Privacy policy

Last updated: 1 September 2026. This policy explains what personal data Kreattle Core Private Limited (“Kreattle”) processes, why, and your rights.

Who is responsible

For data about a company’s employees, the company is the data fiduciary and Kreattle processes it on their instructions. For visitors to this website and people who contact us, Kreattle is the data fiduciary.

What we collect

• Account data: name, work email, phone, role.
• Employee data our customers store: identity, job, payroll, statutory and attendance records.
• Usage data: log-ins, device and browser details, IP address, actions taken (for security and audit).
• Website and marketing data: form submissions, demo bookings and cookie preferences.

Why we use it

• To provide the service our customers contract for.
• To keep accounts secure and investigate misuse.
• To respond to enquiries and send information you ask for.
• To meet legal obligations.

Location reads for attendance

The app reads location only when an employee taps Clock in or Clock out, to check it against the office geofence configured by their employer. We do not track location at any other time.

Kreattle Assist

When the AI assistant is used, the question and the minimum data needed to answer it are sent to our AI provider under a contract that prohibits training on customer data. Assist never changes data without the user’s explicit confirmation.

Security

Sensitive identifiers are encrypted at rest with AES-256, data is encrypted in transit, access is role-based and audited, and each customer’s data is isolated.

Retention

We keep customer data for the life of the contract and as instructed by the customer afterwards, subject to statutory retention periods for payroll records.

Your rights

You may request access, correction or erasure of your personal data, and nominate someone to exercise your rights. Employees should contact their employer first. Write to privacy@kreattle.com; our Grievance Officer responds within 30 days.