Dinlipi HR Software ("Dinlipi", "we", "us", "our") is a product of O'Dell Tech Ltd., a company registered in Bangladesh. This Privacy Policy explains what personal data we collect, why we collect it, how we process and store it, and your rights as a data subject under applicable Bangladeshi law, including the Digital Security Act 2018 and ICT Act 2006.
By accessing or using dinlipisoft.com or the Dinlipi platform ("Service"), you agree to the terms of this Privacy Policy.
1. Who This Policy Applies To
- Client organisations — RMG factories and businesses that subscribe to Dinlipi.
- End users — HR managers, payroll officers, administrators, and employees accessing the platform on behalf of a client.
- Visitors to dinlipisoft.com.
2. Data We Collect
2.1 Data You Provide Directly
| Category | Examples |
|---|---|
| Account & Contact Data | Organisation name, contact person name, email, phone, address |
| Employee Records | Employee ID, name, NID/passport number, department, designation, joining date |
| Payroll Data | Salary grade, bank account details, tax information, deductions |
| Attendance & Leave | Check-in/out times, shift data, leave requests and approvals |
| Movement Records | Entry/exit logs, gate pass records |
| Support Communications | Messages and queries submitted to our support team |
2.2 Data Collected Automatically
- IP address and device/browser information
- Login timestamps and session activity logs
- Pages and features accessed within the platform
2.3 Data We Do Not Collect
We do not intentionally collect biometric raw data, medical records, religious beliefs, or political opinions unless explicitly required for a specific compliance feature and separately disclosed.
3. How We Use Your Data
- Service Delivery: To operate HR, payroll, attendance, leave, and compliance modules.
- Account Management: To manage your subscription, billing, and support interactions.
- Legal Compliance: To comply with the Bangladesh Labour Act 2006 (as amended), tax regulations, and audit requirements.
- Security: To monitor for unauthorised access and protect platform integrity.
- Product Improvement: To analyse anonymised usage data and improve features.
- Communication: To send service notifications and (with consent) product announcements.
We do not sell, rent, or trade your personal data to third parties for marketing purposes.
4. Lawful Basis for Processing
- Contractual Necessity: Processing required to deliver services under your subscription agreement.
- Legal Obligation: Processing required to comply with Bangladeshi labour, tax, and regulatory laws.
- Legitimate Interests: Platform security, fraud prevention, and service improvement.
- Consent: Where we rely on consent, you may withdraw it at any time.
5. Data Storage and Security
- Servers: Data is stored on secured cloud infrastructure.
- Encryption: Data in transit is encrypted using TLS/HTTPS. Sensitive fields (e.g., bank details) are encrypted at rest.
- Access Controls: Role-Based Access Control (RBAC) ensures users access only data relevant to their authorised role.
- Retention: Client data is retained for the subscription duration plus a minimum of 3 years thereafter, unless a longer period is required by law. Data is securely deleted within 90 days of a verified deletion request.
6. Data Sharing
We may share data with:
- Sub-processors: Cloud hosting, email delivery, and analytics providers bound by data processing agreements.
- Legal Authorities: When required by a court order, government authority, or applicable law.
- Auditors: External auditors or compliance reviewers acting on behalf of the client organisation.
7. Cookies
dinlipisoft.com uses essential cookies for session management and security only. No third-party advertising cookies are used. You may disable cookies in your browser settings; however, this may affect functionality.
8. Your Rights
You have the right to access, correct, delete, restrict, or receive a portable copy of your personal data, and to withdraw consent where applicable. Submit requests to dinlipisoft@gmail.com with the subject line "Data Rights Request".
9. Changes to This Policy
Material changes will be communicated via email or in-platform notice at least 14 days before taking effect. Continued use of the Service constitutes acceptance.
10. Contact
If you have questions about this Privacy Policy, please contact Dinlipi using the contact details provided in the website footer.