in encrypted backups for up to 90 days before it is overwritten.
7. How we protect it
Data is sent over encrypted connections (HTTPS). Access is limited to people who need it, and customer users sign in with their own accounts. If a personal data breach happens, we will inform affected customers and the Data Protection Board of India as the DPDP Act requires.
8. Cookies and analytics
The website uses no advertising cookies. If we switch on website analytics (such as Google Analytics 4), it records pages viewed and buttons clicked so we can improve the site. You can block analytics cookies in your browser settings.
9. Your rights
Under the DPDP Act you can:
- ask what personal data we hold about you and how it is used;
- ask us to correct, complete, update or delete it;
- withdraw consent at any time (this does not affect what was done before you withdrew);
- nominate another person to exercise your rights if you die or cannot do so; and
- raise a grievance with us, and then with the Data Protection Board of India if you are not satisfied.
Workers whose data is in WorQora should first contact the contracting firm they work for, because that firm controls their data. We will help the firm respond.
10. Grievance Officer
Piyush Rathore, Grievance Officer
WorQora, New Delhi, India
Email: contact.worqora@gmail.com
Phone / WhatsApp: +91 77019 00326
We will acknowledge your request within 7 days and aim to resolve it within 30 days.
11. Children
The website and app are meant for businesses. We do not knowingly collect personal data of anyone under 18 through the website.
12. Changes to this policy
We will post any changes on this page and update the date at the top. For major changes we will also tell customers by email or in the app.