Draft — pending legal review. This policy is a working draft and is not yet in force.

Privacy Policy

Last updated: November 2026

1. Who we are

WAP Workforce Analytics ("WAP", "we", "us") is a product of Serviots, Inc. ("Serviots"), operated from its India office at 905, Dwarkesh Business Hub, Motera, Ahmedabad, Gujarat 380005, India. WAP helps organisations understand attendance, activity, projects and leave across their teams.

2. Our role under the DPDP Act

Under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), the organisation that signs up for WAP (your employer, the "Customer") decides why and how its employees' personal data is processed and is the Data Fiduciary. WAP processes that data on the Customer's behalf as a Data Processor. For data about people who visit this website or contact us directly, WAP acts as the Data Fiduciary.

3. What we collect

• Account details: name, work email, employee code, role, manager and joining date, provided by the Customer.
• Work activity, while checked in: check-in and check-out times and location (if the Customer sets an office location), breaks and meetings, the name of the application in use, window or tab titles, and whether the computer is active or idle.
• Projects and leave: project time entries, leave requests, approvals and balances.
• Device details: computer name, operating system and agent version for each linked computer.
• Website enquiries: the details you submit in our trial or demo forms.

WAP does not record keystrokes, take screenshots or access cameras or microphones.

4. How the data is used

• To provide the service to the Customer: dashboards, reports, alerts, projects and leave management.
• To keep the service secure, reliable and working correctly.
• To respond to enquiries and provide support.

We do not sell personal data, and we do not use Customer data for advertising.

5. Who can see it

Inside a Customer, access follows the roles the Customer configures: employees see their own data; managers, HR and admins see what their role allows. Each Customer's data is kept separate from every other Customer's. Our staff access Customer data only when needed to provide support or keep the service running.

6. Where it is stored and for how long

Data is stored on servers in India (AWS, Mumbai region) and backed up daily. Detailed activity records are kept for 12 months and then deleted. When a Customer closes their account, their data is deleted within 30 days, unless the law requires us to keep it longer.

7. Security

Data is encrypted in transit, access is controlled by role, and administrative actions are recorded in an audit log. No system is perfectly secure; if we become aware of a personal data breach we will notify the affected Customer and the Data Protection Board of India as the DPDP Act requires.

8. Your rights

If you are an employee of a Customer, please contact your employer first: they decide how your data is used and can act on requests to access, correct or erase it. We will help them respond. You can also contact us using the details below. You may nominate another person to exercise your rights, and you can raise a grievance with us or with the Data Protection Board of India.

9. Contact and grievance officer

Grievance Officer, Serviots: privacy@serviots.com, 905, Dwarkesh Business Hub, Motera, Ahmedabad, Gujarat 380005. General questions: info@serviots.com. We aim to respond within the period required by law.

10. Changes

We will post any changes to this policy here and, for material changes, notify Customers by email.