Privacy Policy

For your account and our website, HROne acts as the data controller. For the employee, payroll, and other records that a customer organization enters into HROne, we act as a data processor on that organization's behalf — the organization is the controller and is responsible for the lawful basis for that data.

Account information: your name, email address, organization details, and authentication data.

Customer Data: records your organization submits, such as employee profiles, salaries, attendance, invoices, and financial documents. This may include sensitive personal data.

Usage and device data: log data, IP address, browser type, and how you interact with the service, used to operate and secure it.

We use personal data to provide, operate, secure, and improve the service; to authenticate users; to provide support; to communicate with you; and to comply with legal obligations.

We do not sell personal data.

Some features use AI to generate reports and assist with tasks. When you use them, the relevant data may be sent to our AI provider to produce a response. We do not permit our AI provider to use your data to train its models.

We use vetted third parties to run HROne: Clerk (authentication), Vercel (application hosting), Supabase (database hosting), and Anthropic (AI features). Each processes data only to provide their service to us and under appropriate confidentiality and data-protection obligations.

Customer Data is hosted in data centers in the Mumbai, India (ap-south-1) region. Some sub-processors may process limited data in other regions.

Where personal data is transferred across borders, we rely on appropriate safeguards as required by applicable law.

We retain personal data for as long as your account is active and as needed to provide the service. After account closure, Customer Data is deleted or anonymized within a reasonable period, except where we must retain it to meet legal obligations.

Demo sandbox data is temporary and is deleted automatically within 24 hours.

We protect data with encryption in transit, access controls, and strict tenant isolation between organizations. No method of transmission or storage is completely secure, but we work to protect your data and to address issues promptly.

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and may object to or restrict certain processing.

If your data was entered by an employer using HROne, please direct such requests to that organization; as their processor, we will assist them in responding.

We use strictly necessary cookies to keep you signed in and to run core features (for example, session and demo cookies). We do not use advertising cookies.

HROne is a workplace tool and is not directed to children under 18. We do not knowingly collect personal data directly from children.

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice through the service or by other means.

For privacy questions or to exercise your rights, contact us at info@hr-one.app.