Privacy Policy

This Privacy Policy explains how Dastek Softwares Private Limited ("Dastek", "we", "us", or "our") collects, uses, stores, protects and otherwise processes personal data in connection with WorkTap ("WorkTap", "Service", or "Platform").

WorkTap is an employee attendance, leave and workforce-management platform that enables businesses to manage employee attendance, leave, work schedules, branches, approvals and related administrative activities.

By using WorkTap, you acknowledge that you have read and understood this Privacy Policy.

1. About WorkTap

WorkTap is a product developed and operated by:

Dastek Softwares Private Limited

Registered Office:IDEASHACKS, Metro Pillar Number 564,14/3 Mathura Road, Sector 31,Faridabad, Haryana – 121003, India

Website: https://worktap.work/

For privacy-related questions, requests or complaints, please contact us through the contact details published on the WorkTap website.

For organizations using WorkTap, the organization that creates and manages the WorkTap account is generally responsible for determining how its employees' personal data is used. Dastek processes such information primarily to provide the WorkTap service to that organization.

2. Information We Collect

Depending on how WorkTap is used, we may collect the following categories of information.

2.1 Organization and Account Information

When an organization signs up for WorkTap, we may collect:

• Company/business name
• Registered or business address
• Contact person's name
• Contact person's email address
• Contact phone number
• GST information
• Billing information
• Branch information
• Organization configuration
• Subscription and plan information
• Login credentials and authentication information

2.2 Employee Information

Organizations may enter or upload employee information into WorkTap, including:

• Employee name
• Employee ID or employee number
• Email address
• Mobile/phone number
• Department or designation
• Branch/location
• Employment status
• Joining date
• Assigned work schedule
• Leave entitlement
• Leave balances
• Other information configured by the organization for attendance and leave administration

The organization using WorkTap is responsible for ensuring that it has an appropriate legal basis and authority to provide employee information to WorkTap for processing.

2.3 Attendance Information

WorkTap may record information associated with employee attendance, including:

• Check-in time
• Check-out time
• Attendance date
• Attendance status
• Late arrival
• Early departure
• Half-day status
• Short-hours status
• Work-hour calculations
• Attendance regularization requests
• Reasons submitted for attendance corrections
• Approval or rejection records
• Attendance history

2.4 Location and Geofence Information

WorkTap uses location information to verify whether an employee is physically within an organization's configured workplace geofence when an attendance punch is made.

Depending on the device and operating-system permissions, this may include:

• GPS/location coordinates
• Approximate location information
• Location verification results
• Office/branch geofence information
• Date and time associated with a location verification

Location information is used primarily to determine whether an attendance action was made within the organization's configured geographical boundary.

WorkTap does not intend to provide continuous employee location tracking merely because the employee has the application installed. Location verification is associated with attendance functionality and may depend on the permissions granted by the employee's device.

2.5 Device Information

WorkTap uses device binding and approval functionality. We may therefore process information such as:

• Device identifier
• Device type
• Operating system
• Application version
• Device registration information
• Push notification token
• Device approval status
• Security and authentication information

This information helps prevent unauthorized attendance punches and allows organizations to control which device is associated with an employee account.

2.6 QR and NFC Information

WorkTap may process information associated with QR-code and NFC-based attendance actions, including:

• QR/NFC attendance event
• Branch/site associated with the event
• Date and time
• Employee account
• Device information
• Geofence verification result

QR codes may contain or represent an organization/site-specific identifier or secret used to validate attendance activity.

2.7 Leave and Approval Information

WorkTap may process:

• Leave requests
• Leave type
• Leave duration
• Leave balance
• Leave reason or comments entered by the employee
• Approval/rejection status
• Approver information
• Approval timestamps
• Holiday information
• Weekly-off configuration
• Financial-year configuration

Organizations are responsible for determining what leave information their employees are required or permitted to submit.

2.8 Payment and Billing Information

WorkTap supports online payments, including card and UPI payments.

Depending on the payment method and payment service provider, payment information may be processed by third-party payment processors.

We generally do not need to store complete payment-card information ourselves. Payment processors may collect and process payment information in accordance with their own privacy policies and security practices.

WorkTap may retain:

• Payment status
• Transaction/reference ID
• Amount
• Currency
• Payment date
• Subscription/plan information
• Billing information
• GST information
• Tax invoice information

2.9 Communications and Support

If you contact us, we may collect:

• Name
• Email address
• Phone number
• Organization details
• Support requests
• Technical information necessary to investigate an issue
• Communications between you and our support team

2.10 Automatically Collected Information

When you use WorkTap, we may automatically collect certain technical information, such as:

• IP address
• Browser type
• Operating system
• Device information
• Application logs
• Error logs
• Authentication logs
• Security logs
• Access timestamps
• Performance information

This information helps us maintain, secure and improve WorkTap.

3. How We Use Personal Data

We may process personal data for the following purposes:

• Creating and managing WorkTap accounts.
• Providing attendance and leave-management functionality.
• Recording employee check-in and check-out events.
• Validating attendance against configured workplace geofences.
• Managing NFC and QR attendance.
• Managing employee device registration and approval.
• Calculating attendance outcomes based on configured work-hour rules.
• Processing leave requests and approvals.
• Maintaining attendance and approval history.
• Sending push notifications and service-related communications.
• Generating invoices and processing payments.
• Providing customer support.
• Preventing fraud, abuse and unauthorized access.
• Maintaining application and infrastructure security.
• Diagnosing technical problems.
• Monitoring service performance and reliability.
• Improving WorkTap.
• Complying with applicable laws and legal obligations.
• Establishing, exercising or defending legal claims.
• Protecting the rights, property and safety of Dastek, our customers and users.

We will not use employee attendance or location information for unrelated purposes without an appropriate legal basis.

4. Processing on Behalf of Organizations

WorkTap is primarily a business-to-business service.

When an organization uses WorkTap to manage its employees, the organization generally determines:

• Which employees are added to WorkTap;
• What employee information is collected;
• How attendance is recorded;
• Which branches and geofences are configured;
• Which leave policies are applied;
• Who can access employee information; and
• How employee information is used for workforce management.

In these circumstances, Dastek generally processes such information to provide WorkTap to the organization.

The organization remains responsible for:

• Providing appropriate notices to employees;
• Obtaining any required permissions, consents or other lawful authorization;
• Configuring the service appropriately;
• Ensuring that its use of employee data complies with applicable law; and
• Responding to employee requests where the organization is the appropriate party.

If you are an employee of a WorkTap customer and have questions about how your employer uses your personal data, you should normally contact your employer or organization's WorkTap administrator first.

5. Legal Basis for Processing

Depending on the circumstances, Dastek may process personal data based on:

• Consent;
• Performance of a contract;
• Legitimate or lawful business purposes permitted by applicable law;
• Compliance with legal obligations;
• Prevention and detection of fraud or security incidents; and
• Other lawful grounds available under applicable law.

Where consent is relied upon, individuals may have rights to withdraw consent in accordance with applicable law. Withdrawal of consent may not affect processing already carried out lawfully before withdrawal.

6. Sharing of Personal Data

We may share information with:

A. The Customer Organization

Employee information stored within an organization's WorkTap account may be accessible to authorized administrators, managers or other personnel designated by that organization.

B. Service Providers

We may use trusted third-party service providers for services such as:

• Cloud hosting
• Database infrastructure
• Application monitoring
• Email delivery
• Push notifications
• Payment processing
• Security
• Analytics
• Customer support
• Backup and disaster recovery

Such providers receive only the information reasonably required to provide their services.

C. Legal and Regulatory Authorities

We may disclose information where required by law, regulation, court order, government request or other lawful process.

D. Business Transfers

If Dastek is involved in a merger, acquisition, restructuring, financing, sale of assets or similar transaction, information associated with WorkTap may be transferred as part of that transaction, subject to applicable law.

7. International Data Transfers

Depending on the infrastructure and service providers used by WorkTap, personal data may be processed or stored in India or other countries.

Where personal data is transferred across borders, Dastek will take reasonable steps to ensure that the transfer and processing are conducted in accordance with applicable law and appropriate contractual or security safeguards.

8. Data Security

We implement reasonable technical and organizational safeguards designed to protect personal data against:

• Unauthorized access
• Unauthorized disclosure
• Accidental loss
• Destruction
• Alteration
• Misuse

Security measures may include access controls, authentication mechanisms, encryption where appropriate, logging, monitoring, backups and infrastructure security controls.

However, no internet-based system can guarantee absolute security.

Users are responsible for protecting their passwords, authentication credentials and devices and must notify their organization or Dastek of suspected unauthorized access.

9. Data Retention

We retain personal data for as long as reasonably necessary to:

• Provide the WorkTap service;
• Maintain account and business records;
• Meet contractual obligations;
• Comply with applicable legal, accounting and tax requirements;
• Resolve disputes;
• Prevent fraud and abuse;
• Maintain security records; and
• Enforce our agreements.

The WorkTap website currently states that customer data is retained until the customer requests deletion and that data export is available on request.

When an organization requests deletion, Dastek may retain limited information where required by law, for legitimate business purposes, security purposes, or to establish or defend legal claims.

Backup copies may also remain for a limited period before being securely overwritten in accordance with our backup and retention procedures.

10. Data Accuracy

Organizations and users should ensure that information entered into WorkTap is accurate and kept up to date.

Where WorkTap allows users or administrators to correct information, they should use those facilities or contact their organization administrator.

11. Your Privacy Rights

Subject to applicable law, individuals may have rights relating to their personal data, including rights to:

• Request information about processing;
• Request access to personal data;
• Request correction of inaccurate data;
• Request deletion where legally applicable;
• Withdraw consent where processing is based on consent;
• Request information about grievance mechanisms;
• Exercise other rights available under applicable data-protection law.

For employee data processed on behalf of an organization, requests may need to be directed to the relevant WorkTap customer/employer.

We may need to verify the identity of the person making a request before processing it.

12. Children's Data

WorkTap is a business workforce-management platform and is not intended for use by children.

Organizations should not intentionally create WorkTap employee accounts for children unless they have independently determined that such processing is lawful and appropriate.

13. Cookies and Similar Technologies

The WorkTap website may use cookies or similar technologies necessary for:

• Website functionality;
• Authentication;
• Security;
• Remembering preferences;
• Analytics;
• Improving website performance.

Where required by applicable law, we will provide appropriate choices or notices regarding non-essential cookies.

14. Third-Party Services

WorkTap may integrate with or rely on third-party services.

Those third parties may have their own privacy policies and terms. Dastek is not responsible for the privacy practices of independent third-party services outside our control.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes to WorkTap;
• Changes to applicable law;
• Changes to our processing practices; or
• Security or operational improvements.

The updated version will be published on the WorkTap website with a revised "Last Updated" date.

Where required by law, we will provide additional notice of material changes.

16. Grievance and Privacy Contact

If you have a privacy concern, request or complaint regarding WorkTap, please contact Dastek through the contact information published on the WorkTap website.

We will review and respond to privacy requests in accordance with applicable law.

17. Acceptance

By using WorkTap, you acknowledge that you have read this Privacy Policy.

If you are using WorkTap on behalf of an organization, you confirm that you are authorized to do so and that your organization has responsibility for the employee information it provides to WorkTap.

18. Delete your WorkTap account

WorkTap is published by Dastek Softwares. To delete your WorkTap account and its data:

Employees

• Ask your company's WorkTap administrator to deactivate and delete your account, or
• Email [email protected] from the address you sign in with, with the subject "Delete my WorkTap account" and your company code.

Company administrators

Email [email protected] with the subject "Delete our company's WorkTap account", from the admin email on the account, with your company code.

We confirm the request and complete it within 30 days.

What is deleted

• Your name, email, phone number and employee ID
• Your registered device and push-notification token
• Check-in locations and correction photos

© 2026 Dastek Softwares Private Limited. All rights reserved.