Privacy Policy

Effective Date: 07-04-2025

SECTION 1 – Introduction & Consent

Nwatch ("We", "Us", "Our"), operated by Noseberry Private Limited, values your privacy. This Privacy Policy describes how we collect, use, store, process, and share your personal information when you use our web application Nwatch, which includes time, project, leave management, and social media management features (the "App" or "Service").

This policy is compliant with the Information Technology Act, 2000, the Information Technology (Reasonable security practices and procedures and sensitive personal data or information) Rules, 2011 ("IT Rules, 2011"), and incorporates principles from the Digital Personal Data Protection Act, 2023 ("DPDPA").

By accessing or using the Service, you signify that you have read, understood, and agree to the collection, storage, use, and disclosure of your personal information as described in this Privacy Policy and our Terms of Service. You provide your free, specific, informed, and unambiguous consent to the processing of your personal data for the purposes outlined herein. You have the right to withdraw this consent at any time.

SECTION 2 – Information We Collect (Personal Data)

We collect information you provide directly, information collected automatically, and information from third parties (like social media platforms when you connect them). This may include:

Personal Identifiable Information (PII):

• Name, email address, phone number, job title.
• Employer or organization details (if provided).
• Profile photo (if uploaded).

Work-Related Information

• Project details, task assignments, work logs.
• Attendance records, time tracking data, leave requests/approvals.
• Approval workflows and status of requests.

Social Media Account Data (Collected via Official APIs with Your Explicit Authorization):

• Authentication Tokens: Secure access tokens provided by platforms (e.g., Meta) to link your account. We never receive or store your social media passwords.
• Profile Information: Publicly available information permitted by you and the platform (e.g., name, page ID, username).
• Content & Engagement DataContent you manage via our App (drafts, scheduled/published posts) and related analytics provided by the platform's API (likes, comments, reach, etc.).

Device & Usage Data (Technical Information):

• IP address, browser type, operating system, device identifiers.
• Login timestamps, session activity, features used.
• App performance data, error logs.

Note: While most data collected may not be classified as "Sensitive Personal Data or Information" (SPDI) under the IT Rules, 2011, we treat all personal data with appropriate care and security. Access tokens are handled with heightened security measures

SECTION 3 – Purpose and Lawful Basis for Processing

We collect and process your personal data for the following specific, clear, and legitimate purposes, based on your consent and the necessity to perform our services:

• Service Provision: To operate, maintain, and provide all features of the App, including time/project/leave management and social media integration (posting, scheduling, analytics display).
• Authorization & Authentication: To manage your user account and securely authenticate your access to connected social media platforms via their official protocols.
• Communication: To send service-related notifications, updates, security alerts, and support messages.
• Improvement & Personalization: To understand usage patterns, improve the App's functionality, personalize your experience, and develop new features.
• Security: To protect against fraud, abuse, security incidents, and enforce our terms.
• Compliance: To comply with applicable Indian laws, regulations, legal processes, platform terms (e.g., Meta Developer Policies), and governmental requests.

SECTION 4 – Data Sharing and Disclosure

We do not sell your personal data. We only share your information in the following circumstances, consistent with your consent and Indian law:

• Within Your Organization: If you use Nwatch under an employer's account, administrators may access relevant work-related and usage data.
• With Connected Social Media Platforms: When you use social media features, we transmit necessary data (e.g., content to be posted, API requests for data) to the respective platforms (e.g., Meta) as directed by you. This usage is governed by their respective terms and privacy policies.
• With Service Providers: We may use third-party vendors (e.g., cloud hosting like AWS/GCP, analytics tools) who process data on our behalf under strict confidentiality agreements and only for the purposes outlined here. We ensure they adhere to reasonable security standards.
• Legal Requirements: If required by Indian law, court order, or governmental authority under procedures established by law.
• Business Transfers: In case of a merger, acquisition, or asset sale, your information may be transferred, subject to the receiving entity upholding the commitments in this policy.
• With Explicit Consent: We may share data with other third parties if you provide explicit consent.

SECTION 5 – Data Storage, Security, and Retention

• Security Practices: We implement "reasonable security practices and procedures" as mandated by the IT Rules, 2011 (and Section 43A of the IT Act), including technical, administrative, and physical safeguards like encryption (in transit and at rest where feasible), access controls, and secure storage for sensitive items like API tokens, to protect your data from unauthorized access, alteration, disclosure, or destruction.
• Data Storage Location: Your data may be stored and processed on servers located within or outside India (e.g., by our cloud service providers). By using the Service, you consent to the transfer of your data, and we ensure such transfers comply with Indian legal requirements for cross-border data transfer (currently based on consent/necessity under IT Rules, 2011, future compliance with DPDPA notifications).
• Data Retention: We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected (e.g., maintaining your active account, providing the Service), or as required by applicable Indian laws (e.g., legal or accounting requirements). Data associated with disconnected social media accounts (like tokens) is deleted promptly. Upon account termination or valid deletion request, we will delete or anonymize your data unless legally required to retain it.

SECTION 6 – Your Rights Under Indian Law

• Access: Request access to the personal data we hold about you.
• Correction & Updating: Request correction of inaccurate or incomplete data. You can update most profile information directly in the App.
• Withdraw Consent: Withdraw your consent for processing personal data at any time via app settings or by contacting us. Withdrawal will not affect the lawfulness of processing based on consent before its withdrawal but may impact your ability to use the Service or certain features. You can specifically disconnect social media accounts at any time.
• Erasure (Right to be Forgotten): Request deletion of your personal data, subject to legal retention obligations.
• Grievance Redressal: Raise complaints regarding data processing with our Grievance Officer.

To exercise these rights, please contact our Grievance Officer. We will respond to your request in accordance with applicable law.

SECTION 7 – Platform Terms & Compliance

Your use of social media features via our App is also subject to the terms of service, community standards, and developer policies of the respective social media platforms (e.g., Meta's Terms of Service and Platform Terms). We use official APIs provided by these platforms and strive to comply with their requirements.

SECTION 8 – Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the new policy on our website, updating the effective date, and/or through other communication channels (like email or in-app notification). Your continued use of the Service after changes signifies acceptance. Please review this policy frequently.

SECTION 9 – Contact Information

If you have any questions, concerns, or wish to exercise your rights regarding your personal data, please contact hello@nwatch.in.