Privacy Policy and Terms of Service

Cresce Technology Private Limited operates under the brand name “Salarybox”. We understand the significance of Your personal data and process the same in a responsible manner. We urge You to go through this Privacy Policy/ Policy attentively.

Cresce Technology Private Limited, a company which owns, manages and operates the www.salarybox.in (“Websites”) or, software applications or mobile applications including the salarybox application (“Apps”) (hereinafter referred as “Company”, “We”, “Us” or “Our”). 

For the purposes of this Policy the term “User(s)” and wherever the context so requires “You”, “Your”, “Yourself” shall mean any natural or legal person who accesses or Uses the Portal and in the event that a natural person is representing a business entity or a body corporate, reference to such terms shall include a reference to such business entity and/or body corporate as well and other promoters of such business entity and/or body corporate. All references to “You” shall include Yourself and any other persons You are authorised to and required to provide consent for.

We use Your data to provide and improve the services. By using the service, You agree to the collection and use of information in accordance with this Privacy Policy. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, accessible from https://www.salarybox.in.

Your acknowledgment and consent

This Privacy Policy applies only to the user Information collected by Us on the Portal. By Your acceptance of this Privacy Policy, You explicitly consent to collection, storage, processing, handling and use of such User Information, in accordance with this Privacy Policy (as amended from time to time).

Information Collection and Use

We collect several different types of information for various purposes to provide and continuously improve our services.

Information We collect falls into one of two categories: “voluntarily provided” information and “automatically collected” information.

Types of Data Collected

Personal Data

You provide Your explicit consent for collection of information, on Our Website and Apps (collectively known as “the Portal”), which may be collected from the third parties as per this Policy, which includes but is not limited to (“User Information”):

User Information may include, but not limited to, Your full name, gender, address, email address, telephone number, date of birth, bank or payment details, any proof of identity and/or address, postal code, profile picture, password, Your bank account account holder name, account number, available balance and transaction history, etc.) as may be required by Us to facilitate our use of the Portal. This includes other information such as ITR, tax certificates, any other income documents, and data You may provide Us through third-party sign-in services such as Facebook and Google or under employment contract obligations . In such events/ cases, We fetch and store whatever information is made available to Us by You through these sign-in services. You provide us Your face data for Selfie Attendance with access and explicit consent to access Your device camera. Furthermore, You will be clearly shown what face data is being shared with us and You can control whether or not You want to share this data. 

Device Data

When You visit our website or interact with our services, We may automatically collect data about Your device, such as:

•       Device Type including but not limited to location, Your device’s name, device’s serial number, or unique identification number (e.g. UDID on Your iOS device, Android ID or ADID on Your Android Device 
•       Operating System, browser type and version, CPU speed, and connection speed etc
•       Geo-location data

Data We collect can depend on the individual settings of Your device and software. We recommend checking the policies of Your device manufacturer or software provider to learn what information they make available to us.

Legitimate Reason and Legal Basis for Processing Your Personal Information

We only collect and use Your personal information when We have a legitimate reason for doing so. In which instance, We only collect personal information that is reasonably necessary to provide our services to You.

·   Contractual Necessity

We may process personal data based on contractual necessity when it is necessary for the performance of a contract to which You are a party or for taking pre-contractual steps at Your request. This means that We process Your personal data to fulfil our contractual obligations to You or to establish a contract with You. For example, if You engage Salarybox’s services, We need to process Your personal data to provide the requested services, manage the client relationship, and handle related administrative tasks.

·   Compliance with Legal Obligations:

We may process personal data when it is necessary to comply with a legal obligation imposed on us. This legal basis requires us to process personal data to meet our legal responsibilities, such as fulfilling obligations under applicable laws, regulations, or court orders. 

·   Legitimate Interests:

Salarybox relies on legitimate interests as a legal basis for processing personal data, provided that such interests are not overridden by Your rights and interests. Our legitimate interests may include various business purposes, such as improving our services, developing new features, conducting research and analysis, ensuring the security of our systems, and promoting our business. When relying on this legal basis, We carefully consider the impact on Your privacy rights and only proceed with processing if it is reasonably expected and does not unduly infringe on Your rights and freedoms.

·   Legitimate Interest of Third Parties:

In some cases, We may process personal data based on the legitimate interests pursued by a third party, provided that such interests are not overridden by Your rights and interests. This means that We may process personal data on behalf of a third party if it is necessary for their legitimate interests and does not disproportionately affect Your rights. For example, if Salarybox acts as a data processor for a client, We may process personal data on their behalf to support their legitimate business purposes, such as providing HR or project management services.

Tracking & Cookies Data

We use cookies and similar tracking technologies to track the activity on our Service and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. Cookies are sent to Your browser from a website and stored on Your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyse our Service.

You can instruct Your browser to refuse all cookies or to indicate when a cookie is being sent. However, if You do not accept cookies, You may not be able to use some portions of our Service.

Examples of Cookies We use:

• Session Cookies. We use Session Cookies to operate our Service.

• Security Cookies. We use Security Cookies for security purposes.

Use of Data

SalaryBox uses the collected data for various purposes:

• To provide and maintain the Service
• To notify You about changes to our Service
• To allow You to participate in interactive features of our Service when You choose to do so
• To provide customer care and support via call, SMS, WhatsApp, email, or any other mode one chooses to
• To provide analysis or valuable information so that we can improve the Service
• To monitor the usage of the Service
• To detect, prevent, and address technical issues
• To send promotional messages via SMS
• To send promotional messages via Push Notifications(Web and Android App)
• To send promotional messages via WhatsApp messages
• To personalise the user’s experience and to allow us to deliver the type of content and product offerings in which You are most interested.
• To improve our website in order to better serve You.
• To administer a contest, promotion, survey, or other site feature.
• To quickly process Your transactions.
• To ask for ratings and reviews of services or products.
• To follow up after correspondence (call, SMS, live chat, email, or phone inquiries).

SalaryBox does not use Your face data or photos for any reason other than to record Your attendance. Your face data is not shared with any 3rd party. Uploaded content is stored at the online secured data storage and displayed to Your organisation exclusively during Your use of the services.

SalaryBox uses only secure places of storage, such as Amazon Web Services. Amazon is located in the United States of America. Amazon Web Services (AWS) is designed and built to meet rigorous compliance standards, providing high levels of security for all AWS customers. Every AWS Region is compliant with applicable national and local data protection laws.

SalaryBox also integrates into the application the following platforms:

Truecaller: It eases user verification, which enables developers to use the new TrueSDK feature to sign up and update a user’s information or verify a user’s phone number-based identity in their mobile apps with the user’s consent.

Facebook: We get aggregated statistics and insights to understand and comprehend engagement patterns with our posts, listings, Facebook Pages, videos, and other content across platforms.

Freshchat: It processes, stores, or hosts Personal Data as a Processor for our Customers while delivering Services. In such instances, the applicable Customer’s privacy statement and our data processing agreement with them oversee the handling of Your Personal Data.

Clevertap: A behavioural analytics platform for product intelligence helping SalaryBox understand user behaviour and build engaging experiences;

Firebase: A Google mobile platform, helping SalaryBox develop a high-quality application.

Sentry: An error monitoring platform helping SalaryBox discover, triage, and prioritise errors in the application in real time.

Clarity for the web: We use clarity for a better understanding of our user behaviour.

Surepass: We use to verify the User Information 

Razorpay Software Private Limited: We use them to provide payment gateway services

Kaleyra, Gupshup, msg91, Plivo: We use the services for SMS Communications & Whatsapp Communications

Juspay, Easebuzz / Yes Bank Limited: We use the services for paYouts 

Zoho: We use Zoho to create invoices. 

SalaryBox does not control third-party platforms, websites, or online services, and SalaryBox is not responsible for its actions. These platforms, websites, and online services follow different rules regarding the collection, use, and sharing of Your personal information. SalaryBox encourages You to read the privacy policies of these platforms, websites, and online services to find out more about how Your usage data may be used by these vendors.We encourage You to consult directly with such third-parties about their privacy practices.

Please read this Policy carefully to understand Our policies and practices regarding Your information and how it will be treated in accordance with this Policy

Transfer Of Data

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of Your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those from Your jurisdiction. If You are located outside India and choose to provide information to us, please note that We transfer the data, including Personal Data, to India and process it there. Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer. It is important to note that some of these countries may have different data protection laws than Your own country, and in some cases, these laws may not offer the same level of protection. We will ensure that these providers enter into an agreement that includes appropriate safeguards for Your information. This will be achieved through the use of EU Model Clauses (SCCs) and the UK International Data Transfer Addendum.

SalaryBox will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of Your data and other personal information.

Your Rights Regarding Your Personal Information

Right to access: You have a right to access Your personal data processed by SalaryBox 

Right to Data Portability: The right to receive a copy of personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another data controller.

Right to be informed: The right to be informed about the processing of personal data, including the purposes, recipients, and legal basis for the processing

Right to Correction and rectification: The right to request the correction, rectification or amendment of inaccurate or incomplete personal data.

Right to Erasure: The right to request the deletion or removal of personal data under certain circumstances.

Right to Restrict Processing: The right to request the limitation of processing personal data under specific conditions.

Right to Object: The right to object to the processing of personal data based on specific grounds, such as legitimate interests or direct marketing.

Right to Withdraw Consent: The right to withdraw consent given for the processing of personal data at any time

Right to Non-Discrimination: The right to be free from discriminatory practices or treatment based on the exercise of one’s data protection rights.

Right to Additional Information: The right to request additional information about the processing of personal data beyond what is typically provided in privacy notices or disclosures.

Right to request for a feature: We are continuously adding new features to the app. You can raise a request for a new development using the “Request a feature” button on the app. However, SalaryBox is under no obligation to work on and develop all requests. We also make no promise to commit to a specific timeline for development.

Right to Make Complaints: The right to lodge a complaint with a data protection authority if You believe that Your rights have been violated.

Right to Opt-Out of Sale: The right to opt out of the sale or disclosure of personal data to third parties for monetary or other valuable consideration.

Right to Object to Automated Decision-Making: The right to object to decisions made solely based on automated processing, including profiling, that significantly affect the data subject.

If You make a request objecting to processing, We will no longer process the personal data unless We are able to demonstrate compelling legitimate grounds for the processing.

How to exercise Your rights as to Your personal data?

Any requests to exercise Your rights can be directed to SalaryBox by writing to compliance@salarybox.in and Data Principal Request Form . These requests are free of charge. To ensure the security of Your request, We will verify it using the information associated with Your account, including Your email address. In certain cases, We may request government identification as part of the verification process

If You have doubts as to our reply or reaction or absence of such, You have the right to lodge a complaint with a supervisory authority that is empowered to process such complaints in Your country.

How Long We Keep Your Personal Information

We keep Your personal information only for as long as We need to fulfil the purposes mentioned in this privacy policy. This time period may depend on what We are using Your information for and as required by applicable law in accordance with our data retention policy.

To ensure the safe and thorough management of Your personal information, We adhere to a deletion process that aims to either completely remove Your data from our servers or retain it solely in anonymized form. Our services are designed to protect against accidental or malicious deletion of information. However, it’s important to note that there may be occasional delays between the time You initiate a deletion and when copies are effectively removed from both our active and backup systems.

We uphold the principle of retaining Your personal information only for the duration necessary to fulfil its intended purpose, as outlined in our privacy policy. For instance, if You have provided personal information while creating an account, We may retain this data as long as Your account remains active on our system. If Your personal information is no longer required for such purposes, We will promptly delete it or anonymize it by removing any identifiable details.

Nevertheless, there are certain circumstances where We may need to retain Your personal information for legitimate business or legal reasons. These may include obligations related to compliance with applicable laws, accounting or reporting requirements, or the need for archiving in the public interest, scientific research, historical research, or statistical analysis. Additionally, certain data may be retained for extended periods to fulfil purposes such as ensuring security, preventing fraud and abuse, or maintaining financial records.

Disclosure Of Data

Security Of Data

The security of Your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.  Additionally, when You click on a link leading to a third-party website, please be aware that You will be leaving our site, and We do not have control over or endorse the content found on such third-party sites.

The customer shall not, directly or indirectly, disclose Personal Information to any person other than its Authorized Persons (an “Unauthorized Third Party”), unless and to the extent required by Government Authorities or Applicable law.

The customer will be responsible for any changes/omissions/damages done by an “Unauthorised Third Party” concerning the treatment of such Personal Information.

If an unwanted breach is noticed, the customer is required to promptly report the incident to legal@salarybox.in along with all necessary information.

Service Providers

We may employ third-party companies and individuals to facilitate our Service (“Service Providers”), to provide the Service on our behalf, to perform Service-related services or to assist us in analyzing how our Service is used. These third parties have access to Your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Analytics

We may use third-party Service Providers to monitor and analyze the use of our Service.

Google Analytics:

• Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network.
• You can opt out of having made Your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity.
• For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy?hl=en

Links To Other Sites

Our Service may contain links to other sites that are not operated by us. If You click on a third-party link, You will be directed to that third-party’s site. We strongly advise You to review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Children’s Privacy

Our Service does not address anyone under the age of 13.

We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and You are aware that Your Children have provided us with Personal Data, please contact us. If We become aware that We have collected Personal Data from children without verification of parental consent, We take steps to remove that information from our servers.

Changes To This Privacy Policy

We may update our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.

We will let You know via email and/or a prominent notice on our Service, prior to the change becoming effective, and update the “effective date” at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If You have any questions about this Privacy Policy, please contact us:

Corporate Office  Address: Plot 23, Sector 18 Maruti, Industrial Development Area, Gurugram, Haryana 122015

Phone number: +917290098241

Email: compliance@salarybox.in