Privacy Policy

Business admins and staff using PAYA Workforce (attendance, payroll, geo-fence, face verification).

Schools and institutes using PAYA Campus (students, teachers, parents, fees, gate kiosk, report cards).

Parents and students where a school has enabled the parent or student portal. Schools are responsible for informing their community and obtaining any consent required under applicable law.

Depending on your role and plan, we may process:

• Account data — name, mobile number, email (if provided), role, business or school affiliation, login credentials (PIN/password stored securely via our auth provider).
• Attendance & workforce data — punch-in/out times, worked hours, leave, approvals, department, employee code, wage type, salary or hourly rates, statutory fields (e.g. PF UAN, ESI number when configured).
• Location data — GPS coordinates at punch-in/out when geo-fence or location features are enabled by your employer or school.
• Photos & biometrics-related data — selfie images and face-match scores used for attendance verification (reference selfie, punch selfies, kiosk captures). We do not sell biometric templates; images are used to operate verification features you enable.
• Campus data — student profiles, class/section, parent contact numbers, attendance, fees, report cards, hostel records, and messages sent through school features.
• Documents — files uploaded by admins for staff records where that feature is used.
• Payment data — subscription payments are processed by Razorpay; we receive payment status and amounts, not full card numbers stored on our servers.
• Technical data — device/browser type, IP address, app logs, and cookies or local storage needed for sign-in and security.

• Provide attendance, payroll, school ERP, parent alerts, and related features.
• Verify identity and prevent buddy-punching or fraud where face or geo features are enabled.
• Generate payslips, reports, fee invoices, and exports requested by your organization.
• Send WhatsApp or in-app messages when your organization triggers them (e.g. attendance alerts, fee reminders).
• Operate subscription billing and customer support.
• Improve reliability, security, and product experience (including optional AI help chat on public pages).
• Comply with law and respond to lawful requests.

We use trusted processors to run PAYA, including:

• Supabase — authentication, database, and file storage.
• Vercel — website and API hosting.
• Razorpay — payment processing for subscriptions.
• Amazon Web Services (Rekognition) or similar — face comparison when AI face verification is enabled on your plan.
• OpenAI (optional) — AI help assistant when configured by the operator; questions are answered from product documentation, not live payroll databases.
• Analytics — e.g. Vercel Analytics, Speed Insights, and marketing pixels only as configured on the public site.

We do not sell your personal data. We may share data within your organization (e.g. admins viewing staff attendance).

We retain data while your organization has an active account and as needed for payroll, audit, and legal obligations. When an account ends, we delete or anonymize data within a reasonable period unless law requires longer retention. Your employer or school may export records before closure.

We use encryption in transit (HTTPS), access controls, and industry-standard hosting practices. No system is 100% secure; please use a strong PIN, do not share login details, and report suspected misuse promptly.

Depending on applicable law (including India's Digital Personal Data Protection Act, 2023), you may:

• Request access, correction, or deletion of your personal data.
• Withdraw consent where processing is consent-based.
• Lodge a complaint with a supervisory authority.

Staff and parents should contact their employer or school admin first; they control most workforce and student records. For platform-level requests, contact us below.

PAYA Campus may process data about students, including minors. Schools must have a lawful basis to collect student and parent data and to use PAYA. Parents may contact the school to access or correct a child's records.

Data may be processed in India and on infrastructure operated by our providers in other countries with appropriate safeguards as required by contract and law.

We may update this policy. We will post the new version on this page with an updated effective date. Continued use after changes means you accept the revised policy.

Vooz Ecom LLP
Product: PAYA · Website: payaindia.com

Support (WhatsApp): Message us