Privacy Policy

TOTAL X PAYROLL

Effective Date: April 30, 2025 · Last Updated: September 1, 2026

TOTAL X PAYROLL respects your privacy.

This policy is framed under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (when fully enforced).

1. Information We Collect

Account Information:

Name, business details, contact details.

Employee Data:

Salary details, attendance records, identification documents.

Device and Usage Data:

IP address, device type, login times.

Location Information:

Precise (GPS) and approximate device location, captured at the moment an employee marks attendance (punch-in / punch-out) and, where the Live Tracking add-on is enabled by the employer, during an active work session. See the dedicated “Location Data” section below for full details on how and when this is used.

2. Location Data

What we access:

Precise (GPS-based) and approximate (network-based) device location coordinates.

Why we use it:

  • To record the location where an employee marks attendance (punch-in / punch-out), so employers can verify attendance.
  • To support geo-fenced / branch-based attendance, confirming an employee is at an approved work site when they punch in.
  • To provide the optional Live Tracking add-on, which — only when enabled by the employer — records an employee’s route during an active work session for field-work verification.

When it is accessed:

Location is accessed only while the app is in use (in the foreground): at the moment of marking attendance and, where Live Tracking is enabled, during an active, on-duty work session. The app does not collect location in the background when it is closed or not in active use, and does not continuously track personal location outside working sessions.

Who it is shared with:

Location data is stored securely and made available to the employer (company administrator) for attendance and workforce-management purposes. We do not sell location data or share it with third parties for advertising. It is processed by our infrastructure providers (e.g., Google Firebase) solely to operate the Service, and may be disclosed only where required by law.

Control:

You can disable location permission at any time through your device settings. Doing so may prevent location-based attendance and Live Tracking features from working.

3. Purpose of Collection

We collect and use your information for:

  • Providing and improving the Service.
  • Location-based attendance and, where enabled, Live Tracking (see the Location Data section above).
  • Compliance with applicable legal obligations (e.g., record-keeping).
  • Communicating important notices (product updates, policy changes).

4. Consent

By using TOTAL X PAYROLL, you consent to the collection, storage, and processing of your information as per this Privacy Policy.

5. Disclosure of Information

We do not sell or rent your personal information.

We may disclose information:

  • To trusted service providers under confidentiality agreements.
  • When required under Indian law (e.g., a valid legal request by law enforcement).

6. Data Security Measures

We adopt reasonable security practices including encryption, access controls, and secure servers to protect your data.

7. Data Retention

We retain your data as long as your account remains active or longer if required by applicable laws (example: 7 years for financial data compliance).

8. Your Rights

Under Indian law, you have rights to:

  • Access your personal information.
  • Correct inaccuracies.
  • Withdraw consent (which may limit your use of the Service).

You can raise requests at payroll@totalx.io.

9. Grievance Redressal Officer

As per IT Act Rules, we have appointed a Grievance Officer.

Name: Muhammed Nihal

Email: payroll@totalx.io

Phone: +91 7902 524 202

Working Hours: Monday - Friday, 10:00 AM to 6:00 PM IST

10. International Transfers

If your data is transferred outside India, it will be protected under a contract that ensures the same level of data protection.

11. Updates to this Policy

We may revise this policy from time to time. Material changes will be communicated. Continued usage implies acceptance.