Last Updated On : 15-Mar-2024

At Moneyclub Technologies Private Limited (including its products, henceforth also referred as ‘Vrddi’, ‘we’ or the ‘Company’), we understand that you are trusting us with confidential information and we believe that you have a right to know our practices regarding the information we may collect and use when you use our service or interact with us in any manner. Vrddi is a cloud-based web platform that enables organisations to manage employee financial wellness for their workforce. Vrddi Mobile Apps are also part of the same offering. In addition, Vrddi also operates https://vrddi.com/ website. A user may be either an entity, for example an employer which has executed an agreement with Vrddi or with Vrddi’s resellers or distributors who provide Vrddi’s services (“Customer”) or a Customer’s users for example a Customer’s employees, of the Services or users of the Website (“end user(s)”) (Customer and end user shall collectively be referred to as “users'' or “you”).

This Privacy Policy describes the policies and procedures of Vrddi on the collection, use, access, correction, and disclosure of your personal information on https://vrddi.com/ (the “Site”) and our Mobile Apps. This privacy policy does not relate to any personal information that Vrddi collects on behalf of, or under the direction, of its clients. When you log on to the Site or Mobile Apps you will have access to the privacy policy of the employer/prospective employer that is a client of Vrddi, which shall explain how they process your personal information and your rights in relation to such information. We may be asked by our clients to amend, update, or delete your personal information on behalf of our clients in which case we will do so in accordance with the terms of our contract with our clients.

Your personal information will include any information which, either alone or with other data, is reasonably available to us and relates to you (“Personal Information”). This Privacy Policy also covers any of your Personal Information which is provided to us and which is used in connection with the marketing of the services, features or content we offer (the “Services”) to our Clients and/or the support that we may give you in connection with the provision of our Services and the Mobile Apps.

This Privacy Policy does not apply to any third-party applications or software that can be accessed from the Site, the Services or the Mobile Apps, such as external applicant tracking systems, social media websites or partner websites (“Third Party Services”).

By using our Services, you acknowledge you have read and understood this privacy policy. For the purposes of EU GDPR (General Data Protection Regulation), the data controller of the data processed through the Service is the customer of Vrddi who makes available and permits end users to access and use the service or anyone on its behalf. For data collected directly on its website or Mobile Apps (for marketing and communication purposes), Vrddi is the “Data Controller”.

Information we collect and how we use it

Personal Information

We generally collect and process the following types of Personal Information:

Personal Information which is being gathered through the Service consists of any personal details provided consciously and voluntarily by our customer (Employer), end user or the Customer’s administrator or through your use of the Vrddi platform. This may include your name , birthdate, gender, job title, email address, phone number(s), date you first started working for your employer, department you work in, employee ID, PAN, TAN, CIN, address, country, city, postcode, family status, details regarding your salary and work (pay period, payment frequency, gross salary, gross monthly CTC, average monthly salary disbursed, salary payment currency), information the customer chooses to collect and other information user may choose to provide to Vrddi and to its employee.

Location Information We do not ask you for, access, or track any location-based information from your mobile device at any time while downloading or using the Mobile Apps.

Contact Information When you express an interest in obtaining additional information about the Services, the Site, or Mobile Apps, Vrddi may ask you to provide your personal contact information, such as your name, email address, and phone number. You agree, consent and acknowledge that this information is used to communicate with you by responding to your requests, comments and questions. The GDPR legal basis for processing this information is the legitimate interest in communicating with you and answering your questions.

Device Information When using the Mobile Apps, we may request access to your device’s camera and photo storage. This allows you to take and upload pictures and such access would only be used in ways you choose. You may at any time revoke access at the device level. We do not access your device’s camera and photo storage without your permission. We use mobile analytics software to allow us to better understand the functionality of our Mobile Apps on your phone. This software may record information such as how often you use the application, the events that occur within the application, aggregated usage, performance data, and where the application was downloaded from. We do not link the information We store within the analytics software to any Personal Information you submit within the Mobile Apps. When you download and use the Mobile Apps, we automatically collect your device information such as operating system version, type, hardware usage statistics, etc. The GDPR legal basis for processing this information is the contractual obligation to your employer to perform the Services.

Data Collected as a Service Provider As a service provider, Vrddi systems only collects information as per the Customer (employer’s) requirement. Our Technology Services Agreement governs the delivery, access, and use of the Services and Mobile Apps, including the processing of Personal Information and data submitted through Services accounts. The Customer (e.g., employer) controls their Platform and any associated client data. If you have any questions about specific Platform settings, the processing of Personal Information in the Platform, or its privacy practices, please contact the Customer administrator of the Platform you use.

Customer data shall be used by Vrddi in accordance with the Customer’s instructions, applicable terms in the Technology Services Agreement, Customer’s use of Services functionality, and as required by applicable law. Under applicable GDPR, Vrddi is a processor of Customer data and Customer is the controller.

Sharing of your Information

Third Party Services

At times, you may be able to access other Third-Party Services/websites through the Site, for example by clicking on links to those Third-Party Services from within the Site. We are not responsible for the privacy policies and/or practices of these Third-Party Services, and you are responsible for reading and understanding those Third-Party Services’ privacy policies.

Information Shared with Our Service Providers

You agree, consent and acknowledge that we may share your information with third parties who provide services to us. These third parties are authorised to use your Personal Information only as necessary to provide these services to us. These services may include the provision of (i) email services to send marketing communications, (ii) mapping services, (iii) customer service or support, and (iv) providing cloud computing infrastructure.

Information Shared with Our Sub-Processors

We employ and contract with people and other entities that perform certain tasks on our behalf and who are under our control such as an email service provider to send emails on our behalf, mapping service providers, and customer support providers our “Sub-Processors”). We may need to share Personal Information with our Sub-Processors in order to provide Services to you. Unless specified otherwise, our Sub-Processors do not have any right to use Personal Information or other information We share with them beyond what is necessary to assist us. Transfers to subsequent third parties are covered by onward transfer agreements between Vrddi and each Sub-Processor.

Information Disclosed Pursuant to Business Transfers

In some cases, we may choose to buy or sell assets. In these types of transactions, user information is typically one of the transferred business assets. Moreover, if we, or substantially all of our assets, were acquired, or if we go out of business or enter bankruptcy, user information would be one of the assets that is transferred or acquired by a third party. You acknowledge that such transfers may occur, and that any acquirer of us or our assets may continue to use your Personal Information as set forth in this Privacy Policy. You will be notified via email and/or a prominent notice on our site of any change in the legal owner or uses of your Personal Information, as well as any choices you may have regarding your Personal Information.

Information Disclosed for Our Protection and the Protection of Others

In certain situations, we may be required to disclose Personal Information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We also reserve the right to access, read, preserve, and disclose any information as We reasonably believe is necessary to (i) satisfy any applicable law, regulation, legal process or governmental request (ii) enforce this Privacy Policy, including investigation of potential violations hereof, (iii) detect, prevent, or otherwise address fraud, security, or technical issues; (iv) respond to user support requests; or (v) protect our rights, property, or safety. This includes exchanging information with other companies and organisations for fraud protection and spam/malware prevention. We require all third parties to respect the security of your Personal Information and to treat it in accordance with applicable laws.

Data Retention

We shall retain the information you provide to facilitate your smooth and uninterrupted use of the Site or our Mobile Apps, and (i) to provide, improve and personalise our Services; (ii) to contact you about your account and give customer service; (iii) to personalise our advertising and marketing communications; and we may retain Personal Information related to you if we believe it may be necessary to prevent, detect, mitigate, and investigate fraudulent or illegal activities or future abuse or if required by law such as in the event of the pendency of any legal/regulatory proceeding or receipt of any legal and/or regulatory direction to that effect or for other legitimate purposes. For any other information, we may entertain your request for deletion, however, you may not be able to use our Services at all after such deletion.

Where do we store your Data?

The Data we collect is hosted on the AWS Cloud in Asia Pacific (Mumbai) (ap-south-1), India, which provides advanced security features and is compliant with ISO 27001 and other privacy and security standards.

Therefore, in providing your Personal Information to Vrddi, your Personal Information will be sent to the AWS Cloud in Asia Pacific (Mumbai) (ap-south-1), India.

Security and storage of information

We take great care in implementing, enforcing and maintaining the security of the Service, and our users’ Personal Information. Vrddi implements, enforces and maintains security policies to prevent the unauthorised or accidental access to or destruction, loss, modification, use or disclosure of personal data and monitor compliance of such policies on an ongoing basis.

Vrddi limits access to personal data to those of its personnel who: (i) require access in order for Vrddi to fulfil its obligations under this Privacy Policy and agreements executed with Vrddi and (ii) have been appropriately and periodically trained on the requirements applicable to the processing, care and handling of the Personal Information (iii) are under confidentiality obligations as required under applicable law. Vrddi takes steps to ensure that its staff who have access to personal data are honest, reliable, competent and periodically properly trained.

Vrddi shall act in accordance with its policies to promptly notify Customer in the event that any personal data processed by Vrddi on behalf of Customer is lost, stolen, or where there has been any unauthorised access to it subject to applicable law and instructions from any agency or authority. Furthermore, Vrddi undertakes to cooperate with Customer in investigating and remedying any such security breach. In any security breach involving Personal Information, Vrddi shall promptly take remedial measures, including without limitation, reasonable measures to restore the security of the Personal Information and limit unauthorised or illegal dissemination of the Personal Information or any part thereof.

Vrddi maintains documentation regarding compliance with the requirements of the law, including without limitation documentation of any known breaches.

The Service may, from time to time, contain links to external sites. We are not responsible for the operation, privacy policies or the content of such sites.

Your Rights associated with your information

In certain countries (for example in the UK and EU) you may have the right under applicable local law to request access, change or delete certain personal data that we hold in relation to you, or to object to or restrict the processing of certain personal information, receive personal information in a usable electronic format and transmit it to a third party (also known as the right of data portability), and lodge a complaint with a local data protection authority.

We will contact you if we need additional information from you in order to honour your requests.

If you want to update the information that we hold about you or if you no longer desire our Service, you may correct, delete inaccuracies, or modify the information we hold by sending an inquiry to our contactus@vrddi.com. Given the nature of the services that we provide we may have shared your personal information with employers and other third parties. You may need to make requests to such third parties in accordance with the instructions in their privacy policies if you require them to update the records that they hold about you. If you want to discuss or exercise any of your rights under this policy, please contact our contactus@vrddi.com.

Changes to the privacy policy

The terms of this Privacy Policy will govern the use of the Service and any information collected in connection therewith, however, Vrddi may amend or update this Privacy Policy from time to time. The most current version of this Privacy Policy will always be posted at: https://vrddi.com/privacy_policy.html. Unless otherwise agreed with the Customer, we will endeavour to provide notice of material changes to this policy on the homepage of the website and (if applicable) via an email. Such material changes will take effect thirty (30) days after such notice was provided on our website or sent by email. Otherwise, all other changes to this Privacy Policy are effective as of the stated “Last Updated On” date and your continued use of Services will constitute your active acceptance of, and agreement to be bound by, the changes to the Privacy Policy.

If you have any questions (or comments) concerning this Privacy Policy, you are welcome to send us an email or otherwise contact us at contactus@vrddi.com and we will make an effort to reply within a reasonable timeframe, and not over 30 business days.

GRIEVANCE OFFICER

Incase you have any grievance, please feel free to contact
contactus@vrddi.com