Privacy policy

What we collect, why, and what you can ask us to do with it.

Last updated: 11 October 2026

1. Who we are

Payroll Bundals, at payrollbundals.com, is attendance, salary and compliance software for Indian businesses. It is a product of Bundals Private Limited, a company in India. In this policy "we" means Bundals Private Limited. "You" means a business that uses Payroll Bundals, or a person who visits this website.

This policy is written with the Digital Personal Data Protection Act, 2023 (the DPDP Act) in mind. It is a plain-language summary of what we do. It is not legal advice to you.

2. Today, before sign-up opens

The app is not open to customers yet. This website has no forms and no accounts, and it does not use advertising or tracking cookies. So we collect nothing from you through this site today.

• If you write to us by email, we receive your email address and whatever you write. We use it only to reply to you.
• The pages load their fonts from Google Fonts, so your browser makes a request to Google when a page opens.
• The service that hosts this website may keep routine technical records of requests, such as the time and the address a request came from, to run and protect the site.

The rest of this policy describes how Payroll Bundals handles data once accounts open.

3. Two kinds of data

Your account data. When you sign up we collect your name, the name of your business, your email and a password. The password is stored only as a salted one-way hash, so we cannot read it. For this data we decide how it is used. The DPDP Act calls this role a "data fiduciary".

Your business data. Everything you put in the app. This data is yours. We keep it only to run the service for you and we work on your instructions. The DPDP Act calls this role a "data processor". Each business's data is kept separate from every other business.

How these two roles apply to your own business is a point to check with your adviser.

4. What your business data can include

• Your people: name, kind of work, phone number, how they are paid and the rate, date of joining.
• Attendance, shifts, leave, overtime, pieces made, expense claims and the bill photos attached to them.
• Salaries, advances, loans and payslips.
• Bank account or UPI details, for the people you do not pay in cash.
• PF and ESI numbers, and a PAN if you enter one in the Tax app.
• Joining details and papers that you or a joiner upload. For Aadhaar, only the last four digits are kept.
• The logins you create for your team and your chartered accountant, and a log of the changes each login makes.

5. What we use it for

• To run the app and the worker links you send.
• To bill you, once prices are published and you have chosen to pay.
• To reply when you ask for support.
• To keep the service safe: login sessions and an edit log.

We do not sell your data. We do not use your business data for advertising. Salary, tax and compliance figures are worked out by fixed rules, not by AI.

6. Where it is kept

Data is stored on servers in India. On screen, bank account numbers, PF and ESI numbers and PAN are shown masked.

7. Who else sees it

• Your workers. Each worker sees only their own details, such as payslips and advance balance, through the link you send them. The link has no password, so whoever holds the link can open that page. Send each link only to the person it belongs to.
• People you add. Managers, accountants and your chartered accountant see only the apps you give them.
• WhatsApp. Payroll Bundals does not send WhatsApp messages. When you press Send on WhatsApp, your own WhatsApp opens with the message ready and you send it. What you send is then handled by WhatsApp under its own terms.
• Hosting provider. Our servers are rented from a hosting company, which stores the data for us.
• The law. We share data when a valid legal order requires it.

We do not send anything to government sites or to banks. We make the files and sheets. You or your chartered accountant upload them.

8. How long we keep it

We keep your data while your account is open. When you close your account you can first write to us for a copy of your data. After that we delete your data, except records that the law requires us to keep.

9. Your rights

Under the DPDP Act you can ask us for a summary of the personal data we hold about you, ask us to correct or erase it, withdraw a consent you gave, name another person to act for you, and raise a grievance. Write to info@bundals.com for any of these, including a grievance. We will reply by email.

If you are not satisfied with our reply, the Act provides for a complaint to the Data Protection Board of India. The Act and its rules are being brought into force in stages, so verify the current position with a lawyer before you rely on a particular right or time limit.

If you work for a business that uses Payroll Bundals, please ask that business first. It decides what is done with your details.

10. Cookies

The app sets one cookie to keep you logged in. This website does not use advertising or tracking cookies.

11. Keeping it safe

Each person has their own login, and the owner decides which apps each login can open. Changes are written to an edit log with who made them and when. No system is perfectly safe. If we learn that your data has been exposed, we will tell the account owner and do what the law requires.

12. Changes

If we change this policy we will post the new version here with a new date at the top. Once accounts are open, we will also tell account owners by email before a change applies.

13. Contact

Bundals Private Limited, India. For any question, request or grievance about your data, write to info@bundals.com. See also our terms of service.