Privacy

Privacy Policy

What OthTech HRMS (web and the OthHR mobile app) stores about employees and company admins, why, and how to have it removed.

Last updated 16 October 2026

Who we are

OthTech HRMS is run by OthTech Solutions. Companies (your employer) use it to manage their staff. For employee data, your employer decides what is collected and why; we store and process it on their behalf. Questions: admin@othtech.com.

What we hold

  • Employee profile: name, employee ID, contact details, date of birth, gender, address, department, designation, manager, joining and exit dates.
  • Attendance: check-in and check-out times and, when your company's policy asks for it, the location (GPS coordinates and the address worked out from them) at check-in and check-out.
  • Selfies: a photo taken at check-in, only if your company has turned selfie attendance on.
  • Leave, regularisation, overtime, expense and other requests you make, with approvals and comments.
  • Documents: files uploaded by you or HR (ID proofs, certificates, letters, offer letters, payslips).
  • Bank and salary details: bank account and IFSC, PAN and statutory numbers, salary structure, payslips and payroll records.
  • Device push tokens: an identifier for your phone so the app can receive notifications.
  • Account data: e-mail, hashed password (never the password itself), sign-in times.
  • For company admins: company details, GSTIN and billing state, subscription and payment history.

Why we use it

  • To run the HR features your employer uses: attendance, leave, payroll, documents, approvals and announcements.
  • To send sign-in codes, notifications and e-mails about your requests.
  • To bill companies for their subscription and issue GST invoices.
  • To keep the service secure and fix problems.

We do not sell personal data and do not use it for advertising.

Who processes it for us

  • Google Firebase: delivers push notifications to the mobile app (receives the device push token and the notification text).
  • Razorpay: takes subscription payments from companies. Card and UPI details go to Razorpay; we don't store them.
  • Our e-mail provider: sends sign-in codes, notifications and invoices.
  • OpenStreetMap (Nominatim): turns check-in coordinates into a readable address.
  • Google Sign-In, if you choose to sign in with Google.
  • Our hosting provider, which runs the servers and database.

How long we keep it

Data is kept while your employer uses OthTech HRMS. When an account is deleted, its personal data is removed, except records your employer must keep by law (for example payroll and tax records), which are kept only for the period the law requires.

Your choices

  • See and correct your details in the app or by asking your HR team.
  • Ask for your account and data to be deleted: see Delete your account.
  • Turn off location or camera permission on your phone (your company's attendance policy may then not allow check-in from the app).

Security

Each company's data is kept separate and every request is checked on the server. Passwords are stored as salted hashes. More in Security.

Contact

Privacy questions or complaints: admin@othtech.com.