Privacy Policy

1. Introduction & Legal Entity Information

This Privacy Policy outlines how ZUDKU DIGITAL SOLUTIONS (hereinafter referred to as "ZUDKU", "we", "our", or "us"), registered at 19/7, Pardeshipura, Indore, Madhya Pradesh - 452003, India, the owner and operator of the ZUDKU digital platforms and the LaganBook product brand (https://www.laganbook.com), collects, processes, stores, and protects personal data obtained from users of our web platforms and mobile applications.

We are committed to maintaining the highest benchmarks of data privacy, adhering to the Information Technology Act (2000), Digital Personal Data Protection Act (DPDPA), the EU General Data Protection Regulation (GDPR), and Google Play Developer Program Policies.

2. Information We Collect in the Mobile Application & Platform

To deliver enterprise workforce services, ZUDKU collects the following categories of data strictly with user permission:

• Account & Profile Details: Full name, official corporate email, phone number, designated employee identification number, job title, department, and company affiliation.
• Location Information (GPS & Network):
  • Precise & Approximate Location: Collected only at the exact moment an employee clocks in or clocks out to confirm attendance within an employer-designated geo-fenced workplace.
  • Field Staff Tracking (with active disclosure): If explicitly enabled by your employer for field tasks, location data is recorded during active work shifts to log site visits. We never track employees outside of scheduled work hours.
• Camera & Facial Biometric Data:
  • Selfie Clock-In: With explicit camera permission, the mobile app captures a photo during punch-in for liveness validation to eliminate buddy punching.
  • Biometric Data Handling: Facial image templates are encrypted using AES-256 and used exclusively for identity verification against the employer's authorized personnel records. Facial data is never sold, shared, or used for commercial profiling.
• Device & Technical Information: Device model, operating system version, unique device identifier (UUID), IP address, app version, crash analytics, and network connection status for troubleshooting.
• Event Booking & Rental Records (LaganBook): Event dates, client contact numbers, WhatsApp quotation records, rented item inventory, godown gate passes, advance token payments, and party account ledgers entered by event contractors and vendors.
• Payroll & Statutory Records (ZUDKU ERP): Salary slips, bank account details for direct deposit processing, tax declarations, Provident Fund (PF) numbers, and ESIC registrations submitted by your employer.

3. How We Use Collected Data

• Authenticating user credentials and verifying authorized workplace attendance.
• Generating branded PDF quotations, invoices, and truck loading passes for event vendors.
• Calculating work hours, overtime, leave entitlements, and generating automated monthly payroll sheets.
• Enabling managers to approve leave applications, attendance regularizations, and expense claims.
• Sending critical alerts regarding peak event dates, shift schedules, and urgent administrative updates.
• Maintaining security audits, fraud prevention, and ensuring regulatory compliance with labor standards.

4. Data Sharing & Third-Party Disclosures

We never sell, rent, or trade your personal information to third parties, advertisers, or data brokers.

Data is shared solely with:

• Your Enterprise / Employer Organization: The business entity subscribing to ZUDKU or LaganBook services, who acts as the primary Data Controller.
• Infrastructure Sub-Processors: High-security cloud hosting providers in certified data centers with ISO 27001/SOC 2 Type II compliance.
• Legal Authorities: When strictly mandated by court orders, lawful government requests, or statutory mandates.

5. Data Security & Encryption Protocols

• Encryption in Transit: All communications between mobile apps, web portals, and cloud servers are encrypted using Transport Layer Security (TLS 1.3).
• Encryption at Rest: Sensitive databases, employee records, and biometric templates are secured using Advanced Encryption Standard (AES-256).
• Role-Based Access Control (RBAC): Only authorized administrators designated by the subscribing business can access operational and personnel records.

7. Children's Privacy (COPPA Compliance)

Our applications and services are strictly designed for commercial businesses, enterprise workforces, and event vendor operations. We do not knowingly collect, solicit, or maintain personal information from individuals under 18 years of age. If we learn that personal data of a minor has been collected, we take immediate measures to permanently delete that information.

8. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect enhancements in our software, regulatory amendments under the Digital Personal Data Protection Act (DPDPA), or Google Play policy updates. Revisions will be published on this URL with an updated Effective Date.

9. Data Protection Officer & Grievance Redressal

For any questions or concerns regarding this Privacy Policy, please contact our Grievance Officer: