Privacy Policy
Effective Date: March 2026
Last Updated: March 2026
Company: Semmon Engineers
Website: www.semmon.com | SaaS Portals: semmon.app, ecrweb.in
1. Introduction
Welcome to Semmon Engineers ("Semmon," "we," "us," or "our"). We are a SaaS and Device Integration company based in Pune, Maharashtra, providing HRMS, Payroll, Attendance, Inventory, and business management solutions primarily to Indian MSMEs.
This Privacy Policy explains how we collect, use, store, and protect personal data. We comply with the Information Technology Act, 2000, and the Digital Personal Data Protection Act (DPDPA), 2023 of India.
2. Our Role: Data Fiduciary vs. Data Processor
To clarify our legal responsibilities, we operate in two distinct capacities:
As a Data Fiduciary: When you visit semmon.com, contact us for sales, or sign up as a B2B customer (Employer), we determine the purpose of processing your business contact and billing data.
As a Data Processor: When our B2B customers use our SaaS applications (e.g., HRMS, Payroll) or integrated biometric hardware to manage their workforce, the Employer is the Data Fiduciary. Semmon acts strictly as a Data Processor. We process employee data (including attendance, leaves, and salary details) solely on the instructions of the Employer and to provide the contracted software services.
3. Information We Collect
We limit data collection to what is strictly necessary for business operations and system stability.
Website Visitors: IP address, browser type, and basic analytics via cookies to ensure our website functions correctly. If you fill out a contact form, we collect your name, company, email, and phone number. We use essential and analytics cookies on our website. By continuing to use our website, you consent to our use of cookies. You may disable cookies through your browser settings; however, this may affect website functionality.
B2B Customers (Employers): Business registration details, GST numbers, billing information, and administrative contact details required for SaaS subscriptions, hardware AMCs, and account setup.
End-Users (Employees of our Customers): Through our SaaS platforms and integrated devices, we process data uploaded by the Employer or generated by the employee. This may include names, contact details, payroll information, shift logs, and attendance records.
Biometric & Hardware Data: For clients utilising Semmon biometric or facial recognition devices, we process attendance logs securely. Biometric data is processed locally on the device or transmitted via encrypted channels strictly for attendance verification. Semmon does not use this data for any purpose other than providing the attendance service to the Employer. Employers are responsible for obtaining valid, informed consent from their employees before enrolling them in biometric attendance systems, as required under applicable Indian law. Semmon Engineers processes this data strictly on the Employer's instruction.
Children's Data: Our services are intended for use by businesses and their adult workforce. We do not knowingly process personal data of individuals under the age of 18 without explicit parental or guardian consent obtained by the Employer.
4. How We Use Your Information
We use the collected information exclusively to:
Deliver, maintain, and improve our SaaS products and hardware integrations.
Process payroll, HR, and inventory calculations as instructed by the Employer.
Send transactional notifications (e.g., OTPs, payslips, alerts) via secure email and SMS.
Provide customer support and technical troubleshooting.
Comply with legal and tax obligations under Indian law.
5. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy:
Active client data is retained for the duration of the subscription.
Post-termination: Data is retained for 15 days after account termination, after which it is permanently deleted. Semmon Engineers shall not be liable for any data loss after this window.
Billing and GST records are retained for 8 years as required under Indian tax law.
Website inquiry data is retained for 12 months.
6. Data Storage, Localisation, and Security
We prioritise the sovereignty and security of Indian business data.
100% Indian Data Localisation: All SaaS customer data, HR records, and application databases are hosted securely on servers located entirely within India.
Security Measures: We implement role-based access control, secure subdomains, HTTPS encryption, and regular system backups to protect against unauthorised access or data loss.
7. Third-Party Integrations and Sub-Processors
To provide reliable, system-driven services, we integrate with trusted third-party infrastructure providers. We do not sell or rent data to advertisers or any third party for commercial purposes.
Our key sub-processors include:
Cloud Infrastructure: Trusted Indian data centre partners for secure application hosting within India. A full list of sub-processors is available on request.
Communication Gateways: Trusted, India-compliant email and SMS service providers for secure transactional communications including OTPs, payslips, and system alerts.
SMS Services: TRAI-compliant, DLT-approved SMS gateways for delivering OTPs and critical alerts.
8. Your Data Rights
Under Indian data protection laws, individuals have the right to access, correct, or request the erasure of their personal data.
For B2B Customers: You may update your billing and account information by contacting us directly at kiran@semmon.com.
For End-Users (Employees): Because your Employer is the Data Fiduciary, all requests to access, modify, or delete HR or attendance data must be directed to your Employer's HR department. Semmon Engineers will assist the Employer in fulfilling these legal requests within the timelines prescribed under applicable law.
9. Governing Law and Jurisdiction
This Privacy Policy and any disputes arising from it shall be governed by the laws of India. Any legal proceedings shall be subject to the exclusive jurisdiction of the courts located in Pune, Maharashtra.
10. Amendments
Semmon Engineers reserves the right to update this Privacy Policy at any time. Clients and registered users will be notified of material changes via email or in-app notification. Continued use of our services after such notification constitutes acceptance of the revised policy.
11. Contact Information & Grievance Officer
If you have any questions regarding this Privacy Policy, our data practices, or hardware compliance, please contact our Grievance Officer:
Grievance Officer: Kiran Kumbhar, Semmon Engineers
Email: kiran@semmon.com
Address: 5 Soba Kunj Apartment, Opp Yeshwantrao Chavan Natyagruh, Kothrud, Pune – 411029, Maharashtra, India.
We will acknowledge your grievance within 48 hours and resolve it within 30 days of receipt.