1. Who we are
We are Aceone Futuristic OPC Private Limited, a company incorporated in India with its registered office at Office No. 214, Vishal Chamber, Opp. GIP Mall, Sector-18, Noida, Uttar Pradesh – 201301, India. We are the data fiduciary for personal data we process on our own behalf (for example, leads submitted via the contact form). For employee data that our customers upload into AceOne HR, the customer is the data fiduciary and we are the data processor.
2. What we collect
From visitors to the public website, we collect:
- Information you submit through the contact form — name, business email, phone number, company name, and your message.
- Standard log information — IP address, browser type, pages visited, referrer.
- Strictly-necessary cookies used to keep you signed in if you create an account.
From customers and their employees who use AceOne HR, we process:
- Identity data: name, employee code, email, phone, photograph.
- HR data: department, role, joining date, salary structure, attendance, leave balances, performance notes.
- Statutory data: PAN, PF UAN, ESI number, bank account, tax declarations.
- Biometric template references and device punches, where biometric attendance is in use.
3. Why we process it (lawful basis)
- To perform our contract with customers — running attendance, leave, payroll, and reports.
- To comply with Indian law — statutory registers, PF, ESI, TDS, Professional Tax filings.
- With consent — biometric capture, location pings, photo capture, and marketing communications.
- Legitimate interests — securing the platform, preventing fraud, improving our product.
4. How long we keep it
Leads submitted from the website are kept for up to 24 months unless you ask us to delete them sooner. Customer HR data follows the customer's own retention policy — typically the statutory minimum under Indian labour and tax law. Raw biometric device logs are purged on a configurable schedule (default 90 days) per the Data Processing & Security Statement.
5. Your rights under the DPDP Act
- Right to access — request a summary of personal data we hold about you.
- Right to correction and erasure.
- Right to grievance redressal — write to our Grievance Officer at sales@aceonehr.com.
- Right to nominate — appoint another person to exercise your rights on your behalf.
- Right to withdraw consent — for any processing we do on the basis of your consent.
6. Sharing
We do not sell personal data. We share it only with:
- Sub-processors needed to run the service — cloud hosting, transactional email, payment gateways. Each is bound by a data-processing agreement.
- Government authorities when required by Indian law.
- Your customer organisation (if you are an employee using AceOne HR through your employer's tenant).
7. Security
We follow industry-standard technical and organisational measures — TLS in transit, encryption at rest, scoped access control, audit trails, regular backups, and least-privilege engineering practices. Details are in our Data Processing & Security Statement.
8. International transfers
Customer data is hosted in India by default. Sub-processors outside India are used only where unavoidable (e.g. transactional email delivery) and only under data-processing terms that meet DPDP Act standards.
9. Children
The AceOne HR platform is intended for use by adults in a workplace context. We do not knowingly collect personal data from anyone under 18 outside that context.
10. Changes to this policy
We may revise this policy as our platform evolves and as Indian privacy law develops. Material changes will be flagged on this page with a new "Last updated" date and, where significant, by direct notice to active customers and registered users.
11. Contact
Questions, requests, or grievances can be sent to sales@aceonehr.com or by post to our registered office. We will acknowledge within 7 working days and aim to resolve within 30 days.