Privacy policy

Last updated 17 October 2026

Workdome is operated by Daiviksoft Technologies Private Limited ("Daiviksoft", "we"), Kochi, Kerala, India. This policy explains what we collect, why, where it goes, and what you can ask us to do about it — for this website and for the Workdome application.

1. Two different roles

When you visit this website, we are the data fiduciary for the little we collect here. When your employer uses Workdome, they are the data fiduciary for the employee, customer and financial records they put into it, and we are a data processor acting on their instructions. If you are an employee of a customer and want your records corrected or erased, ask your employer — they control that data, and we act on their instruction.

2. What we collect on this website

• What you send us through the demo request form: your name, work email, company, team size and message, plus your phone number, current tools and modules of interest if you give them. We record it in our own Workdome CRM and use it only to arrange and follow up on your demo.
• How you found us, sent with the form: the campaign tags in the link you arrived by (such as utm_source), the name of the site that referred you (never the full address) and the first page you landed on. Your browser holds this only for the current visit, in session storage that is cleared when you close the tab. It sets no cookie.
• Request data that Cloudflare, which serves this website, processes to deliver and protect it.
• Website analytics, described in the next section.

This website does not set advertising cookies, runs no advertising pixels, and does not sell or share personal data with advertisers.

3. Cookies and analytics

On this website two kinds of measurement run, and they behave differently:

• Cloudflare Web Analytics runs on every visit and sets no cookies. It counts page views and loading performance without identifying you or following you across sites, so it needs no consent.
• Google Analytics 4 and Microsoft Clarity set cookies and are off until you accept them in the banner. Nothing from either tool loads, and no cookie is set, unless you press Accept. If you accept, Clarity records how pages are used — mouse movement, clicks and scrolling — to show us where the site is confusing; it masks what you type into forms. Google Analytics data is kept for 14 months and Clarity recordings for 30 days.

Change my cookie choice

In the Workdome application (app.workdome.ai) there are no analytics or tracking tools. It sets one essential cookie, which keeps you signed in (HTTP-only, valid for seven days), and stores your current session in your browser's local storage.

4. What the application holds

Workdome holds what your employer's CRM, HR, payroll, finance, recruiting and learning records need. Depending on which modules a company uses, that can include:

• contact details and employment records — role, reporting line, documents, emergency contacts;
• attendance, shifts and leave;
• salary structures, payroll, payslips, tax declarations, loans and bank account details;
• statutory identifiers such as PAN, UAN and Aadhaar;
• performance reviews, disciplinary records and exit interviews;
• CRM contacts, leads, deals and invoices;
• job applications;
• learning records — and, if a company uses proctored assessments, webcam snapshots taken during them;
• questions asked of the assistant (section 5);
• an audit log of activity, including IP addresses.

Access is permission-scoped: a person sees a record because their role and their relationship to it allow it, not because they are signed in. Sensitive fields are masked for anyone whose role does not allow them, every read of sensitive personal data is recorded in an audit log your administrators can review, and exporting personal data needs its own permission and is itself audited.

5. The AI assistant

Workdome's assistant is off until a company administrator turns it on. When it is on:

• Questions about your own records — your leave balance, your approvals, who reports to you — are answered from Workdome's database. They are not sent to a language model.
• Policy and how-to questions are answered from your company's handbook and Workdome's user guide. To write the answer, the question, the earlier turns of that conversation and the relevant handbook or guide passages are sent to OpenRouter, which passes them to a third-party language model.
• Stored questions are deleted automatically after the retention period your administrator sets — 90 days unless they change it.

Separately, the business summary card in Microsoft Teams can carry a one-line headline written by the same language-model service from aggregate figures only — totals, not any individual's data. Searching the handbook is done on our own servers; that step sends nothing to a third party.

6. Where data is stored

Workdome runs on Amazon Web Services in the Asia Pacific (Mumbai) region: the application, its database and uploaded files are stored in India. Each customer's data is kept separate by the application — every request is checked against the company it belongs to, and uploaded files are stored under a per-company location that is checked on every access. The services in section 7 that operate outside India receive only what is described there.

7. Who else processes data

• Amazon Web Services — hosting, database and file storage, in Mumbai.
• A transactional email provider — invitations, notifications and password resets.
• OpenRouter and the language-model providers it routes to — the assistant, only when your administrator turns it on, and the Teams summary headline (section 5). These operate outside India.
• Microsoft — only if your company connects it: Microsoft sign-in (which reads your basic profile), the Teams app, and calendar entries for approved leave.
• Integrations your company chooses to connect — Zoom, ClearTax, Zoho, GitHub, Jira or ClickUp. Data flows only after an administrator connects one, under your company's own account with that provider.
• Cloudflare — serves this website.
• Google and Microsoft (Clarity) — website analytics, only if you accept them (section 3).

Customers can ask for the current list at any time, and we give notice before adding a provider that processes customers' personal data.

8. Security

• Connections to the website and the application use TLS, with HSTS.
• Passwords are stored as salted bcrypt hashes. Companies can use Microsoft sign-in instead, which lets them apply their own multi-factor authentication.
• Credentials for connected integrations are encrypted before they are stored.
• Access control, masking and audit work as described in section 4.

9. Retention

• Customer data is kept for as long as the customer's account is active, and afterwards only for as long as a legal or statutory obligation requires — financial records and audit logs have retention periods set by Indian law that we cannot shorten on request.
• Assistant questions: the period the company's administrator sets, 90 days by default.
• Demo requests: while we are in conversation with you, and deleted on request.
• Website analytics: 14 months (Google Analytics) and 30 days (Clarity recordings), and only if you accepted them.

10. Your rights under the DPDP Act 2023

Indian data principals may request access to their personal data, correction of inaccurate data, erasure, and the nomination of another person to exercise these rights, and may withdraw consent at any time where processing relies on it. Where your employer is the fiduciary, route the request through them; we will support them in fulfilling it. For anything we hold as fiduciary — demo requests, website analytics — write to [email protected] and we will respond within 30 days.

11. Children

Workdome is a business product and this website is not intended for anyone under 18. We do not knowingly collect data from children here; if you believe we have, write to us and we will delete it.

12. Grievance Officer

If you have a complaint about how Workdome or this website handles personal data, write to our Grievance Officer:

Grievance Officer, Daiviksoft Technologies Private Limited
Email: [email protected]
Post: 1-4-2, 55/10, Puthiya Road, Vennala, Kochi, Kerala 682028, India

We resolve grievances within one month of receiving them, as the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 require. If you are not satisfied with the outcome, you may complain to the Data Protection Board of India.

13. Changes

The date at the top shows when this policy last changed. A change to what this website collects or why also resets the cookie banner, so you are asked again rather than quietly opted in.

14. Contact

Privacy questions and DPDP requests: [email protected].