Privacy Policy

1. Information We Collect

Information you provide directly

When you register for or use TuluSync, we collect information you provide, including:

• Account registration details such as name, email address, and password
• Employee profile information including job title, department, and contact details
• Leave requests, attendance records, and payroll data entered into the platform
• Communications you send to us, including support requests
• Billing and payment information for subscription management

Information collected automatically

When you access TuluSync, we automatically collect certain information, including:

• Log data such as IP address, browser type, pages visited, and timestamps
• Device information including operating system and screen resolution
• Usage data about how you interact with our platform features
• Session identifiers and authentication tokens

Information from your organization

If your employer or organization provides TuluSync as a workplace tool, we may receive information about you from your employer as part of the onboarding or configuration process. In this case, your organization is the data controller and we act as a data processor on their behalf.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the TuluSync platform and its features
• Process leave requests, attendance records, payroll runs, and other HR workflows
• Send transactional notifications such as leave approvals, payslip generation, and system alerts
• Authenticate users and maintain account security
• Provide customer support and respond to inquiries
• Generate analytics and reports for your organization's HR team
• Comply with legal obligations and enforce our terms of service
• Detect, investigate, and prevent fraudulent or unauthorized activity

We do not sell your personal information to third parties, and we do not use your data for advertising purposes.

3. Sharing Your Information

We may share your information in the following circumstances:

Within your organization

Information you enter into TuluSync — such as leave requests, attendance records, and profile details — is accessible to authorized personnel within your organization, including HR administrators and designated managers, according to the role-based access controls configured by your organization.

Service providers

We share information with trusted third-party service providers who assist us in operating our platform, including cloud hosting providers, payment processors, and customer support tools. These providers are contractually bound to protect your information and use it only for the services they provide to us.

Legal requirements

We may disclose your information when required by applicable law, court order, or government regulation, or when we believe disclosure is necessary to protect our rights, prevent fraud, or ensure the safety of our users.

Business transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred to the acquiring entity. We will notify you before your information is transferred and becomes subject to a different privacy policy.

4. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

For enterprise customers, data retention is governed by the subscription agreement. When an organization's account is terminated, we will delete or anonymize their data within 90 days, unless legally required to retain it longer.

You may request deletion of your personal information at any time by contacting us at info@tulusync.com. Note that your employer may have their own data retention obligations that affect our ability to delete certain records.

5. Security

We take the security of your information seriously and implement industry-standard measures to protect it, including:

• Encryption of data in transit using TLS/SSL
• Encryption of sensitive data at rest
• Role-based access controls limiting who can view or modify data
• Regular security assessments and vulnerability testing
• Multi-tenant data isolation to prevent cross-organization data access

While we strive to protect your information, no security system is impenetrable. In the event of a data breach that affects your personal information, we will notify you and the relevant authorities as required by applicable law.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request that we correct inaccurate or incomplete information
• Deletion: Request that we delete your personal information, subject to certain exceptions
• Portability: Request a machine-readable copy of your data to transfer to another service
• Restriction: Request that we limit how we use your personal information
• Objection: Object to our processing of your personal information in certain circumstances
• Withdraw consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, please contact us at info@tulusync.com. We will respond to your request within 30 days. Please note that if you are an employee using TuluSync through your employer, some requests must be directed to your employer as the data controller.

7. Cookies

TuluSync uses cookies and similar technologies to maintain your session, remember your preferences, and analyze how our platform is used. We use the following types of cookies:

• Essential cookies: Required for the platform to function, including authentication and session management
• Preference cookies: Remember your settings such as language and theme
• Analytics cookies: Help us understand how users interact with our platform so we can improve it

You can control cookies through your browser settings. Disabling essential cookies may affect your ability to use the platform.

8. Third-Party Services

TuluSync may integrate with or link to third-party services. This Privacy Policy applies only to our platform. We are not responsible for the privacy practices of third-party services, and we encourage you to review their privacy policies before using them.

Our current third-party service integrations include cloud infrastructure providers for hosting and storage. We evaluate all third-party providers for compliance with applicable data protection standards.

9. Children's Privacy

TuluSync is an enterprise software platform designed for use by organizations and their adult employees. We do not knowingly collect personal information from individuals under the age of 16. If we become aware that we have collected such information, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will notify you by email or by posting a prominent notice within the platform, and update the "Last updated" date at the top of this page.

Your continued use of TuluSync after we post changes constitutes your acceptance of the updated policy. If you disagree with the changes, you should stop using the platform and contact us to request deletion of your data.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: info@tulusync.com
• Website: tulusync.com

We are committed to resolving any concerns about your privacy. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.