Customer storySelect Home Care went live in three weeks.Read the story
Book a demo
PlatformPlatform overviewFlows, Data Lists and Intelligence as one layerDark matter calculatorNewEstimate the work hiding between your systems
ProductsOpsPulseFor Manufacturing. Inspections, audits, risk, incidentsDealPulseFor Finance. Deal lifecycle from pipeline to closeCarePulseFor Healthcare. Staff management and compliance
CompanyAbout usThe team and the purpose behind Workhall
Contact us
  1. Legal
  2. Privacy Policy

Privacy Policy

  • Last updated October 2026
  • About 9 minutes to read
  • GDPR and India’s SPDI Rules
Contents

Sections
Questions about your data?Write to ask@workhall.com

This Privacy Policy (“Policy”) applies to Workhall, operated by Workhall Technologies Pvt Ltd, with its registered office at Level 2, #185, 3rd Main Road, Natesa Nagar, Virugambakkam, Chennai – 600092, Tamil Nadu, India, and its affiliates (collectively, “Workhall”).

We may update this Policy periodically, with changes reflected here. If you are a Workhall user, Subscriber, Free User, or Site Visitor, we will notify you of material changes via email or through our platform (collectively, “Service”) or website (https://www.workhall.io/, https://www.workhall.com/, “Website”).

We are committed to transparency regarding: (i) how and why we collect, store, and use your personal data; and (ii) your rights to control this data.

Please note: If you disagree with this Policy, please do not use the Website or Service.

Section 01

Information We Collect and How We Use It

What we collect, and why, depends on how you interact with Workhall. Choose your user type.

Compare all three user types
Type of userSite VisitorSubscriberFree User

Note: Anonymized and aggregated data may be used freely without restrictions, except as limited by applicable law. For non-service-related data use, we will seek explicit consent, which you can withdraw at any time by contacting our Grievance Officer.

Third-Party Integrations

If you enable integrations (e.g., Google Calendar), we may access and share relevant data with these services, governed by their privacy policies. You can opt out by not enabling these integrations.

AI Data Processing

Workhall uses AI to enhance Service functionality (e.g., workflow automation, analytics). We process data securely with encryption, access controls, and regular audits. Customer data is not used to train external AI models or for purposes beyond agreed services, in compliance with GDPR and SPDI Rules.

Section 02

Your Rights & Preferences as a Data Subject

Under applicable laws (e.g., GDPR, SPDI Rules), you have the following rights:

Right to Be Informed

Understand how your data is collected and used (as outlined in this Policy).

Right of Access

Request a copy of your personal data.

Right to Rectification

Correct inaccurate or incomplete data.

Right to Erasure

Request deletion of your data.

Right to Restrict

Limit processing of your data.

Right to Object

Object to data processing for specific purposes (e.g., marketing).

Right to Data Portability

Receive your data in a machine-readable format or transfer it to another service.

Right Not to Be Subject to Automated Decision-Making

Avoid decisions based solely on automated processing.

To exercise these rights, contact our Grievance Officer (Section 11). If you believe we have violated your rights, you may lodge a complaint with your local supervisory authority.

Legal Bases for Processing

Site Visitors
ConsentLegitimate interests (e.g., improving Website)Legal obligations
Subscribers
Performance of a Customer AgreementLegitimate interestsLegal obligations
Free Users
ConsentPerformance of a contract (User Terms of Service)Legitimate interestsLegal obligations

Special Categories of Data

Workhall does not collect or process special categories of personal data (e.g., race, health, political affiliations). Customers/Subscribers must not use our Service to collect such data.

Section 03

Your Rights Under India’s SPDI Rules

Workhall complies with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011:

Right to Be Informed and Consent

We explain data collection purposes and require explicit consent.

Right to Access

Review your data for accuracy and completeness.

Right to Correct

Request corrections to inaccurate data.

Right to Withdraw Consent

Withdraw consent for data processing. Contact our Grievance Officer (Section 11) to exercise these rights.

Section 04

Retention of Personal Information

We retain your data as long as necessary to:

Provide the Service

Keep your workspace running as agreed.

Fulfill legitimate business purposes

For example, improving the Service or resolving disputes.

Comply with legal obligations

Where the law requires us to hold records.

Upon termination of your Service use, we may delete your data unless legally required to retain it. Subscribers must inform their stakeholders about data retention practices per applicable laws.

Section 05

Tools Used by Customers

Subscribers using third-party tools or integrations with our Service are responsible for informing their stakeholders about data collection and applicable privacy policies.

Section 06

Transfer of Information

To support operations, we may transfer data to servers in third countries for disaster recovery. Your rights remain protected during such transfers.

We use Data Protection Addendums and industry-standard measures for transfers to non-adequate jurisdictions (per GDPR). Third-party processors (e.g., analytics, payment processing) only access data to provide services, bound by strict agreements.

Section 07

Compelled Disclosure

We may disclose your data if required:

  • By law, legal processes (e.g., subpoenas), or law enforcement.
  • To protect safety, security, or legal rights.
  • In connection with legal proceedings involving Workhall.
Section 08

Security of Your Personal Information

Workhall implements industry-standard security measures, including:

Access Control

Limited to authorized personnel on a need-to-know basis.

Data Encryption

AES-256 for data at rest and in transit (e.g., SSL/TLS).

Network Security

Firewalls and intrusion detection systems.

Regular Audits

To identify and mitigate vulnerabilities.

Incident Management

Protocols for handling data breaches.

Employee Training

Ongoing awareness of security practices.

Third-Party Compliance

Ensuring processors meet equivalent standards.

Physical Security

Securing data centers against unauthorized access.

Business Continuity

Plans to ensure Service availability.

ISO 27001 Compliance

Adherence to international security standards.

Despite these measures, no system is fully secure. We strive to protect your data, but we cannot guarantee absolute security.

Section 09

Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to:

  • Recognize your device and preferences.
  • Analyze Website/Service usage.
  • Deliver tailored content or ads.

You can manage cookie settings via your browser’s “Help” section or opt out of analytics tracking (e.g., Google Analytics Opt-out Browser Add-on). We do not respond to Do Not Track (DNT) signals but offer opt-out options for tailored advertising.

Section 10

Third-Party Links and Services

The Website/Service may link to third-party services (e.g., integrations). These are governed by their privacy policies, and Workhall is not responsible for their practices. Review their policies before use.

Section 11

Grievance Officer

For concerns, complaints, or to exercise your rights, contact:

Address
Workhall Pvt Ltd
Level 2, #185, 3rd Main Road, Natesa Nagar, Virugambakkam, Chennai – 600092, Tamil Nadu, India
Emailask@workhall.com

Write to us to access, correct, delete, restrict or port your data, or to withdraw consent.

Section 12

Changes to This Policy

We may update this Policy to reflect legal, operational, or technological changes. Material changes will be notified via email or the Service/Website, with continued use indicating acceptance.