Privacy Policy

Karya is workforce software: it holds employee records, attendance, payroll and related personal data on behalf of the company that uses it. This policy explains what we collect, why, and how it's protected — for both the company (our customer) and the employees whose data the company enters into the system.

1. What we collect

Depending on which modules a company enables, Karya may hold: employee names, contact details, photos, government ID and bank details, attendance and shift records, leave balances, salary and payroll data, uploaded documents (offer letters, ID proofs, certificates), and account/login information. Companies decide what applies to them — nothing is collected that a company hasn't chosen to use.

2. Who enters and controls this data

The company (through its HR-Admins) is the data controller for its own employees' records — they decide what to collect and who has access. Karya acts as the data processor: we store and process this data on the company's instructions, and do not sell it, share it with third parties for marketing, or use it for any purpose beyond operating the platform.

3. How data is isolated and secured

Tenant isolation and role-based access are enforced by database policies as well as the interface. Passwords are handled by the authentication service rather than stored as readable passwords in employee records. Photos and documents use access-controlled storage; supported image uploads may be compressed. Personal records, team views, company administration and platform administration have different permissions, which require ongoing security testing.

Maharishi reads supported structured records only within the signed-in account's access. Its questions and answers are not sent to an external language model or saved by the assistant. Local PDF OCR and call transcription process files in the browser; inspecting a file does not upload it. Saving a reviewed document or transcript uses the relevant company storage workflow.

4. Employee rights

Employees can view their own profile, attendance, leave and payslip records directly in the product. To correct, export, or request deletion of personal data, employees should contact their company's HR-Admin, who controls the record; HR-Admins and companies can reach us at contact@advayaglobal.com for platform-level requests.

5. Data retention

Data is retained for as long as the company's account is active and as needed to meet legal, payroll and tax record-keeping obligations. When a company's account ends, we retain data only as long as required by law, then delete it.

6. Cookies and analytics

Karya uses browser storage for sign-in sessions, theme and tutorial preferences, and a bounded local product-event history. When a Google Analytics measurement ID is configured, the application also loads Google Analytics for usage measurement; that service may use analytics cookies or identifiers. The application does not treat that data as guaranteed anonymous. Contact us about the analytics configuration for your deployment.

7. Contact

Questions about this policy or how your data is handled: contact@advayaglobal.com.

This policy is a good-faith description of our practices, provided as general information and not as legal advice. Companies using Karya to process employee personal data remain responsible for their own compliance obligations (including India's Digital Personal Data Protection Act, 2023, and any applicable data protection law in their jurisdiction) and should seek independent legal advice for their specific circumstances.