Privacy Policy

Introduction

Nissi Infotech ("we", "our", or "us") develops and operates the eBLACKDOG suite of software products, including eBLACKDOG ERP, eBLACKDOG Payroll, eBLACKDOG Payroll Pro, eBLACKDOG SENTINEL, eBLACKDOG PATROL, eBLACKDOG VISIT, and related web portals, mobile applications and cloud services.

This Privacy Policy explains how we collect, use, store, process, disclose and protect personal data when you or your organisation use our software, mobile applications, websites and related services.

This policy applies to:

• Website visitors
• Customer organisations
• Authorised administrators and users
• Employees, workers or contractors whose information is entered into the system by a customer organisation

Nissi Infotech acts as a Data Processor for employee and workforce data entered into the system by customer organisations and acts as the Data Fiduciary (Data Controller where applicable) for customer account information, billing information and authorised user information in accordance with applicable laws, including the Digital Personal Data Protection Act, 2023.

Information We Collect

A. Customer Organisation & Authorised User Information

We may collect:

• Name
• Designation
• Company name
• Mobile number
• Email address
• Billing address
• GSTIN
• Subscription information
• Login credentials
• Account activity
• Support communications

B. Employee / Workforce Information

Depending upon the modules subscribed by the customer organisation, the following information may be stored:

• Employee name
• Employee code
• Photograph
• Mobile number
• Date of birth
• Gender
• Blood group
• Aadhaar number or other identity documents (only if voluntarily uploaded by the customer organisation)
• Bank account information
• Salary information
• Attendance records
• GPS location
• Geo-fence check-in/check-out
• Selfie verification images
• Duty allocation
• Shift information
• Site assignment
• Leave records
• Overtime records
• Payroll information
• Patrol reports
• Visit reports
• Incident reports

We strongly recommend that customer organisations avoid uploading Aadhaar numbers or other sensitive identity documents unless specifically required for legitimate business or legal purposes. Nissi Infotech does not verify, authenticate or validate any identity documents uploaded by customers.

C. Technical Information

Our systems may automatically collect:

• Device information
• Operating system
• Browser information
• IP address
• Device identifiers
• Application version
• Crash logs
• Usage analytics
• Cookies
• Network information

Customer Responsibility

Customer Organisations are solely responsible for:

• Obtaining all necessary permissions, notices and consents under applicable laws before collecting or uploading any personal information (including photographs, GPS data, attendance records, payroll data or identity documents) into eBLACKDOG.
• Ensuring that the collection and processing of employee data is lawful and limited to what is necessary for their business purposes.
• Responding to requests from their employees regarding access, correction or deletion of personal data.

Nissi Infotech processes such information solely on behalf of the Customer Organisation for the purpose of providing the subscribed services.

Accuracy of Customer Data

Customer Organisations are solely responsible for ensuring that all information entered into eBLACKDOG is accurate, complete, lawful and up to date. Nissi Infotech does not independently verify information uploaded by customers.

How We Use Information

We use personal information only for legitimate business purposes, including:

• Providing subscribed software services
• Attendance management
• Payroll processing
• Workforce management
• Geo-fencing and GPS attendance
• Selfie verification
• Patrol management
• Visit and incident reporting
• Business reporting and analytics
• Customer support
• Software maintenance and improvement
• Security monitoring and fraud prevention
• Billing and account administration
• Compliance with applicable laws

We do not sell personal information. Employee information is never used for advertising, marketing or profiling purposes.

Legal Basis for Processing

Where applicable, we process information on the basis of:

• Consent
• Performance of a contract
• Legitimate business purposes
• Employment-related purposes
• Compliance with applicable laws, including the Digital Personal Data Protection Act, 2023 and other applicable regulations

AI Features

Certain modules may include Artificial Intelligence (AI) assisted features for reporting, workflow automation, analytics, communication assistance and business process automation.

AI-generated results are provided solely as decision-support tools and should always be independently reviewed and verified by authorised users before any business, employment, payroll or compliance decision is made.

Customer data, including employee photographs, location data, attendance records, payroll information and other workforce data, is not used to train, retrain or improve any Artificial Intelligence models.

Third Party Services

Certain features of our software may integrate with third-party service providers, including but not limited to:

• Google Maps
• Google Play Services
• Firebase
• SMS Gateway Providers
• Email Service Providers
• WhatsApp Business
• Voice Communication Providers
• Payment Gateway Providers
• Cloud Hosting Providers

These providers receive only the limited information reasonably necessary to provide the requested functionality and operate under their own privacy and security obligations. We require such providers to protect the information appropriately through contractual agreements.

The use of third-party services is governed by the respective privacy policies and terms of those providers.

Sharing of Information

We do not sell personal information.

Information may be shared only:

• With the customer organisation that owns the account
• With authorised users of that organisation
• With trusted service providers under contractual confidentiality and data protection obligations
• Where required by law, regulation or government authority
• Under valid court orders or legal process
• During mergers, acquisitions or business restructuring (with appropriate notice)
• To protect our legal rights, safety or property

Data Retention

Customer account and billing information is retained while the subscription remains active and thereafter for a reasonable period (typically up to 3–7 years) as required for accounting, legal, tax and contractual purposes.

Employee information, including attendance, payroll, photographs, GPS data and reports, is retained according to the retention settings configured by the customer organisation or as required under applicable labour and other laws.

Upon a valid request from the customer organisation or as required by law, information will be deleted or anonymised, unless retention is necessary for legal compliance or dispute resolution.

Data Security

We implement commercially reasonable administrative, technical and organisational security measures, including:

• HTTPS/TLS encryption for data in transit
• Secure authentication mechanisms
• Role-based access control
• Multi-tenant data isolation
• Audit logging
• Secure cloud infrastructure
• Regular security reviews
• Restricted access controls

Although we implement appropriate safeguards, no electronic system or method of transmission over the Internet can be guaranteed to be completely secure.

Customers are responsible for maintaining strong passwords, controlling user access rights, and protecting their login credentials.

Mobile Application Permissions

Depending upon the subscribed modules, our mobile applications may request permission to access:

• Camera (for attendance selfies, photographs and incident reporting)
• Location (for GPS attendance, patrol verification and geo-fencing)
• Storage (for uploading documents and images)
• Notifications (for attendance reminders, alerts and service notifications)
• Internet access (for communication with cloud servers)

Permissions are requested only when required for the subscribed functionality. Users may manage permissions through their device settings; however, certain features may not function without the required permissions.

Rights of Individuals

Subject to applicable laws (including the Digital Personal Data Protection Act, 2023), individuals may request:

• Access to their personal information
• Correction of inaccurate or incomplete information
• Erasure of personal information where legally permitted
• Withdrawal of consent (where processing is based on consent)
• Grievance redressal

Employees and workers should first contact their employer (the Customer Organisation), as the Customer Organisation controls the employee data stored in eBLACKDOG.

Authorised users and customer organisations may submit requests by email to admin@nissiinfotech.com. Please include sufficient details to identify the individual and clearly state the nature of the request. We will respond within the timelines prescribed under applicable law.

Data Breach Notification

In the event of a personal data breach that is likely to cause harm to individuals, we will notify the Data Protection Board of India and affected individuals as required under the Digital Personal Data Protection Act, 2023 and the rules framed thereunder.

Grievance Officer

For privacy-related concerns or grievances, please contact:

We will acknowledge the complaint and respond within the timelines prescribed under applicable law.

Children's Privacy

Our products are intended strictly for business use. We do not knowingly collect personal information from children under the age of 18 years.

International Processing

Our services are primarily offered to customers in India. However, the software and mobile applications may be accessed by customers in other countries where they are made available.

Personal information is primarily stored and processed within India. Certain integrated third-party services or cloud infrastructure providers may process limited information outside India only where necessary to provide the subscribed services.

Any such processing will be carried out in accordance with applicable laws and with appropriate contractual and technical safeguards.

Cookies

Our websites may use cookies and similar technologies to:

• Improve website functionality
• Remember user preferences
• Analyse website traffic
• Improve user experience

Users may disable cookies through their browser settings, although certain features of the website may not function correctly if cookies are disabled.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website and within our applications.

Continued use of our products after publication of an updated policy constitutes acceptance of the revised Privacy Policy.

Disclaimer

While Nissi Infotech implements commercially reasonable administrative, technical and organisational safeguards to protect personal information, no electronic system or method of transmission over the Internet can be guaranteed to be completely secure.

To the maximum extent permitted by applicable law, Nissi Infotech shall not be responsible for losses arising from:

• Misuse of customer credentials
• Weak or shared passwords
• Unauthorised access resulting from customer-side security failures
• Improper system configuration by customers
• Events beyond our reasonable control

Governing Law & Jurisdiction

This Privacy Policy shall be governed by and interpreted in accordance with the laws of India.

Any dispute arising out of or relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts at Coimbatore, Tamil Nadu, India, unless otherwise required by applicable law.

Contact Us

If you have any questions regarding this Privacy Policy or our privacy practices, please contact:

This Privacy Policy is published in English. In the event of any inconsistency between translated versions and the English version, the English version shall prevail.