Privacy Policy

1. DATA FIDUCIARY DECLARATION

ClicknGo Tech Service Pvt Ltd acts as a Data Fiduciary under the Digital Personal Data Protection Act, 2023. We are committed to transparency in how we collect and use your data.

2. DATA WE COLLECT & WHY

2.1 Location Data

Permission used: ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION, ACCESS_BACKGROUND_LOCATION

Purpose: Employee clock-in/clock-out attendance verification, live location tracking during work hours, and geo-fencing for attendance accuracy.

Background location: Used only when employee is actively checked in, to verify on-site presence.

2.2 Camera & Biometric Data

Permission used: CAMERA, USE_BIOMETRIC, USE_FINGERPRINT

Purpose: Face recognition for secure app authentication and attendance verification. Fingerprint/biometric used for login security only.

Note: Biometric data is processed locally on the device and is never uploaded to our servers.

2.3 Notification Data

Permission used: POST_NOTIFICATIONS

Purpose: Sending payroll alerts, attendance reminders, task updates, and important HR notifications.

2.4 Phone State

Permission used: READ_PHONE_STATE

Purpose: Device identification for secure session management and preventing unauthorized access.

2.5 Business & Employee Data

• Business accounting data
• Payroll and salary information
• Statutory identifiers (GSTIN, TAN, EPFO codes)
• Employee contact information
• Consent records and audit logs

2.6 Network & Connectivity

Permission used: INTERNET, ACCESS_NETWORK_STATE

Purpose: Syncing data with our secure servers and enabling real-time features.

3. DATA WE DO NOT COLLECT

• We do NOT access your photos, videos, or media files.
• We do NOT read or store your SMS or call logs.
• We do NOT sell your data to third parties.
• Biometric data is never transmitted off-device.

4. PURPOSE LIMITATION

Data is processed only for:

• Accounting system operation
• Payroll processing and compliance
• Employee attendance tracking and verification
• Statutory filing enablement
• Secure authentication
• Professional collaboration within authorized teams

5. DATA SHARING

Data is shared only with:

• Government portals via approved APIs
• Professionals authorized by the user/organization
• Statutory authorities where legally required
• No advertising networks or data brokers

6. CONSENT MANAGEMENT

Users may:

• View all granted consents
• Withdraw consent at any time from app settings
• Download their consent history
• Request account and data deletion by emailing contact@ecashbook.in

Consent records are maintained per DPDP Act, 2023.

7. DATA SECURITY

• Role-based access control (RBAC)
• End-to-end encryption in transit (TLS 1.3) and at rest (AES-256)
• Secure biometric authentication
• Complete audit trails
• Regular security assessments

8. DATA RETENTION

Data is retained only as long as required by law or active user instruction.

• Upon account deletion request, all personal data is purged within 30 days.
• Statutory data may be retained longer as required by Indian law.

9. CHILDREN'S PRIVACY

eCashbook is intended for business use by adults only. We do not knowingly collect data from anyone under the age of 18.

10. CHANGES TO THIS POLICY

We may update this policy periodically. Users will be notified via in-app notification or email. Continued use of the app constitutes acceptance of the updated policy.

11. CONTACT & GRIEVANCES

ClicknGo Tech Service Pvt. Ltd.
Email: contact@ecashbook.in
Website: www.ecashbook.in
Grievance Officer: contact@ecashbook.in
Response time: Within 72 hours