Version 2026-10 · under India's Digital Personal Data Protection Act, 2023
HRPM is used by your employer to run HR — employee records, attendance and approvals. Your employer decides why your data is processed (the data fiduciary); HRPM processes it on their behalf.
Name, date of birth, gender, contact details, family members you add, identity document numbers (stored encrypted, shown only masked) and copies you upload, employment details, attendance punches (time, and the IP address of the device used), and a record of actions in the app.
To keep your employment record, verify your identity once (so you are not registered twice), record attendance for pay, handle approvals, and meet labour-law duties of your employer. Nothing is sold or used for advertising.
When your firm subscribes, we keep a record of the payment (amount, date, invoice, transaction reference) and, where your firm's country requires it, the business/identity verification documents its owner submits (PAN/Aadhaar/GSTIN/Udyam in India, EIN in the US, or the equivalent registration/tax numbers elsewhere — stored encrypted, shown only masked). Your card, bank or other payment details are entered directly on the payment gateway's own page; HRPM never receives or stores them.
Your firm's administrators, and your team leads for what their role allows. Another firm never sees your employment history with this firm. HRPM support staff only when helping your firm. The payment gateway that processes your firm's subscription payment, strictly to complete that payment — never for marketing. We do not sell data to anyone.
For as long as you work for the firm and afterwards for the period labour and tax laws require. Your identity record (ERN) is kept so that you are recognised if you join again.
You can see your details on your profile, ask for a correction there, and raise a grievance with your firm or with us (below). You can withdraw consent by asking your employer; some records must still be kept by law.
Encrypted identity numbers, per-firm data isolation, access by role, every action logged, and regular backups.
Contact your firm's HR administrator first. Our Grievance Officer under the Digital Personal Data Protection Act, 2023: Ashok Tiwari · admin@mics.asia
We acknowledge a grievance within 48 hours and resolve it within 30 days.