This notice explains how OriginHRMS handles data across our web platform and our Android and iOS mobile applications.
This Privacy Policy applies to OriginHRMS services worldwide, including our web application and our Android and iOS mobile applications. It covers how we collect, use, share, store, protect, retain, and delete information when employers, employees, managers, and administrators use Origin.
It is written to meet EU GDPR transparency rules and to remain consistent with other privacy laws that may apply to you, including the UK GDPR, India’s Digital Personal Data Protection Act, 2023, and comparable rules in other countries. If a local law gives you stronger rights, we honour those rights.
The mobile applications support workforce operations such as attendance, leave, payroll, tasks, chat, file sharing, notifications, and communication. This policy is intended to work together with any in-app disclosures shown before permission-gated or sensitive data features are used.
OriginHRMS is the workforce management service described in this policy. For privacy questions, consent withdrawal requests, or data deletion requests, contact us at support@originhrms.com or +(91)-9160319012. Address: 11-13-759, Road No 3/d, Green Hills colony, Hyderabad - 500035, India.
Users can also use the public account deletion resource at originhrms.com/account-deletion to request deletion outside of the app, which helps satisfy mobile store account deletion expectations.
For employer account, billing, and support data, Origin acts as an independent controller (or the equivalent under local law). For employee HR records inside an organisation workspace (attendance, leave, payroll, chat, photos, location used for attendance), the employer is the controller and Origin acts as a processor on the employer’s instructions.
Where EU / UK GDPR apply, we rely on contract, legal obligation, legitimate interests (security and service operation), and consent for device permissions. Employers must have their own lawful basis for workplace monitoring. We do not sell personal data and do not use it for third-party advertising.
Production systems are operated from India. If you access Origin from the EU, UK, US, or another country, your data is transferred to India. Where a transfer law requires it (for example GDPR Chapter V), we use appropriate safeguards such as Standard Contractual Clauses plus access controls and encryption in transit.
Camera / Photos
Attendance evidence, profile updates, and file/media sharing
Microphone
In-app voice calls only when the user actively joins or starts a call
Location
Attendance or workplace verification features where enabled by the employer workflow
Secure Storage
Protected session, token, and account state storage on device
Origin requests access only when those capabilities are needed for product functionality, and purpose strings shown by the operating system are meant to describe those uses clearly. Where store policies require it, sensitive access should also be supported by in-app disclosures and runtime permission flows.
Origin uses secure transport, role-based access, backend validation, protected session handling, and operational monitoring to reduce unauthorized exposure of workforce data. No system can promise absolute security, but we aim to apply reasonable technical and organizational safeguards.
Depending on where you live, you may request access, correction, deletion, restriction, portability, objection, or withdrawal of consent. We respond without undue delay and within one month where GDPR applies (extendable as the law allows). Employees should send employment-record requests to their employer first; we assist the employer as processor.
EU / EEA: you may complain to a supervisory authority in your Member State (see the European Data Protection Board member list). UK: you may contact the ICO.India: you may use rights under the DPDP Act through us or, where designated, the Data Protection Board of India. United States and other countries: you may have additional rights under state or national law (for example access, deletion, and opt-out of sale — we do not sell personal data). Local mandatory rights always prevail over this notice.
The Service is for workplace adults and is not directed to children. We do not use solely automated decisions that produce legal or similarly significant effects.
For privacy questions, store listing concerns, consent withdrawal, permission concerns, or data deletion requests, contact us at support@originhrms.com or +(91)-9160319012.
Registered / correspondence address: 11-13-759, Road No 3/d, Green Hills colony, Hyderabad - 500035, India.
