Smarteye Solutions Private Limited · Last updated: 1 July 2026
This Privacy Policy explains how Smarteye Solutions Private Limited
(“Smarteye”, “we”, “us”, or “our”)
collects, uses, stores, shares, and protects information through the
Vuon Vetan mobile application and associated web platform
(together, the “Platform”). Vuon Vetan is a Human Resource,
Attendance, and Payroll management service for businesses operating in India.
By creating an account, or by being enrolled by your employer and using the
Platform, you acknowledge the practices described here.
1. Who we are and our role
Data Processor / Service Provider: Smarteye Solutions
Private Limited provides the Vuon Vetan Platform to employer organisations
(“Employers”).
Data Fiduciary / Employer: When you are an employee or
worker enrolled by your Employer, your Employer determines why and how your
personal data is processed and is the primary data fiduciary. Smarteye
processes that data on the Employer’s instructions to deliver the
service.
Where Smarteye itself decides the purpose (e.g. account security, service
improvement, legal compliance), Smarteye acts as a data fiduciary.
This policy is written in line with India’s Digital Personal
Data Protection Act, 2023, the Information Technology Act,
2000 and the SPDI Rules, 2011, and the
Aadhaar Act, 2016, to the extent applicable.
2. Information we collect
2.1 Identity and profile data
Name, employee code, date of birth, gender, photograph, designation,
department, work location, date of joining, and similar HR record fields.
2.2 Contact data
Mobile number, email address, and postal/residential address.
2.3 Sensitive personal data (collected only with your explicit consent)
Aadhaar (KYC): For statutory and identity-verification
purposes, we collect your Aadhaar number and a live selfie to complete KYC.
The full Aadhaar number is encrypted at rest; we generally
store and display only the last four digits plus the
verification outcome. Aadhaar data is used strictly for the consented
purpose and is never sold or used for advertising.
PAN, where required for payroll/TDS.
Bank account number and IFSC, for salary disbursement.
Stored encrypted.
Facial image / selfie, captured to confirm identity at
attendance punch-in and during KYC.
Location data (GPS), captured at the moment of a
field/geofenced attendance punch to confirm you are within an authorised
work site.
We collect sensitive personal data only after obtaining your
explicit, informed consent, which is presented and recorded
in both English and Hindi, along with the consent version and
language you agreed to.
2.4 Attendance, leave and payroll data
Punch-in/out records, shifts, regularisations, leave applications and
balances, salary structure, payslips, statutory contributions (EPF, ESI, PT,
TDS, LWF), and related records.
2.5 Device and technical data
Device identifier, operating system, app version, IP address, and a push
notification token (via Firebase Cloud Messaging) to deliver alerts.
2.6 Contacts (optional)
If you choose to add a new employee from your phone contacts, and grant the
contacts permission, we access the selected contact’s name and phone
number solely to pre-fill that form. We do not upload or store
your full contact list.
3. How we use your information
Create and manage your account and Employer workspace;
Record and process attendance, including geofenced/field punches with
photo and location verification;
Verify identity via Aadhaar/PAN KYC as required by your Employer and law;
Process payroll and statutory compliance (EPF, ESI, PT, TDS, LWF,
gratuity, bonus) and generate payslips and bank-transfer files;
Manage leave, rosters and approvals;
Send service notifications (punch confirmations, approvals, announcements);
Secure the Platform, prevent fraud/spoofing, and maintain audit logs;
Comply with legal obligations and respond to lawful requests;
Improve and support the Platform.
4. Legal basis for processing
We process personal data on the basis of: (a) your consent
(especially for sensitive data such as Aadhaar, biometric/facial image, and
location); (b) performance of the employment relationship and the
service requested by your Employer; and (c) compliance with
legal and statutory obligations in India. You may
withdraw your consent at any time (see Section 9). Withdrawal
does not affect processing already carried out, and some processing may be
required by law even after withdrawal.
5. How we share information
We do not sell your personal data. We share it only:
With your Employer and its authorised administrators.
KYC / verification providers engaged to validate
Aadhaar/PAN, strictly for that verification.
Statutory authorities — e.g. EPFO, ESIC, Income Tax
Department, and State Professional Tax / Labour Welfare authorities — for
mandatory filings.
Banks / payment partners, to process salary disbursements.
Infrastructure and service providers (cloud hosting,
object storage, and Firebase Cloud Messaging) that process data on our
behalf under confidentiality and security obligations.
Legal / regulatory disclosure where required by law,
court order, or lawful government request.
6. Data storage and security
Data is stored on secured servers; each Employer’s data is logically
isolated from others.
Sensitive fields (Aadhaar, PAN, bank account, IFSC) are encrypted
at rest.
Documents and photographs are stored in private object storage,
accessible only via time-limited, signed URLs.
Access is restricted through role-based access control, and sensitive
actions are recorded in immutable audit logs.
Access tokens on your device are held in secure storage; the app supports
PIN and biometric (fingerprint/face) lock.
No method of transmission or storage is completely secure, and we cannot
guarantee absolute security.
7. Data retention
We retain personal data for as long as your account is active and as
necessary to provide the service, and thereafter for the period required to
meet legal, statutory, tax, accounting, and audit obligations under Indian law.
When no longer required, data is deleted or anonymised.
8. Aadhaar-specific safeguards
Aadhaar is collected only for the stated verification purpose, with your
explicit consent (recorded in English and Hindi).
The full Aadhaar number is encrypted; we normally retain only the masked
(last-4) form and the verification result.
We do not use Aadhaar beyond the consented purpose, and do not share it
for marketing or profiling.
You may contact us to seek information about, or deletion of, your Aadhaar
data, subject to legal retention requirements.
9. Your rights
Subject to applicable law, you have the right to access, correct or update,
withdraw consent, request erasure (subject to legal retention), and seek
grievance redressal, as provided under the DPDP Act. Because your Employer is
the primary data fiduciary for your HR records, some requests may be directed
to, or require action by, your Employer. Contact us using the details in
Section 13.
10. Children
The Platform is intended for employees and workers and is not
directed at children under 18. We do not knowingly enrol individuals
below the legal working age.
11. Consent — English and Hindi
Consent for collection of sensitive personal data (Aadhaar, facial image,
location) is presented to you in both English and Hindi, and
the specific consent text, version, and language you accepted are recorded. You
may review or withdraw consent as described above.
12. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be
notified through the Platform or by other reasonable means. The
“Last updated” date at the top indicates the latest revision.
13. Grievance Officer & Contact
In accordance with the Information Technology Act, 2000 and rules thereunder,
and the DPDP Act, 2023, you may contact our Grievance Officer for any
questions, complaints, or requests regarding your personal data: