Privacy policy

Last updated 18 September 2026

Workdome is operated by Daiviksoft Technologies Pvt Ltd ("Daivik Tech", "we"), Kochi, Kerala, India. This policy explains what we collect, why, and what you can ask us to do about it.

Two different roles

When you visit this website, we are the data fiduciary for the little we collect here. When your employer uses Workdome, they are the data fiduciary for the employee, customer and financial records they put into it, and we are a data processor acting on their instructions. If you are an employee of a customer and want your records corrected or erased, ask your employer — they control that data, and we act on their instruction.

What we collect on this website

• What you send us through the contact form: your name, email, company and message.
• Aggregate usage statistics, only where analytics is enabled, with IP addresses anonymised.

This website does not set advertising cookies and does not sell or share personal data with advertisers.

What the application holds

Workdome stores what a CRM, HR and finance system needs: contact details, employment records, attendance and leave, payroll and statutory identifiers, and financial transactions. Access is permission-scoped — a person sees a record because their role and their relationship to it allow it, not because they are signed in. Reads of sensitive personal data are recorded in an audit log available to your administrators.

Where data is stored

Data is stored in India, in the AWS Asia Pacific (Mumbai) region. Each customer's data is isolated from every other customer's at the database level.

Your rights under the DPDP Act 2023

Indian data principals may request access to their personal data, correction of inaccurate data, erasure, and the nomination of another person to exercise these rights. Where your employer is the fiduciary, route the request through them; we will support them in fulfilling it.

Retention

We keep customer data for as long as the customer's account is active, and afterwards only for as long as a legal or statutory obligation requires — financial records and audit logs have retention periods set by Indian law that we cannot shorten on request.

Sub-processors

We use a small number of infrastructure and communication providers to run the service. Customers can request the current list, and we will give notice before adding one that processes personal data.

Contact

Privacy questions and DPDP requests: privacy@daiviktech.com.