Privacy Policy

1. Overview

Bosswala is a work app built for small business owners in India and their staff — it covers staff attendance tracking and a shared leads/enquiry board. This policy explains what information Bosswala collects when a firm and its staff use the app, why, and what choices you have about it. It applies whether you're a firm's admin, a staff member using an account your admin created for you, or a visitor to bosswala.com.

Bosswala doesn't have public sign-up — every account is created either by us or by a firm's own admin, for people who actually work at that firm. There's no advertising in Bosswala and we don't sell personal data.

2. Information we collect

Account information. When your firm is set up, or when your admin adds you as staff, we collect your first name, last name (if given), username, email address, phone number (if given), and your role (admin or staff). Your password is stored as a salted hash — we never store it, and can't see it, in plain text.

Location, only while you're punching in or out. When you punch in or out on Attendance, Bosswala reads your phone's GPS location at that moment and compares it against the worksite your admin registered, so a punch can be checked against where it was meant to happen. Bosswala only requests location access "while using the app" — it does not track your location continuously or in the background, and doesn't read your location for any reason other than an attendance punch.

Business data your firm enters ("Leads"). Your firm's admin and staff can enter names, phone numbers, how a lead came in, and freeform notes about your own customers and enquiries. This is your business's own data about your own customers — we store and host it on your firm's behalf so your team can access it; we don't read it for our own purposes or use it for our own marketing.

Usage and device information. Like most apps and websites, our servers automatically log standard technical information — things like IP address, device and OS type, and app version — when you use Bosswala. We use this only for security, troubleshooting, and keeping the service running.

3. How we use it

We use the information above to:

• Run Bosswala's core features — sign-in, attendance punches and worksite checks, and the leads board.
• Send account-related emails, such as password resets, to the email address on your account.
• Respond when you contact us for support.
• Keep the service secure, diagnose problems, and improve reliability.
• Meet our legal and regulatory obligations.

4. How we share it

We don't sell personal data, and we don't share it for advertising. We do share information in these specific cases:

• Within your firm. Your name and role are visible to your firm's admin, since that's how the product works. Leads you or a teammate create are visible to your firm's other admins and, depending on assignment, your teammates — that's the point of a shared board.
• Service providers we use to run Bosswala:
  • Google Cloud Platform — hosts our servers and database.
  • Brevo — sends transactional emails, such as password resets, on our behalf.
  • Google Maps / Places — used when your admin registers or looks up a worksite address.
  These providers only receive what they need to perform that specific function for us, and aren't permitted to use it for their own purposes.
• WhatsApp. The one-tap follow-up button on a lead opens a chat directly inside your own WhatsApp app, with a message pre-filled — this link is built entirely on your device. Bosswala's servers never send this message and never transmit lead data to WhatsApp or Meta.
• Legal reasons. If required to comply with the law, or to protect the rights, property, or safety of Bosswala, our customers, or others.

5. Data retention

Bosswala treats attendance and leads records as part of your firm's own business records, not disposable data — a deactivated staff account, or a lead marked "lost," is kept on file the same way a paper register or ledger would be, rather than being automatically erased. We retain information for as long as your firm's account is active, and afterward for as long as reasonably needed for legitimate business or legal purposes, unless you ask us to delete it sooner — see "Your choices" below.

6. Security

Passwords are hashed, never stored in plain text. Sign-ins use short-lived access tokens paired with rotating refresh tokens, and all traffic between the app and our servers is encrypted in transit (HTTPS/TLS). No method of transmission or storage is completely secure, and we can't guarantee absolute security, but we work to protect your information using practices appropriate to the kind of data Bosswala handles.

7. Your choices

You can update your own email or phone at any time from Settings in the app. For anything else on your account — your name, username, or role — ask your firm's admin, who manages that on your behalf. You can also email us at support@bosswala.com to ask what personal data we hold about you, to correct it, or to request that it be deleted; we'll respond within a reasonable time and consistent with the Digital Personal Data Protection Act, 2023 and other applicable law.

8. Children's privacy

Bosswala is a work tool for firm owners and their staff — it isn't directed at children, and we don't knowingly collect personal information from anyone under 18.

9. Changes to this policy

We may update this policy as Bosswala changes. If we make a material change, we'll post the updated policy here with a new effective date. We encourage checking back occasionally, especially before providing new kinds of information.

10. Contact us

Questions about this policy, or a request about your data, can go to Shridha Technologies at support@bosswala.com.