Privacy & Employee-Monitoring Policy

This Policy is issued by Ram Dhari Fintech Private Limited (the “Service Provider”) in respect of its secure vault and access-control software platform marketed under the brand “TickMyWork” (the “Services”). It explains the information the Services process, how it is used, and the responsibilities of the organisation deploying the Services (the “Customer”) and its employees.

1. Information Processed by the Services

2. Monitoring Features

The Services include activity-monitoring capabilities intended to support the Customer’s data-security and access-control policies. These operate on devices enrolled by the Customer and may capture the following:

• periodic screen captures;
• keyboard and mouse activity counts;
• websites and webmail hostnames visited, together with associated upload sizes;
• file upload and download records;
• USB, print, and other data-transfer events;
• email-access attempts; and
• application-installation attempts.

3. Purpose of Processing

The information described above is processed in order to: (a) provide secure, access-controlled storage and retrieval of the Customer’s files; (b) enforce the Customer’s access policies and detect misuse; and (c) operate, maintain, and support the Services.

4. Roles and Responsibilities

The Customer determines what data is stored and monitored and is responsible for the lawfulness of that use (the “controller” / data fiduciary). The Service Provider processes the data only in order to operate the Services on the Customer’s behalf (the “processor”) and does not use it for any other purpose.

5. Employee Consent and Notification

As the Services monitor employee activity, the Customer is solely responsible for informing its employees and for obtaining any consents or authorisations required under applicable law before the Services are deployed on their devices. The Service Provider relies on the Customer’s confirmation that this has been done.

6. Data Location (Residency)

All personal data processed through the Services is processed and stored within India. The Service Provider does not transfer, route, or relay such data to servers located outside India.

7. Security

The Service Provider applies reasonable, industry-standard safeguards and keeps each Customer’s environment logically separated from others, including per-tenant database and file separation, access controls, and encrypted connectivity. No system can be guaranteed to be completely secure.

Administrative access. The Service Provider retains a secure administrative account for the purpose of support, monitoring, maintenance, and issue resolution. Such access is limited to authorised personnel of the Service Provider and is used solely for those purposes.

8. Retention and Deletion

Data is retained only for as long as necessary to provide the Services or as directed by the Customer. Upon termination, the Customer’s data is made available for a short retrieval window and is thereafter deleted from the environment.

9. Your Rights

Individuals may, through their employer (the Customer) or by contacting the Grievance Officer below, seek access to, correction of, or deletion of their personal data, subject to applicable law and the Customer’s instructions as data controller/fiduciary.

10. Contact and Grievance Redressal

Queries or grievances regarding this Policy or the processing of personal data may be addressed to our Grievance Officer, who also serves as the grievance-redressal contact under applicable data-protection law:

We acknowledge grievances within 24 hours and endeavour to resolve them within 15 days, as contemplated by applicable rules.