Privacy Policy

Last updated: 20 February 2026

Privacy Policy for India HRMS & payroll users — DPDP Act 2023 compliant

At ORIS Intelligence Pvt. Ltd. (the entity behind PeopleOS), data privacy is foundational to our “Compliant by Design” philosophy. This Privacy Policy describes how we collect, use, and protect information within our HRMS platform.

1. India DPDP Act compliance

We are fully committed to the Digital Personal Data Protection (DPDP) Act, 2023. PeopleOS acts primarily as a Data Processor for our corporate clients, who serve as the Data Fiduciaries for their employees’ personal data.

2. Data sovereignty

All data related to Indian organisations and their employees is stored exclusively on servers located within the territory of India (AWS Mumbai / Azure West India regions). No employee PII leaves Indian jurisdiction.

3. Information we collect

  • Employee master data (name, contact, employment details)
  • Statutory identifiers (PAN, UAN) — Aadhaar stored only as tokens via Aadhaar Data Vault
  • Payroll information and bank account details (encrypted at rest)
  • Attendance and geo-location data (when enabled by the employer)
  • Communication logs via ORIS AI (PII redacted before LLM processing)

4. AI data handling

ORIS AI processes natural-language queries for compliance and analytics. All personally identifiable information is stripped before any data is sent to LLM providers. AI never modifies payroll data directly — all proposals require explicit human approval.

5. Your rights

Employees have the right to access, correction, and erasure of their personal data through their employer (the Data Fiduciary). Data portability requests are processed within 30 days of receipt.

6. Consent

Account holders consent to the processing of their sign-up information (name, work email, organisation) for account creation, service delivery, billing, and service communications when they register. Employee data is processed on the instructions of the employer (the Data Fiduciary), whose responsibility it is to provide notice to and obtain consent from its employees as required by the DPDP Act, 2023. Consent for optional communications can be withdrawn at any time by writing to the contact below.

7. Grievance redressal & contact

For any privacy question, data-related grievance, or to exercise your rights under the DPDP Act, 2023, contact our Grievance Officer at support@meetpeopleos.com (Oris Intelligence Pvt. Ltd., Bengaluru, India). We acknowledge grievances within 72 hours and resolve them within 30 days. If you are unsatisfied with the resolution, you may escalate to the Data Protection Board of India.