Privacy Policy

1. Introduction

SharpGurus, Inc. and its authorized distribution affiliate SharpGurus Software Solutions India Private Limited (collectively “we”, “us”, or “our”, operating platforms under ecorprx.com and hrm.ecorprx.com) are committed to protecting the privacy and security of your organization and employee workforce data.

This Privacy Policy explains how we collect, use, process, store, and protect information when you access our HRConnect™ website, cloud HRM platform, executive portals, APIs, and mobile applications.

2. Information We Collect

We collect and process data necessary to deliver enterprise human resource management and strategic workforce intelligence:

• Account & Administrator Data: Registration details, executive email addresses, phone numbers, organization profiles, billing addresses, and authentication credentials.
• Employee Directory Records: Names, job titles, department assignments, reporting structures, compensation band parameters, start dates, and contact information uploaded by tenant administrators.
• HR Operations & Usage Data: Leave requests, attendance logs, onboarding checklists, document completion timestamps, employee transfer histories, and dashboard activity.
• Workforce Metrics: Aggregated headcount, department satisfaction surveys, anonymized attrition signals, and organizational structure mapping.
• Technical & Device Data: IP addresses, browser types, session tokens, operating system versions, and system audit log events.

3. How We Use Your Information

We use organizational and employee information solely to:

• Provide, maintain, and continuously improve HRConnect services;
• Execute automated payroll computations, tax schedules, and banking disbursement export files;
• Deliver strategic workforce intelligence, predictive attrition modeling, and executive KPI reports;
• Authenticate tenant users, enforce Role-Based Access Control (RBAC), and safeguard against unauthorized access;
• Respond to customer support requests and provide critical platform updates;
• Comply with applicable legal, labor, statutory, and security obligations.

4. Role as Data Processor & Controller

For employee data entered or uploaded into HRConnect, the subscribing organization or employer acts as the Data Controller, and SharpGurus acts as the Data Processor. We process employee personal data strictly in accordance with the controller's instructions, our contractual agreements, and applicable data protection regulations.

5. Data Sharing and Disclosure

We do not sell personal or employee data. We may share information only in the following limited circumstances:

• With trusted cloud infrastructure and SSO identity providers (such as AWS, Google Cloud, Microsoft Azure, Okta) bound by strict confidentiality and security commitments;
• When legally required by court order, statutory regulation, or valid law enforcement process;
• With your explicit written consent or direction (e.g., custom API third-party webhook integrations);
• To protect the security, intellectual property, or safety of HRConnect, our users, or the public.

6. Data Security and Safeguards

We implement industry-grade technical, physical, and administrative safeguards designed to protect personal data from unauthorized access, loss, alteration, or interception. These safeguards include TLS/HTTPS data transmission encryption, AES-256 at-rest database encryption, multi-factor authentication (MFA), isolated multi-tenant architecture, and periodic vulnerability scanning.

7. Data Retention

We retain organizational records and employee data for the duration of the active subscription agreement, or as required by applicable labor and tax retention statutes. Upon contract termination and customer request, customer tenant data is securely exported and permanently deleted or anonymized according to our data disposal policy.

8. Your Rights & Data Subject Access

Depending on your jurisdiction (such as GDPR, DPDP Act India, CCPA/CPRA), individuals may have rights to access, rectify, port, or request erasure of their personal data. Employees seeking to exercise their data rights should first submit requests to their employer (the Data Controller). Our privacy team can be reached at info@sharpgurus-usa.com for assistance.

9. Children's Privacy

Our enterprise platform is intended strictly for professional business and organizational use and is not directed at individuals under 18 years of age.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect platform enhancements or statutory changes. The updated policy will be posted on this page with an updated revision date.