Privacy Policy & Data Protection

Lezore Technologies Private Limited ("Lezore", "Company", "we", "us", or "our") operates the Lezore workforce and payroll management Software-as-a-Service platform. This Privacy Policy is intended to align with the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

We process the following categories of information strictly to deliver and maintain the Service:

• Enterprise & Account Credentials: Your organization name and logo, the account holder's email address, and authentication credentials, which are held and hashed by our authentication provider rather than by us.
• Site Supervisor & Staff Profiles: Supervisor full name, phone number, designated project site authorizations, and role permissions.
• Workforce & Labor Master Data: Worker name, mobile contact, trade classification (e.g. Fitter, Welder, Rigger, Mason, Helper), site assignment, join/relieve dates, wage rates, and banking details where you choose to record them for payslip generation.
• Attendance, Overtime & Financial Ledgers: Daily muster records (Present, Absent, Half-Day, OT hours), supervisor remarks, mid-month cash advance slips, deductions, and monthly salary settlement computations.
• Technical & Telemetry Data: IP address, device model, browser user agent, login timestamps, and IndexedDB local synchronization tokens used for offline PWA functionality.

All data processing activities are carried out under valid contractual necessity and legitimate statutory purposes:

We do not sell, rent, or trade your workforce, financial, or operational data to third-party advertisers, data aggregators, or marketing brokers.

Lezore implements a state-of-the-art multi-tenant cloud architecture designed to keep each organization's data separate:

• Row-Level API Scoping: Every database query and transaction is scoped to your unique Organization ID.
• Role-Based Access Control (RBAC): Site supervisors can only mark daily attendance; contractor margins, global worker rates, and enterprise financials remain redacted.
• Encryption in Transit & At Rest: All web traffic is protected via Transport Layer Security (TLS). Data at rest is encrypted by our database provider.

To deliver high-availability cloud services, Lezore engages vetted enterprise sub-processors:

Under the Digital Personal Data Protection Act, 2023, Data Principals enjoy explicit statutory rights:

• Right to Summary: Obtain a transparent summary of personal data processed and processing activities.
• Right to Correction & Updating: Request correction of inaccurate or misleading personal records.
• Right to Erasure: Request deletion of your personal data. You can delete your account yourself at any time from Settings in either app — see Delete Your Account for what is removed and what each organization keeps.
• Right of Grievance Redressal: Direct escalation to our designated Grievance Officer and subsequently the Data Protection Board of India if unresolved.
• Right to Nominate: Designate an authorized representative in the event of incapacity.

Your organization retains 100% unconditional ownership of all worker profiles, attendance sheets, advance ledgers, and payslip archives.

Admins may generate and export a complete JSON snapshot of all workspace data at any time from Settings > Backup Hub. Individual reports can additionally be exported as CSV or PDF from their own screens. Export your data before closing an account — once an organization is closed, its records are marked deleted and are no longer accessible through the app.

When an individual deletes their account, their sign-in credentials, profile details, and organization memberships are removed, and any pending invitations addressed to them are withdrawn. Records that belong to an organization rather than to the individual are retained: attendance, advances, payments and payroll for that organization's workers, and the change history that makes those wage records auditable. We retain that history on the basis of the statutory obligation to keep accurate wage records; once the account is deleted, the identifier attached to those entries no longer resolves to any personal details. A record that the deletion occurred is kept for 30 days. See Delete Your Account.

To request erasure of specific records, contact us using the details in the grievance section below.

Lezore strictly prohibits the creation of accounts or workforce entries for individuals below the age of 18 years, in strict alignment with the Child and Adolescent Labour (Prohibition and Regulation) Act, 1986. We do not knowingly process personal data belonging to minors.

Lezore does not set browser cookies for authentication. Instead, your signed-in session token is stored in your browser's local storage — this is strictly necessary for the platform to function (without it, you would be signed out on every page reload) and cannot be disabled. Our authentication provider, Supabase, uses the same local storage mechanism to persist and refresh your session.

As of the date of this policy, Lezore does not run any advertising or marketing-tracking scripts. We do use Sentry for error and performance monitoring, which is necessary to keep the service running and which collects technical diagnostic data including IP address — it is listed in the sub-processor table above. The cookie consent banner shown on this site lets you review and control two additional categories — Analytics and Marketing — which are currently switched off because nothing in either category is active. If we introduce such tools in the future, they will only run for visitors who have explicitly opted in, and this section will be updated to describe exactly what is collected and why.

Pursuant to Section 8 of the DPDPA 2023 and Rule 5(9) of the Information Technology Rules, 2011, inquiries, grievance filings, or statutory notices may be addressed to our Grievance Officer: