Vibeinn Techverse Pvt. Ltd. ("we", "our", or "us") operates VIBEHR, a cloud-based Human Resource Management System. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform. We are committed to protecting the privacy of our Subscribers, Authorized Users, and all individuals whose data is processed through VIBEHR. By using the Platform, you consent to the practices described in this Policy.
- Full name, email address, phone number
- Employee ID, job title, department
- Profile photo (if uploaded)
- Login credentials (passwords stored encrypted)
- Salary, compensation, and payroll details
- Leave records, attendance logs, shift schedules
- Performance reviews and appraisal data
- Bank account details for payroll disbursement
- IP address, browser type, device information
- Log data, session duration, pages visited
- Cookies and similar tracking technologies
- Error reports and diagnostic data
- Directly from Subscribers during onboarding and account setup
- From Authorized Users when they input or update profile data
- Automatically via cookies, log files, and analytics tools
- From third-party integrations enabled by the Subscriber
- Through support interactions, feedback, and surveys
- To provide, operate, and maintain the VIBEHR platform
- To process payroll, manage attendance, and generate HR reports
- To send transactional emails, alerts, and system notifications
- To improve platform features and user experience
- To comply with legal obligations and regulatory requirements
- To detect, prevent, and address fraud or security incidents
- To respond to customer support requests
We do not sell, trade, or rent your personal information. We may share data only in the following circumstances:
- With service providers who assist in platform operations (under strict confidentiality)
- With the Subscriber organization as the data controller for their employees
- With government or regulatory authorities when legally required
- During a merger, acquisition, or sale of business assets
- With your explicit consent for any other purpose
We implement industry-standard security measures to protect your data from unauthorized access, disclosure, or destruction.
- AES-256 encryption for data at rest
- TLS/SSL encryption for data in transit
- Role-based access control (RBAC) within the platform
- Regular security audits and vulnerability assessments
- Multi-factor authentication (MFA) support
- Secure data centers with physical access controls
Your data is stored on secure cloud servers. We take steps to ensure that data transfers comply with applicable data protection laws.
- Data is primarily stored in servers located in India
- Cross-border transfers comply with applicable legal frameworks
- Subscriber data is logically isolated and never commingled
- Backups are encrypted and stored in geographically redundant locations
We retain personal data only for as long as necessary to provide the Services or as required by law.
- Active account data is retained for the duration of the subscription
- Post-termination data is available for retrieval for up to 30 days
- After 30 days, data is permanently and securely deleted
- Certain data may be retained longer if required by applicable law
- Anonymized or aggregated data may be retained for analytics purposes
Authorized Users and individuals whose data is processed through VIBEHR have the following rights:
VIBEHR uses cookies and similar technologies to enhance your experience on the platform.
VIBEHR may integrate with third-party tools such as payment gateways, communication services, or analytics providers.
- Third-party services operate under their own privacy policies
- We are not responsible for data practices of third-party providers
- Subscribers are responsible for ensuring third-party integrations comply with their obligations
- We perform due diligence on vendors that process Subscriber data on our behalf
VIBEHR is a business platform not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected such data, we will promptly and securely delete it.
We may send you product updates, newsletters, and promotional communications.
- You can opt out of marketing emails at any time via the unsubscribe link
- Transactional and service-related notifications cannot be opted out of
- We do not share your contact data with third-party marketers
- SMS alerts are sent only when explicitly opted into by the Subscriber
This Privacy Policy is governed by the laws of India and applicable data protection regulations.
- Compliant with India's Information Technology Act, 2000 and IT (Amendment) Act, 2008
- Adheres to the Digital Personal Data Protection Act (DPDPA), 2023
- Subscribers in other regions may have additional rights under local law
- Disputes are subject to the jurisdiction of courts in India
We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. We will notify Subscribers of significant changes via email or in-platform notification. Continued use of VIBEHR after changes constitutes acceptance of the updated Policy.
For any privacy-related queries, data access requests, or complaints, please contact our Data Protection Officer: