Privacy Policy

Jido People is a human resource management, attendance and payroll platform operated by Jido Services ("Jido", "we", "us"), Bardhaman, West Bengal 713101, India.

Our role depends on whose data it is:

• Employee and workforce data that a company ("Customer") adds to Jido People belongs to that Customer. The Customer decides why and how it is processed and is the Data Fiduciary; we process it on the Customer's behalf as a Data Processor.
• Account, billing and website data about the people who sign up for, buy or visit Jido People is processed by us as the Data Fiduciary.

If you are an employee of a Customer, please contact your employer's HR team first about your data — they control it. We will help them respond to your request.

Depending on the modules your organization uses, the platform may hold:

• Account details: name, work email, company name, role, password (stored only as a secure hash) and email-verification codes (also hashed).
• Employee profile: employee code, name, contact details, date of birth, gender, date of joining, employment type, department, designation, manager, address and profile photo.
• Statutory and financial identifiers: PAN, Aadhaar, UAN, ESIC number, bank account number and IFSC, entered by the Customer for payroll and statutory compliance.
• Payroll and tax: salary structures, payslips, deductions (PF, ESIC, TDS, professional tax, LWF), tax declarations and Form 16.
• Attendance and location: check-in and check-out times, regularizations, shifts and rosters. Where a Customer enables geo-attendance or geofencing, your device location is captured at the moment you check in or out — not continuously.
• Work records: leave, timesheets, projects, expenses, travel, assets, help-desk tickets, grievances, performance reviews, goals, training, onboarding tasks and uploaded documents.
• Communications: announcements, in-app chat messages, notifications and audio/video call session details.
• AI assistant usage: the questions you ask and the responses generated.
• Billing: subscription plan, invoices and payment status. Card, UPI and bank payment details are collected and processed by our payment partner, Razorpay; we do not store full card numbers.
• Technical data: IP address and session information recorded when you sign in, browser and device type, and service logs used for security and troubleshooting.
• Enquiries: details you send us through the contact form or by email.

• To provide the platform: HR records, attendance, leave, payroll, reports and the other modules.
• To create logins, verify email addresses, reset passwords and keep accounts secure.
• To send service emails — login credentials, verification codes, approvals, payslip and announcement notices.
• To process subscriptions and payments and to issue invoices.
• To answer questions through the AI assistant when you choose to use it.
• To detect, prevent and investigate fraud, abuse and security incidents.
• To provide support, fix problems and improve the platform.
• To comply with legal, tax and regulatory obligations.

We process personal data in line with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the rules made under them.

For workforce data, the Customer is responsible for having a valid basis — such as consent or the legitimate uses the law permits for employment purposes — and for giving employees any notice the law requires. For our own account and billing data, we rely on your consent and on what is needed to perform our contract with you and meet legal obligations. You may withdraw consent at any time; this does not affect processing already carried out.

Jido People includes optional AI assistants. When you use them, your message and the HR data needed to answer it (for example, a leave balance or headcount figures you are allowed to see) are sent to our AI model provider to generate a response. The assistant only works with data your role already has permission to access.

AI responses can be incomplete or wrong. They are not legal, tax or financial advice, and should be checked before you rely on them.

We do not sell personal data. We share it only as needed to run the service:

• Within your organization, according to the roles and permissions your administrators set.
• Service providers who process data for us under contract: Razorpay (payments), Brevo (email delivery), Cloudinary (photo and document storage), LiveKit (audio and video calls), our AI model provider, and our hosting and database providers.
• Authorities, when required by law, court order or to protect the rights, safety and property of users, the public or Jido.
• A successor business, if Jido is involved in a merger, acquisition or sale of assets, subject to this policy.

We use a strictly necessary session cookie to keep you signed in, and sign you out automatically when the session expires. Your browser's local storage may keep simple preferences such as light or dark theme. We do not use advertising or cross-site tracking cookies. Blocking the session cookie will prevent you from signing in.

We use reasonable technical and organizational safeguards, including:

• Encryption in transit (HTTPS).
• Passwords, sign-in session tokens and one-time codes stored only as hashes.
• Each company's data kept logically separate from every other company's.
• Role-based permissions that limit who can see payroll, statutory and personal details.
• Automatic sign-out of expired sessions.

No system is completely secure. If we become aware of a personal data breach, we will notify affected Customers and the Data Protection Board of India as the law requires.

We keep workforce data for as long as the Customer's subscription is active, or as the Customer instructs. After an account is closed, we delete or anonymize Customer data within a reasonable period, unless we must keep it longer for legal, tax, audit or dispute purposes — for example, payroll and invoice records under Indian tax law. Backups are overwritten on a rolling schedule.

Subject to applicable law, you have the right to:

• Get a summary of the personal data processed about you and how it is processed.
• Ask for inaccurate or incomplete data to be corrected or updated.
• Ask for data to be erased when it is no longer needed, unless the law requires us to keep it.
• Withdraw consent you have given.
• Nominate another person to exercise your rights in case of death or incapacity.
• Raise a grievance with us, and then with the Data Protection Board of India.

Employees can view their information, and update their photo and documents, under My Profile. For corrections and other requests, contact your employer, or write to us at services@jido.co.in. We may need to verify your identity first.

Jido People is a workplace tool for adults and is not intended for anyone under 18. We do not knowingly collect children's personal data. If you believe a child's data has been added, contact us and we will help remove it.

Some of our service providers may process data outside India. Where that happens, we transfer data only to countries not restricted by the Government of India and require providers to protect it to the standard described in this policy.

We may update this policy from time to time. We will change the "Last updated" date above and, for material changes, notify account administrators by email or in the app before the change takes effect.

For privacy questions, requests or complaints, contact our Grievance Officer at services@jido.co.in, or write to Jido Services, Bardhaman, West Bengal 713101, India. We aim to respond within the time limits set by law.

Please also read our Terms & Conditions.