1. Information We Collect
1.1 Information You Provide
- Account registration: full name, email address, password (hashed), job role
- Profile information: profile photo, phone number (optional)
- Organisation details: company name, branding preferences, billing contact
- Time entries: project descriptions, service verticals, work types, hours logged
- Messages: chat messages sent through the in-app messaging feature (powered by Stream Chat)
- Payment information: billing details processed by Razorpay; we do not store card numbers
1.2 Information Collected Automatically
- Log data: IP address, browser type, operating system, pages visited, timestamps
- Device information: device type, screen resolution, language preferences
- Usage analytics: features used, session duration, click events
- Cookies and similar tracking technologies
1.3 Information from Third Parties
- Single Sign-On (SSO): if you log in via Microsoft Azure AD or Google OAuth, we receive your name, email, and profile picture
- Payment status: Razorpay sends us payment confirmation webhooks
2. How We Use Your Information
To create and manage your account and organisation workspace
To provide core Platform features: time tracking, project management, approvals, messaging
To generate AI-powered insights using anonymised aggregated data via OpenAI
To send transactional emails: account verification, password reset, timesheet reminders
To process subscription payments via Razorpay on behalf of Arismeta Technologies Pvt. Ltd.
To enforce our Terms and Conditions and detect fraudulent activity
To improve the Platform through usage analytics and feedback
To comply with applicable Indian laws and regulatory requirements
4. Data Storage & Security
Your data is stored on MongoDB Atlas servers. We implement industry-standard security measures including:
AES-256 encryption
All stored data encrypted at rest.
TLS 1.2+ in transit
All data in motion is encrypted.
HTTP-only cookies
Secure cookies for session management.
JWT authentication
Token-based auth with blocklisting.
bcrypt password hashing
Passwords hashed with salt rounds.
Rate limiting
IP-based abuse detection and rate limits.
While we take all reasonable precautions, no method of transmission over the internet is 100% secure. We encourage you to use strong passwords and keep your credentials confidential.
5. Data Retention
6. Your Rights
Under applicable data protection laws, you have the following rights. To exercise any of these, contact us at info@peoplefold.com:
Request a copy of your personal data we hold.
Request correction of inaccurate or incomplete data.
Request deletion of your data (subject to legal retention requirements).
Request your data in a machine-readable format (CSV/JSON).
Request that we limit how we use your data.
Object to data processing for marketing or analytics purposes.
Withdraw consent at any time without affecting prior lawful processing.
7. Children's Privacy
PeopleFold is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, contact us immediately at info@peoplefold.com and we will delete it promptly.
8. International Data Transfers
Your data is primarily processed and stored in India. Some third-party service providers (such as GetStream.io and OpenAI) may process data in other jurisdictions. We ensure appropriate safeguards are in place in accordance with applicable data protection laws.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email at the address associated with your account or via an in-app notification. Continued use of PeopleFold after the effective date constitutes acceptance of the revised policy.
10. Contact Us
Privacy Team
Arismeta Technologies Pvt. Ltd., Dr. BR Ambedkar Rd, Ramanashree Enclave, Bilekahalli, Bengaluru, Karnataka, India
For any privacy-related queries or to exercise your rights, contact us at info@peoplefold.com or visit https://app.peoplefold.com. We will respond to all requests within 30 days.