Privacy Policy

This Privacy Policy applies to FabHR's website (fabhr.com), mobile applications, and cloud platform (collectively, the "Services"). It covers personal data FabHR collects as a data controller — meaning information about visitors, trial users, and contacts — as well as data processed on behalf of customers as a data processor under our Data Processing Agreement.

We collect data in three ways:

• Information you provide — name, work email, company, phone, and content you enter when signing up, contacting us, or requesting a demo.
• Usage data — pages visited, features used, device type, browser, IP address, and referring URL, collected automatically via cookies and server logs.
• HR data you store — employee records, payroll data, attendance logs, performance reviews, and other human resources data your organisation uploads. For this data, your organisation is the controller and we act as processor.

We use the data we collect to:

• Deliver, maintain, and improve the FabHR platform
• Authenticate your account and protect against fraud
• Send transactional communications (receipts, alerts, product updates)
• Respond to support requests and provide customer success
• Analyse usage trends to prioritise product improvements
• Meet legal and compliance obligations

We never sell your personal data to third parties. We do not use customer HR data for any purpose other than providing the contracted service.

Customer data is hosted in your selected region — India (Mumbai), EU (Frankfurt), or US (Virginia). All data at rest is encrypted with AES-256. Data in transit is protected with TLS 1.2 or higher. Our infrastructure operates within ISO 27001 and SOC 2 Type II certified data centres.

We share data only with sub-processors strictly required to deliver our service, such as cloud infrastructure, transactional email, and analytics providers. Each sub-processor is bound by data processing agreements that meet GDPR Article 28 standards.

We may also disclose data to comply with applicable law, a court order, or a government request, or to protect the rights or property of FabHR or our users.

A full, current list of sub-processors is available on request at privacy@fabhr.in.

FabHR uses essential cookies (session management, authentication) and, with your consent, analytics cookies (product usage) and marketing cookies (ad attribution).

You can manage cookie preferences via the banner on first visit or through your browser settings. Declining non-essential cookies will not affect core platform functionality.

Depending on your location, you have the following rights over your personal data:

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your personal data ("right to be forgotten")
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests or for direct marketing
• Restriction — request that we limit processing in certain circumstances

To exercise any of these rights, email privacy@fabhr.in or use the self-service controls in your account settings. We respond within 30 days.

We retain personal data for as long as your account is active. After account closure, personal data is deleted within 30 days from production systems and within 90 days from encrypted backups, unless a longer period is required by applicable law (e.g., statutory employment records). You may request earlier deletion at any time.

FabHR's Services are designed for businesses and are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately so we can delete it.

We may update this policy from time to time. When we do, we will revise the "last updated" date at the top and, for material changes, notify you by email or in-app notice at least 14 days before the change takes effect. Continued use of the Services after the effective date constitutes acceptance of the updated policy.

Data Protection Officer: privacy@fabhr.in

Postal: FabHR Data Protection, Bengaluru, Karnataka, India

If you are not satisfied with how we handle your request, you have the right to lodge a complaint with your local data protection authority (e.g., the Information Commissioner's Office in the UK, or the CNIL in France).