Privacy policy
Draft — to be reviewed before general availability.
Thoshika processes employee personal data on behalf of the companies that use it. Each company is the data fiduciary for its employees' data under the Digital Personal Data Protection Act, 2023; Thoshika acts as its data processor.
What we process
Account details (name, work email), employment records, payroll and tax information, attendance, leave and other HR records that a company chooses to keep in Thoshika.
How we protect it
Each company's data is isolated in the database, access is role-based, sensitive identifiers are masked, Aadhaar numbers are stored only in masked form, and every change to employee records is audited. Sign-in supports passkeys.
Your rights
Employees can see consents they have given and raise access, correction, erasure or grievance requests from within Thoshika; the requests go to their employer.