WageWisely

Privacy Policy

Last updated 31 August 2026.

WageWisely, operated by Vikas Prajapat, holds payroll information about your workers. This page says exactly what we store, why, who can see it and how long we keep it.

Two kinds of people

You — our customer, the contractor with an account. Your workers — the people whose attendance and wages you record. You decide what is recorded about them; we hold it on your behalf and process it only to run the service for you.

What we hold about you

  • Your company name, your name, your mobile number and email.
  • Your password, stored only as a one-way hash. We cannot read it and cannot tell you what it is.
  • Login records — when an account signed in, and from which network address.
  • A record of changes made in your account: who changed what, and when.
  • Payment records: which plan, which month, and the reference the payment provider gave us.

What we hold about your workers

Because payroll and statutory filing require it:

  • Name, father's name, date of birth and address.
  • Designation, wage category and rate, per site and per month.
  • Attendance, wages, deductions and advances.
  • Where you provide them: UAN, ESIC IP number, Aadhaar number and bank details, which the PF, ESIC and bank filings need.
  • If you use attendance at the gate: a photograph taken at the punch, the location it was taken at, and a mathematical face signature used to match the person. The signature is a set of numbers; a face cannot be reconstructed from it.

What we never do

  • We do not sell your data, or your workers' data, to anyone.
  • We do not use it to advertise anything.
  • We do not use one customer's data to serve another customer.
  • We run no advertising trackers and no third-party analytics. The pages you are reading load nothing from any other company.

Who can see it

  • You and the logins you create. Site staff see only the sites you give them.
  • Us — only when we have to: a fault you have reported, or a legal obligation. Access is recorded.
  • Nobody else. Each customer's data is separated in the database and every query is restricted to that customer.

Companies we rely on

  • Our hosting provider, whose servers hold the database and files.
  • Razorpay, which takes payments. Card and bank details are entered on Razorpay's own page and never reach our servers. We receive only a reference and whether the payment succeeded.
  • An email provider, for password resets and account notices.

How long we keep it

  • Payroll records — wages, attendance, PF and ESIC — are never deleted. They are the evidence behind filings you have already made, and you may be asked for them years later.
  • If you stop paying, nothing is deleted. The account becomes read-only and you can still export everything.
  • Photographs taken at the gate are deleted automatically. We keep the current month and the one before it, and then they go — permanently, with no second copy. The punch record itself stays; only the photograph is removed. We keep the previous month rather than only the current one because your PF and ESIC filing for it happens in the first half of the following month, and a disputed punch is settled by looking at the photograph. While they are held they sit outside the public area of the server and have no web address, so they cannot be reached by guessing a link.
  • Logs of errors and logins are kept for a limited period and then overwritten.

Keeping it safe

  • Everything travels over an encrypted connection (HTTPS).
  • Passwords are hashed, never stored in a readable form.
  • Configuration and worker photographs sit outside the web area entirely — they have no address to request.
  • Backups are taken regularly.

No system is perfectly safe. If a breach affects your data we will tell you, and what we know about it, without waiting to be asked.

Your rights

  • Export — download everything in your account, at any time, on any plan.
  • Correct — change anything that is wrong.
  • Ask — ask us what we hold about you and why.
  • Close — close your account. We will stop processing; the records are retained as described above.

Your workers' rights are exercised through you, since it is your relationship with them. Tell us if you need our help with a request.

Children

This service is for businesses. It is not for anyone under 18, and we do not knowingly hold data about children.

Changes

If we change this policy in a way that affects you, we will tell you by email before it takes effect.

Contact

Any question about privacy: see our contact page.