Privacy Policy

This policy explains how BLG Technologies Pvt. Ltd. ("BLG", "we") collects, uses, stores, and protects data within Astra HR — our multi-tenant human resource management platform used by organisations ("tenants") and their employees.

Each tenant's data is isolated at the schema level. This policy applies to all users of Astra HR, including employees, HR administrators, and approvers acting on behalf of a tenant organisation.

Identity and profile data — name, contact details, date of birth, government ID numbers, and employment records provided by your organisation.

Statutory and payroll data — PF, ESI, PT, and tax (TDS) details required for Indian compliance and payslip generation.

Attendance and location data — punch times, shift assignments, and geofenced location data where enabled by your organisation for field attendance.

Documents — employee documents, offer letters, and digitally signed statutory PDFs uploaded to the platform.

Usage data — login activity and audit logs generated as part of normal platform operation.

To operate core Astra HR functions: employee records, attendance, leave, payroll, recruitment, approvals, and communications.

To meet Indian statutory and regulatory compliance obligations, including PF, ESI, PT, and tax reporting.

To maintain audit trails for payroll, leave, attendance, and approval workflows.

To send in-app, push, and email notifications configured by your organisation.

We do not sell tenant or employee data. Data is shared only where necessary — with statutory authorities as required by law, with sub-processors who support hosting and email delivery under contractual confidentiality, or with your organisation's authorised administrators.

Data is retained for as long as your organisation's tenancy is active, and thereafter as required by Indian statutory retention requirements for payroll, tax, and labour records — even after an account deletion request is processed.

Astra HR runs on schema-level data isolation per organisation, role-based access control, and full audit logging. Our information security practices are aligned with ISO/IEC 27001.

You may request access to, correction of, or deletion of your personal data held in Astra HR. Deletion requests can be submitted through our account deletion request page and are processed in coordination with your organisation's administrator, subject to statutory retention obligations.

For any privacy-related queries, write to us at tech@blgtechnologies.in.