Privacy policy

HRMS is HR software made by Thita Info (“we”, “us”). You can reach us at info@thitainfo.com.

Account information. When you sign in with GitHub we receive your name, email address and profile picture from GitHub. We do not receive your password.

Information you add to HRMS. This is the business data you enter or upload: employee records, contact, salary and bank details, attendance, leave, generated letters, forms, your company profile, and files such as photos, logos and documents.

Enquiries. If you write to us through the contact form, we keep the details you send (name, company, email, phone, team size and message) so we can reply.

Technical information. Our servers keep basic logs, such as IP address, browser type and the pages requested, so we can run the service and investigate problems.

• To provide, secure and maintain HRMS.
• To sign you in and keep your session active.
• To give technical support when you ask for it.
• To meet legal obligations.

We do not sell personal information and we do not show advertising.

The organisation that uses HRMS decides what employee information to enter and why. For that data, the organisation is the data fiduciary (controller) and we act as a processor on its instructions. If you are an employee and want to see, correct or delete your information, please contact your employer first.

On the hosted plan, data is stored with our infrastructure provider, Supabase, which provides our database, sign-in and file storage. On the on-premise plan, data is stored on the server that the customer provides, and we only see it if the customer gives us access, for example for support.

• Service providers that help us run HRMS, such as hosting and sign-in providers (Supabase and GitHub).
• Authorities, when the law requires it.

We do not share information for any other purpose.

If analytics is switched on, the public website (not the app) counts visits with Plausible. It uses no cookies and collects no personal data, such as names or email addresses.

We use cookies only to keep you signed in and to remember small interface choices, such as whether the sidebar is collapsed. We do not use advertising or tracking cookies.

Access to data requires sign-in, database access is controlled by row-level security, and uploaded employee documents are stored in a private area and opened through short-lived links. No system is completely secure, so we cannot guarantee absolute security.

We keep information for as long as the account is active. When an account ends, the organisation can ask us to delete its data and we will do so, except where the law requires us to keep it.

You can ask to access, correct or delete your personal information, or to withdraw consent, by writing to us. We will respond within a reasonable time and in line with applicable Indian law, including the Digital Personal Data Protection Act, 2023.

HRMS is for business use and is not meant for children.

We may update this policy. When we do, we will change the date at the top of this page.

Questions about privacy? Email info@thitainfo.com.