MedroWorks Privacy Policy
Medro Works & Medro Works Admin · Operated by Medro Hi Tech Symbol Pvt Ltd
Version: 1.0
Effective Date: 15 July 2026
Last Updated: 15 July 2026
Privacy at a Glance
We do not sell your Personal Information.
At MedroWorks, we recognize that organizations trust us with sensitive workforce information, including employee records, attendance, payroll information, and other employment-related data. Protecting this information is one of our core responsibilities.
This summary provides a quick overview of how we handle your information. Please read the complete Privacy Policy below for detailed information.
What information do we collect?
We collect only the information necessary to provide Human Resource Management, Attendance Management, Payroll Management, Leave Management, Employee Management, and related workforce services.
Who owns employee information?
If you use MedroWorks through your employer, your employer owns and controls the employee information maintained within the platform. MedroWorks processes this information on behalf of your employer.
Do we sell personal information?
No.
MedroWorks does not sell personal information to third parties.
Why do we collect information?
We collect information to operate the MedroWorks platform, authenticate users, manage employee records, process attendance and payroll, provide customer support, maintain platform security, and comply with applicable legal obligations.
How do we protect your information?
We use secure cloud infrastructure, encrypted network communication, authenticated access, role-based permissions, and other technical and organizational safeguards designed to protect your information.
How can I request account deletion?
Employees may request account deletion through the MedroWorks application or by contacting their organization’s HR or Administrator. Since MedroWorks is an employer-managed platform, deletion requests are reviewed by the employer. Certain employment and statutory records may be retained where required by applicable laws or organizational policies.
1. Introduction
Welcome to MedroWorks, a workforce management platform developed and operated by Medro Hi Tech Symbol Pvt Ltd.
MedroWorks provides Human Resource Management (HRMS), attendance management, leave management, payroll management, employee lifecycle management, and related workforce management services to organizations across India.
This Privacy Policy explains how Medro Hi Tech Symbol Pvt Ltd (“MedroWorks“, “Company“, “we“, “our“, or “us“) collects, uses, stores, processes, protects, and discloses personal information when you access or use the MedroWorks platform.
We are committed to protecting the privacy and security of personal information entrusted to us by our customers and users. We process personal information responsibly and implement appropriate technical and organizational measures to help safeguard that information.
This Privacy Policy applies to the MedroWorks platform and describes our current data processing practices. It is intended to help users understand what information we collect, why we collect it, how we use it, and the choices available regarding personal information.
By accessing or using MedroWorks, you acknowledge that you have read and understood this Privacy Policy.
2. About MedroWorks
MedroWorks is a comprehensive Human Resource Management System (HRMS) and Workforce Management platform developed and operated by Medro Hi Tech Symbol Pvt Ltd.
The platform is designed to help organizations streamline workforce operations by providing digital solutions for employee management, attendance tracking, leave management, payroll administration, organizational management, notifications, reports, and other business-related human resource functions.
MedroWorks is intended for use by businesses, organizations, institutions, and their authorized employees, managers, human resource personnel, finance teams, administrators, and other authorized users.
Company Information
Legal Entity
Medro Hi Tech Symbol Pvt Ltd
Product Name
MedroWorks
Registered Office
H.N. 244, Sector E New
Nakoda Colony
Baran MDG, Baran
Rajasthan – 325205
India
Product Website
Company Website
Privacy Contact
Services Covered
This Privacy Policy applies to the following MedroWorks services, where applicable:
- MedroWorks Employee Mobile Application
- MedroWorks Management Mobile Application
- MedroWorks Admin Web Portal
- MedroWorks Super Admin Portal
- MedroWorks Website
- Cloud Services operated under the MedroWorks platform
- Official APIs and related services provided by Medro Hi Tech Symbol Pvt Ltd
All references to “MedroWorks,” “we,” “our,” or “us” in this Privacy Policy refer to Medro Hi Tech Symbol Pvt Ltd in relation to the MedroWorks platform unless stated otherwise.
3. Scope of this Privacy Policy
This Privacy Policy describes how Medro Hi Tech Symbol Pvt Ltd collects, uses, stores, protects, and processes personal information through the MedroWorks platform.
This Privacy Policy applies to all users who access or use MedroWorks, including but not limited to:
- Employees
- Managers
- Human Resources (HR) Personnel
- Finance Personnel
- Administrators
- Company Owners
- Authorized Representatives of Customer Organizations
- Visitors to the MedroWorks website, where applicable
This Privacy Policy applies to personal information processed through the following MedroWorks services:
- MedroWorks Employee Mobile Application
- MedroWorks Management Mobile Application
- MedroWorks Admin Web Portal
- MedroWorks Super Admin Portal
- Official MedroWorks Website
- Cloud-based services operated under the MedroWorks platform
- Official APIs and related services provided by Medro Hi Tech Symbol Pvt Ltd
This Privacy Policy applies only to information collected or processed as part of the MedroWorks platform.
It does not apply to:
- Third-party websites or services that are not owned or operated by Medro Hi Tech Symbol Pvt Ltd.
- Websites or applications that may be linked from MedroWorks.
- Services, products, or applications provided independently by third parties.
- Employment practices, policies, or decisions made by Customer Organizations outside the MedroWorks platform.
Where MedroWorks is provided to you by your employer or organization, your employer may have its own internal privacy policies, employment policies, or data handling practices that govern how your personal information is collected and managed. Those policies operate in addition to this Privacy Policy.
By using MedroWorks, you acknowledge that your use of the platform is also subject to the applicable Terms of Service and any policies established by your employer or organization.
4. Definitions
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
Account
An account created within the MedroWorks platform that allows an authorized user to access and use the Services.
Company
Refers to Medro Hi Tech Symbol Pvt Ltd, the developer and operator of the MedroWorks platform.
Customer
Any organization, company, institution, business, or other legal entity that subscribes to or uses MedroWorks for workforce management and related services.
Employee
An individual whose employment information is managed within MedroWorks by a Customer. This includes full-time employees, part-time employees, contractual staff, interns, trainees, consultants, or any other workforce members authorized by the Customer.
Personal Information
Any information relating to an identified or identifiable individual. Depending on the Services used, Personal Information may include, but is not limited to:
- Full Name
- Employee ID
- Email Address
- Mobile Number
- Residential Address
- Date of Birth
- Employment Information
- Attendance Records
- Leave Records
- Payroll Information
- Bank Account Information
- Government-issued Identification Details
- Location Data collected for attendance verification
Processing
Any operation performed on Personal Information, whether by automated or manual means, including collection, recording, organization, storage, retrieval, use, transmission, disclosure, modification, deletion, or destruction.
Services
The products, applications, websites, APIs, cloud services, and related features provided under the MedroWorks platform.
User
Any individual authorized to access or use MedroWorks, including Employees, Managers, Human Resource personnel, Finance personnel, Administrators, Company Owners, and other authorized representatives of a Customer.
Data Controller
The Customer Organization that determines the purposes and means of processing Personal Information within the MedroWorks platform.
Data Processor
Medro Hi Tech Symbol Pvt Ltd, which processes Personal Information on behalf of the Customer Organization for the purpose of providing the MedroWorks Services.
5. Data Controller and Data Processor
MedroWorks is an employer-managed workforce management platform. Depending on how the Services are used, different parties may determine how Personal Information is processed.
Customer Organization as the Data Controller
When an organization subscribes to MedroWorks, that organization generally acts as the Data Controller for the Personal Information of its employees and authorized users.
As the Data Controller, the Customer Organization determines, among other things:
- What Personal Information is collected.
- The purpose for which Personal Information is collected and processed.
- Which users are authorized to access Personal Information.
- How long Personal Information is retained.
- When employee records are updated, archived, or deleted.
- Compliance with applicable employment, labor, tax, and other legal obligations.
Employees should direct requests relating to their employment records, including requests for correction, updates, or deletion, to their employer or the organization’s authorized administrator.
Medro Hi Tech Symbol Pvt Ltd as the Data Processor
Medro Hi Tech Symbol Pvt Ltd develops, operates, and maintains the MedroWorks platform.
In providing the Services, Medro Hi Tech Symbol Pvt Ltd generally acts as a Data Processor, processing Personal Information on behalf of the Customer Organization and in accordance with the Customer’s instructions, except where processing is required or permitted under Applicable Law.
Our responsibilities as a Data Processor include:
- Providing and maintaining the MedroWorks platform.
- Processing Personal Information necessary to deliver the Services.
- Maintaining the security and availability of the platform.
- Assisting Customers in managing employee information through the features provided by MedroWorks.
- Processing information only as required to operate, maintain, support, and improve the Services.
Information We Process Directly
In certain circumstances, Medro Hi Tech Symbol Pvt Ltd may act as the Data Controller for information collected directly from individuals, including when:
- You contact us through our website or official communication channels.
- You submit enquiries, feedback, or support requests.
- You communicate with us regarding our products or services.
- You visit our official websites.
Such information is processed in accordance with this Privacy Policy and Applicable Law.
Customer Responsibilities
Customer Organizations are responsible for:
- Ensuring they have the necessary authority to collect and process employee information.
- Providing appropriate notices to their employees where required.
- Managing user access and permissions within their organization.
- Ensuring the accuracy of the information they provide to MedroWorks.
- Complying with Applicable Law in relation to employee data processed through the Services.
Our Commitment
Medro Hi Tech Symbol Pvt Ltd does not own the employee information stored by Customer Organizations within MedroWorks.
We process Personal Information solely for the purpose of providing the Services, supporting our Customers, maintaining the platform, fulfilling contractual obligations, and complying with Applicable Law.
We do not sell Personal Information collected through MedroWorks.
Information We Collect
The information we collect depends on how MedroWorks is used, the features enabled by the Customer Organization, and the permissions granted by users. We collect only the information that is necessary to provide, maintain, secure, and improve the Services.
6.1 Account Information
When an account is created within MedroWorks, we may collect the following information:
- Full Name
- Employee ID
- Official Email Address
- Mobile Number
- Designation
- Department
- Role and Access Permissions
- Organization Name
- Employment Status
- Date of Joining
- Profile Photograph (if provided by the Customer Organization or uploaded by the user)
This information is used to create and manage user accounts, authenticate users, and provide access to the Services.
6.2 Employee Information
Customer Organizations may maintain employment-related information within MedroWorks, including:
- Personal Details
- Contact Information
- Current and Permanent Address
- Emergency Contact Information
- Date of Birth
- Gender
- Father’s or Guardian’s Name
- Educational Qualifications
- Professional Experience
- Employment History
- Government-issued Identification Details (such as PAN and Aadhaar, where collected by the employer)
- Bank Account Information
- Salary Structure
- Payroll-related Information
- Provident Fund (PF) Details
- Employees’ State Insurance (ESI) Details
- Gratuity Information
- Documents uploaded by the Customer Organization or the Employee
The categories of information collected may vary depending on the organization’s configuration and applicable legal requirements.
6.3 Attendance and Workforce Information
To provide attendance and workforce management services, MedroWorks may process information including:
- Attendance Records
- Check-in Time
- Check-out Time
- Working Hours
- Shift Information
- Break Information (where enabled)
- Attendance Status
- Leave Balance
- Leave Applications
- Attendance Regularization Requests
- Attendance History
This information is used to maintain attendance records, generate reports, and support workforce management functions.
6.4 Location Information
MedroWorks collects location information only when required for attendance-related features and only while the application is in active use.
Location information may be used for:
- Attendance verification
- Office geofence validation
- Check-in and check-out verification
- Attendance location records
MedroWorks does not collect location information continuously or in the background.
6.5 Payroll and Financial Information
Where enabled by the Customer Organization, MedroWorks may process payroll and financial information, including:
- Salary Details
- Salary Components
- Payroll Records
- Bank Account Information
- IFSC Code
- PF and ESI Information
- Tax-related Information maintained by the employer
- Expense Claims
- Reimbursement Information
Payroll and financial information is processed only for authorized payroll, accounting, reimbursement, and statutory purposes.
6.6 Device and Technical Information
To ensure the security, reliability, and proper functioning of the Services, MedroWorks may automatically collect certain technical information, including:
- Device Model
- Operating System Version
- Application Version
- Device Identifier generated by Firebase Authentication
- Internet Protocol (IP) Address
- Date and Time of Access
- Login Activity
- Push Notification Token (Firebase Cloud Messaging)
This information is used to authenticate users, maintain platform security, troubleshoot issues, and deliver notifications.
6.7 Information You Provide
Users may voluntarily provide additional information while using MedroWorks, including:
- Profile Information
- Support Requests
- Leave Requests
- Expense Claims
- Employee Notes
- Documents submitted through the platform
- Feedback or communications with Customer Organizations or Medro Hi Tech Symbol Pvt Ltd
Such information is processed only for the purpose for which it is submitted.
6.8 Information Collected Through Firebase Services
MedroWorks uses Firebase services provided by Google Cloud Platform to operate and secure the Services.
Depending on the features used, information may be processed through:
- Firebase Authentication for user authentication.
- Firebase Realtime Database for storing application data.
- Firebase Cloud Storage for storing documents and files uploaded through the platform.
- Firebase Cloud Messaging (FCM) for delivering push notifications.
- Firebase Cloud Functions for securely processing server-side operations.
These services are used solely to provide and support the MedroWorks platform.
6.9 Information We Do Not Collect
Unless explicitly introduced in a future version of the Services, MedroWorks does not intentionally collect or process:
- Background Location Data
- Camera Images or Video
- Audio or Voice Recordings
- Contact Lists stored on your device
- SMS Messages
- Call Logs
- Google Analytics Data
- Crash Reporting Data through Firebase Crashlytics
- Advertising Identifiers for targeted advertising
If future features require additional categories of information, this Privacy Policy will be updated accordingly before such information is collected or processed.
7. How We Use Information
Medro Hi Tech Symbol Pvt Ltd uses the information collected through MedroWorks only for legitimate business purposes related to providing, maintaining, securing, and improving the Services.
Depending on how the Services are used, we may use Personal Information for the following purposes:
7.1 To Provide the Services
We use Personal Information to operate and deliver the features and functionality of MedroWorks, including:
- Creating and managing user accounts.
- Authenticating users and controlling access to the Services.
- Managing employee records.
- Recording attendance and working hours.
- Processing leave requests.
- Managing payroll information.
- Managing departments, designations, reporting structures, and organizational records.
- Providing workforce management features.
7.2 To Verify Attendance
Where attendance features are enabled by the Customer Organization, location information may be used to:
- Verify employee check-in and check-out.
- Validate attendance within approved office locations or geofences.
- Record attendance location for audit and reporting purposes.
- Prevent unauthorized or fraudulent attendance entries.
Location information is collected only while the application is actively being used for attendance-related functions.
7.3 To Communicate with Users
We may use information to communicate with users regarding the Services, including:
- Account-related notifications.
- Attendance reminders.
- Leave approvals or updates.
- Organization announcements.
- Payroll notifications.
- System alerts.
- Security-related communications.
- Other operational notifications.
Communications may be delivered through the application or by push notifications where enabled.
7.4 To Maintain Platform Security
Information may be used to:
- Verify user identity.
- Protect user accounts.
- Detect unauthorized access.
- Prevent misuse of the Services.
- Investigate suspected security incidents.
- Maintain audit logs.
- Ensure the integrity and availability of the platform.
7.5 To Provide Customer Support
When users contact Medro Hi Tech Symbol Pvt Ltd or their organization’s administrators for assistance, information may be used to:
- Respond to enquiries.
- Resolve technical issues.
- Investigate reported problems.
- Provide customer support.
- Improve the quality of support services.
7.6 To Comply with Legal Obligations
Information may be processed where necessary to:
- Comply with Applicable Law.
- Respond to lawful requests from governmental or regulatory authorities.
- Support employment, payroll, taxation, or statutory obligations of Customer Organizations.
- Protect the legal rights, property, or safety of Medro Hi Tech Symbol Pvt Ltd, Customer Organizations, users, or others.
7.7 To Improve the Services
We may use operational and technical information to:
- Maintain the stability of the platform.
- Improve system performance.
- Fix defects and technical issues.
- Enhance existing features.
- Develop new functionality.
- Improve security and reliability.
Where possible, improvements are made using operational or technical information rather than information that directly identifies individual users.
7.8 What We Do Not Use Your Information For
Unless expressly stated otherwise in a future version of this Privacy Policy, Medro Hi Tech Symbol Pvt Ltd does not:
- Sell Personal Information to third parties.
- Use Personal Information for third-party advertising.
- Share employee information for marketing purposes.
- Use employee information for behavioral advertising or user profiling unrelated to providing the Services.
Personal Information is processed only for the purposes described in this Privacy Policy or as otherwise instructed by the Customer Organization, where applicable.
8. Mobile Application Permissions
MedroWorks requests only the permissions that are necessary to provide specific features and functionality within the Services. Permissions are requested in accordance with your device’s operating system and may be managed through your device settings.
The permissions requested by MedroWorks are described below.
8.1 Location Permission
Purpose
MedroWorks requests access to your device’s location while the application is in use to support attendance-related features.
Location information may be used to:
- Verify employee check-in and check-out.
- Validate attendance within approved office locations or geofences.
- Record attendance location for audit and reporting purposes.
- Prevent unauthorized or fraudulent attendance entries.
MedroWorks does not collect or access location information in the background. Location is accessed only when attendance-related features require it and while the application is actively in use.
You may choose to disable location access through your device settings; however, doing so may prevent certain attendance features from functioning correctly.
8.2 Notification Permission
Purpose
MedroWorks requests permission to send notifications to keep users informed about important activities within the platform.
Notifications may include:
- Attendance reminders.
- Leave request updates.
- Approval notifications.
- Payroll notifications.
- Organization announcements.
- Task updates.
- Support and service notifications.
- Security-related alerts.
Notification preferences may be managed through your device settings. Disabling notifications may result in missed updates or delayed awareness of important events.
8.3 Permissions We Do Not Currently Request
As of the Effective Date of this Privacy Policy, MedroWorks does not request or require the following permissions for normal operation:
- Camera
- Microphone
- Contacts
- SMS
- Call Logs
- Calendar
- Background Location
- Nearby Devices
- Bluetooth
- Motion or Physical Activity
- Device Storage or Photos permission for document uploads
Where document uploads are supported, MedroWorks uses the operating system’s file selection interface, allowing users to choose files without requesting broad access to device storage.
If future versions of the Services require additional permissions, users will be informed at the time the permission is requested, and this Privacy Policy will be updated accordingly.
8.4 Permission Management
Users may review or modify application permissions at any time through their device settings.
Please note that disabling certain permissions may limit or prevent the use of specific features within MedroWorks.
Medro Hi Tech Symbol Pvt Ltd requests only those permissions that are reasonably necessary for the operation of the Services and does not request permissions unrelated to the functionality provided by the application.
9. Third-Party Services
To provide, maintain, and secure the MedroWorks platform, we use certain trusted third-party services. These service providers process information only to the extent necessary to perform the services they provide to MedroWorks and are subject to their own privacy policies and applicable legal obligations.
The third-party services currently used by MedroWorks are described below.
9.1 Firebase Authentication
MedroWorks uses Firebase Authentication, a service provided by Google LLC, to securely authenticate users and manage access to the Services.
Firebase Authentication is used for:
- User authentication
- Account sign-in
- Identity verification
- Session management
For more information, please refer to Google’s Privacy Policy:
https://policies.google.com/privacy
9.2 Firebase Realtime Database
MedroWorks uses Firebase Realtime Database to securely store and synchronize application data required to provide the Services.
Depending on the features enabled by the Customer Organization, this may include:
- Employee records
- Attendance information
- Leave records
- Payroll-related information
- Organizational data
- Application settings
- Operational data required for the Services
9.3 Firebase Cloud Storage
MedroWorks uses Firebase Cloud Storage to securely store files uploaded through the platform.
Examples include:
- Employee documents
- Organization documents
- Payroll-related documents
- Other files uploaded by authorized users
9.4 Firebase Cloud Messaging (FCM)
MedroWorks uses Firebase Cloud Messaging (FCM) to deliver push notifications to users.
Notifications may include:
- Attendance reminders
- Leave updates
- Approval notifications
- Organization announcements
- Task updates
- Security notifications
- Other operational communications
9.5 Firebase Cloud Functions
MedroWorks uses Firebase Cloud Functions to securely process server-side operations.
Cloud Functions are used for platform functionality including:
- Secure business logic execution
- User management
- Attendance processing
- Account management
- Notification processing
- Administrative operations
9.6 Google Maps Platform
MedroWorks uses Google Maps Platform to support attendance and location-based features.
Google Maps may be used for:
- Displaying office locations
- Attendance location verification
- Geofence validation
- Location selection within the application
Google Maps is used only for features that require location functionality and in accordance with the permissions granted by the user.
Information about Google’s privacy practices is available in Google’s Privacy Policy.
9.7 Google Play Services
On Android devices, MedroWorks relies on Google Play Services to support certain platform functionality, including Firebase services and location-related features.
Google Play Services may process technical information necessary for the proper operation of these services.
9.8 No Advertising or Analytics Services
As of the Effective Date of this Privacy Policy, MedroWorks does not use:
- Google Analytics
- Firebase Analytics
- Firebase Crashlytics
- Advertising SDKs
- Mobile advertising networks
- Third-party marketing or behavioral advertising services
If additional third-party services are introduced in the future that materially affect the processing of Personal Information, this Privacy Policy will be updated accordingly before such services are implemented.
9.9 Third-Party Privacy Policies
The third-party services identified above operate under their own privacy policies and terms.
Medro Hi Tech Symbol Pvt Ltd encourages users to review the privacy policies of these service providers to understand how they process information in connection with the services they provide.
10. Data Sharing and Disclosure
Medro Hi Tech Symbol Pvt Ltd values the privacy of Personal Information entrusted to the MedroWorks platform. We do not sell, rent, or trade Personal Information to third parties for marketing or advertising purposes.
Personal Information is shared only in the circumstances described below and only to the extent necessary to provide the Services or comply with applicable legal obligations.
10.1 Sharing with the Customer Organization
Where MedroWorks is used by an organization, Personal Information is made available to authorized users within that organization based on their assigned roles and permissions.
Depending on the organization’s configuration, Personal Information may be accessible to authorized:
- Human Resources (HR) Personnel
- Managers
- Finance Personnel
- Administrators
- Company Owners
- Other authorized users designated by the Customer Organization
Access is governed by the Customer Organization’s role-based access controls and internal policies.
10.2 Service Providers
We may share Personal Information with trusted third-party service providers that assist us in operating the MedroWorks platform.
These service providers process information only to the extent necessary to provide services on our behalf.
Examples include providers supporting:
- User Authentication
- Cloud Hosting
- Secure Data Storage
- Push Notifications
- Location Services
- Infrastructure required to operate the platform
These providers are contractually or legally required to protect the information they process and may not use it for their own marketing purposes.
10.3 Legal Requirements
We may disclose Personal Information where disclosure is required or permitted under Applicable Law, including where necessary to:
- Comply with legal obligations.
- Respond to lawful requests from courts, regulators, or government authorities.
- Protect the rights, property, or safety of Medro Hi Tech Symbol Pvt Ltd, Customer Organizations, users, or the public.
- Investigate suspected fraud, misuse, security incidents, or unlawful activities.
10.4 Business Transfers
If Medro Hi Tech Symbol Pvt Ltd is involved in a merger, acquisition, corporate restructuring, sale of assets, or similar business transaction, Personal Information may be transferred as part of that transaction, subject to applicable legal requirements and appropriate safeguards.
Where required by law, affected users or Customer Organizations will be notified of any material changes affecting the processing of Personal Information.
10.5 With User Consent
Where required, Personal Information may be shared with third parties when the user or Customer Organization has provided explicit consent for such disclosure.
10.6 We Do Not Sell Personal Information
Medro Hi Tech Symbol Pvt Ltd does not:
- Sell Personal Information.
- Rent Personal Information.
- Share Personal Information with third parties for advertising purposes.
- Share employee information with data brokers.
- Use Personal Information for third-party behavioral advertising.
Personal Information is processed only for the purposes described in this Privacy Policy or as otherwise instructed by the Customer Organization, where applicable.
10.7 Data Minimization
We share only the minimum amount of Personal Information reasonably necessary to:
- Provide the Services.
- Support Customer Organizations.
- Fulfill contractual obligations.
- Comply with Applicable Law.
- Maintain the security and reliability of the MedroWorks platform.
11. Data Security
The security of Personal Information is important to Medro Hi Tech Symbol Pvt Ltd. We implement reasonable administrative, technical, and organizational measures designed to protect Personal Information against unauthorized access, alteration, disclosure, loss, misuse, or destruction.
While no method of electronic storage or transmission over the Internet can be guaranteed to be completely secure, we continually work to maintain appropriate safeguards to protect the information processed through MedroWorks.
11.1 Security Measures
MedroWorks uses a combination of technical and organizational safeguards, which may include:
- Secure user authentication through Firebase Authentication.
- Encrypted communication between the application and cloud services using HTTPS/TLS.
- Role-Based Access Control (RBAC) to restrict access based on user roles and permissions.
- Secure cloud infrastructure provided through Google Cloud Platform (Firebase).
- Server-side processing of sensitive operations using Firebase Cloud Functions.
- Authentication and authorization rules to control access to application data.
- Regular monitoring and maintenance of the MedroWorks platform.
- Administrative controls to help prevent unauthorized access to customer information.
These safeguards are designed to help protect the confidentiality, integrity, and availability of Personal Information processed through the Services.
11.2 Account Security
Users are responsible for maintaining the confidentiality of their account credentials.
Users should:
- Keep login credentials confidential.
- Use strong and unique passwords.
- Avoid sharing accounts with other individuals.
- Notify their organization or administrator if they suspect unauthorized access to their account.
Customer Organizations are responsible for managing user accounts, permissions, and access rights within their organization.
11.3 Access Controls
Access to Personal Information within MedroWorks is restricted based on the roles and permissions assigned by the Customer Organization.
Depending on organizational policies, access may be limited to authorized:
- Human Resources (HR) Personnel
- Managers
- Finance Personnel
- Administrators
- Company Owners
- Other authorized users
Each Customer Organization is responsible for configuring and managing user permissions in accordance with its own internal policies and Applicable Law.
11.4 Data Transmission
Information exchanged between MedroWorks applications and our cloud infrastructure is transmitted using secure, encrypted communication protocols designed to help protect data during transmission.
11.5 Security Incidents
If we become aware of a security incident affecting the MedroWorks platform, we will take reasonable steps to investigate the incident, mitigate its impact, and, where required by Applicable Law or contractual obligations, notify affected Customer Organizations.
Customer Organizations remain responsible for assessing and fulfilling any notification obligations they may have toward their employees or other individuals whose information they control.
11.6 User Responsibilities
Security is a shared responsibility.
Users and Customer Organizations can help protect Personal Information by:
- Keeping account credentials secure.
- Using trusted devices where possible.
- Logging out of shared devices after use.
- Promptly reporting suspected unauthorized access or security concerns.
- Keeping applications updated to the latest available version.
11.7 No Absolute Security Guarantee
Although Medro Hi Tech Symbol Pvt Ltd implements reasonable safeguards designed to protect Personal Information, no system, network, or method of electronic storage or transmission can be guaranteed to be completely secure.
Accordingly, while we strive to protect Personal Information, we cannot guarantee absolute security against every possible threat or unauthorized access.
12. Data Retention
Medro Hi Tech Symbol Pvt Ltd retains Personal Information only for as long as necessary to provide the Services, fulfill contractual obligations, comply with Applicable Law, resolve disputes, enforce our legal agreements, and support legitimate business operations.
Because MedroWorks is an employer-managed platform, the retention of employee information is generally determined by the Customer Organization, subject to applicable legal and regulatory requirements.
12.1 Customer Data
Employee records, attendance information, leave records, payroll information, organizational data, and other workforce-related information are retained according to the retention policies established by the Customer Organization.
Customer Organizations are responsible for determining how long such information should be retained and when it should be updated, archived, or deleted in accordance with Applicable Law.
12.2 Account Information
Account-related information may be retained for as long as an account remains active or as otherwise required to provide the Services.
When an account is deactivated or removed by the Customer Organization, related information may continue to be retained where necessary to:
- Comply with Applicable Law.
- Fulfill contractual obligations.
- Resolve disputes.
- Enforce legal agreements.
- Maintain security and audit records.
12.3 Backup and System Data
Certain information may remain in encrypted backups or disaster recovery systems for a limited period after deletion from active systems.
Such information is retained solely for business continuity, disaster recovery, security, and operational purposes and is protected using appropriate safeguards.
12.4 Legal and Regulatory Requirements
Certain categories of information, including employment, payroll, taxation, attendance, or statutory records, may be retained for longer periods where required or permitted by Applicable Law or by the Customer Organization’s legal obligations.
Where deletion is requested, information that must be retained for legal, regulatory, accounting, employment, or compliance purposes may be retained until those obligations have been satisfied.
12.5 Deletion of Information
Where Personal Information is no longer required for the purposes described in this Privacy Policy and no legal or contractual obligation requires its continued retention, reasonable steps will be taken to securely delete, anonymize, or otherwise dispose of such information in accordance with applicable operational procedures.
12.6 Customer Responsibility
Customer Organizations are responsible for ensuring that their data retention and deletion practices comply with Applicable Law and their internal policies.
Medro Hi Tech Symbol Pvt Ltd processes retention and deletion requests in accordance with the instructions of the Customer Organization, except where retention is required or permitted by Applicable Law.
13. Your Rights
Medro Hi Tech Symbol Pvt Ltd respects the privacy rights of users and is committed to handling Personal Information in accordance with Applicable Law.
Depending on your relationship with MedroWorks, your employer, and applicable legal requirements, you may have the following rights regarding your Personal Information.
13.1 Right to Access
You may request access to the Personal Information associated with your MedroWorks account, subject to verification of your identity and applicable legal or contractual restrictions.
Where your employer is the Data Controller, such requests should generally be directed to your employer or the organization’s authorized administrator.
13.2 Right to Correction
If you believe that your Personal Information is inaccurate, incomplete, or outdated, you may request that it be corrected.
Where applicable, corrections to employment-related information may need to be approved or completed by your employer or the organization’s authorized administrator.
13.3 Right to Request Account Deletion
Employees may request the deletion of their MedroWorks account through the Request Account Deletion feature available within the application.
Account deletion requests are reviewed and processed by the Customer Organization’s authorized HR personnel or administrators.
Approval of an account deletion request may result in the removal of your access to the MedroWorks Services.
Certain employment, payroll, attendance, taxation, audit, or statutory records may be retained where required by Applicable Law or the Customer Organization’s retention policies.
13.4 Right to Withdraw Consent
Where Personal Information is processed based on your consent, you may withdraw that consent where permitted by Applicable Law.
Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
Please note that withdrawing consent for certain processing activities may affect your ability to use specific features of the Services.
13.5 Right to Raise Questions or Concerns
If you have questions regarding this Privacy Policy or the processing of your Personal Information, you may:
- Contact your employer or organization’s administrator for employment-related matters.
- Contact Medro Hi Tech Symbol Pvt Ltd using the contact information provided in this Privacy Policy for platform-related privacy enquiries.
We will make reasonable efforts to respond to legitimate privacy enquiries in accordance with Applicable Law.
13.6 Limitations
Certain requests relating to Personal Information may be limited or declined where:
- Retention is required by Applicable Law.
- The information forms part of employment, payroll, taxation, attendance, audit, or statutory records that must be maintained.
- Compliance with the request would adversely affect the rights or obligations of another person or Customer Organization.
- The request cannot be fulfilled due to legal, contractual, or operational requirements.
Where a request cannot be fulfilled, we will provide an explanation to the extent permitted by Applicable Law.
14. Account Deletion
MedroWorks provides a process through which users may request the deletion of their account, subject to review by the Customer Organization.
Because MedroWorks is an employer-managed workforce platform, employee accounts are managed by the Customer Organization and cannot be permanently deleted directly by employees.
14.1 Requesting Account Deletion
Employees may submit an account deletion request through the Request Account Deletion feature available within the MedroWorks application.
The request is forwarded to the Customer Organization’s authorized Human Resources (HR) personnel or Administrator for review.
14.2 Review and Approval
Upon receiving a deletion request, the Customer Organization may:
- Approve the request.
- Reject the request.
- Request additional information before making a decision.
The decision is made by the Customer Organization in accordance with its internal policies, employment obligations, and Applicable Law.
14.3 Deletion Process
Where a deletion request is approved, the Customer Organization may initiate the removal of the employee’s account through the MedroWorks administrative platform.
Subject to applicable legal and operational requirements, this process may include:
- Deactivation or removal of the user’s authentication credentials.
- Removal of employee information from active application records.
- Removal of associated user access to the Services.
- Deletion of other information where appropriate and permitted.
14.4 Information That May Be Retained
Certain information may continue to be retained after an account has been removed where retention is required or permitted by:
- Applicable Law.
- Employment and labour regulations.
- Taxation or accounting requirements.
- Audit requirements.
- Legal proceedings or dispute resolution.
- The Customer Organization’s documented retention policies.
Such retained information will continue to be protected in accordance with this Privacy Policy.
14.5 Customer Organization Responsibility
The Customer Organization acts as the Data Controller for employee information and is responsible for determining whether an account deletion request should be approved and whether certain employment records must be retained.
Medro Hi Tech Symbol Pvt Ltd processes approved deletion requests in accordance with the Customer Organization’s instructions, except where retention is required or permitted by Applicable Law.
14.6 Questions Regarding Account Deletion
If you have questions regarding the status of your account deletion request or the retention of employment records, you should first contact your employer or the Customer Organization’s Human Resources (HR) department or Administrator.
For questions relating to the MedroWorks platform or this Privacy Policy, you may contact Medro Hi Tech Symbol Pvt Ltd using the contact information provided in this Privacy Policy.
15. Children’s Privacy
MedroWorks is designed and intended for use by businesses, organizations, institutions, and their authorized workforce. The Services are not intended for individuals under the age of 18 years and are not directed toward children.
We do not knowingly collect Personal Information directly from children through the MedroWorks platform.
Employee accounts are created and managed by Customer Organizations as part of an employment or workforce relationship. MedroWorks does not permit individuals under the age of 18 to independently register for or create an account.
If Medro Hi Tech Symbol Pvt Ltd becomes aware that Personal Information has been collected directly from a child in a manner inconsistent with this Privacy Policy or Applicable Law, we will take reasonable steps to delete or otherwise handle such information in accordance with Applicable Law.
If you believe that a child has provided Personal Information to MedroWorks inappropriately, please contact us using the contact information provided in this Privacy Policy so that we may review the matter and take appropriate action.
16. International Data Processing
MedroWorks is currently intended for use by organizations operating in India.
To provide the Services, Medro Hi Tech Symbol Pvt Ltd uses cloud infrastructure and technology services provided by trusted third-party service providers, including Google Cloud through Firebase.
As a result, Personal Information may be processed, stored, or transferred through systems and infrastructure that may be located in jurisdictions outside India, subject to the operational practices of those service providers.
Where such processing or transfers occur, Medro Hi Tech Symbol Pvt Ltd takes reasonable steps to ensure that Personal Information continues to be protected through appropriate contractual, technical, and organizational safeguards, in accordance with Applicable Law.
By using MedroWorks, you acknowledge that Personal Information may be processed through secure cloud infrastructure operated by our authorized service providers for the purpose of delivering the Services.
As MedroWorks expands into additional countries or regions, this Privacy Policy may be updated to reflect any changes in international data processing practices.
17. Changes to this Privacy Policy
Medro Hi Tech Symbol Pvt Ltd may update or modify this Privacy Policy from time to time to reflect changes in our Services, legal or regulatory requirements, security practices, or business operations.
When we make material changes to this Privacy Policy, we will update the “Last Updated” date displayed at the beginning of this document. Where appropriate, we may also provide additional notice through the MedroWorks platform, our website, or other reasonable means.
Your continued use of the Services after the updated Privacy Policy becomes effective constitutes your acknowledgment of the revised Privacy Policy.
We encourage users and Customer Organizations to review this Privacy Policy periodically to stay informed about how Personal Information is collected, used, and protected.
18. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your Personal Information, you may contact us using the details below.
Medro Hi Tech Symbol Pvt Ltd
Registered Office
H.N. 244, Sector E New
Nakoda Colony
Baran MDG, Baran
Rajasthan – 325205
India
Product Website
Company Website
For employment-related questions, including employee records, attendance, payroll information, or account management, you should first contact your employer or your organization’s Human Resources (HR) department or Administrator.
Privacy Policy Version History
| Version | Effective Date | Description |
|---|---|---|
| 1.0 | 15 July 2026 | Initial release of the MedroWorks Privacy Policy. |