PRIVACY POLICY

Zetameld’s architecture enforces strict logical and cryptographic tenant isolation. Every payroll organization is provisioned within an isolated tenant namespace with unique encryption keys.

We will never sell, rent, license, or monetize your employee salary data, personal identifiers, or payroll records to third-party data brokers, advertising networks, or commercial marketing crawlers.

Our business model is pure subscription-based enterprise software. You pay for software licensing; you are never the product. We do not inject behavioral ad trackers, pixel beacons, or invasive analytics into our payroll administrative portals.

Zetameld Payroll utilizes strictly necessary first-party cookies and session tokens designed to safeguard administrative access:

• Session Authentication Tokens: Cryptographically signed JWT tokens stored in HttpOnly, Secure, and SameSite=Strict cookies to maintain secure sessions.
• CSRF Protection Tokens: Anti-Cross-Site Request Forgery tokens preventing unauthorized programmatic requests.
• Organization Context Cookies: Remembering active tenant workspace IDs when switching between authorized enterprise entities.

We do not deploy third-party advertising tracking cookies or social media monitoring pixels within our authenticated payroll application.

We implement comprehensive defense-in-depth security standards to protect employee compensation data:

Our systems undergo continuous vulnerability scanning, third-party penetration testing, and maintain compliance with ISO 27001 (Information Security) and SOC 2 Type II certification benchmarks.

In strict compliance with the Digital Personal Data Protection (DPDP) Act, 2023 and Reserve Bank of India (RBI) payment and financial data localization mandates:

Zero payroll or salary disbursement information is transferred outside Indian sovereign boundaries without your express administrative authorization.

Your data is retained for the active duration of your subscription to facilitate tax filings and historical audit trails:

• Active Tenure: Unlimited storage of historical pay runs, tax declarations, and salary slips.
• 30-Day Export Grace: If you terminate your subscription, your tenant enters a 30-day read-only export grace window to download all Form 16s, salary registers, and employee logs.
• Cryptographic Shredding: On day 31 post-termination, encryption keys for your tenant are revoked and permanently destroyed from our HSMs, rendering cold backups mathematically unrecoverable.
• Statutory Tax Records: Invoices, billing receipts, and transaction IDs are retained for 7 years as mandated under the Indian Companies Act and Income Tax Act.

Pursuant to the Information Technology Act, 2000 and the DPDP Act, 2023, Zetameld has designated a Grievance Officer and Data Protection Officer to address any privacy queries, data subject access requests (DSAR), or rectification concerns: