Privacy notice · Last updated 17 October 2026

How we handle data.

TIMEKRAFT is a product of Pearl Anchors Consulting ("we", "us"). This notice covers two things: what this website records when you visit it, and how employee data is handled inside the TIMEKRAFT HR application that we run for client employers. Questions or complaints: info@pearlanchors.com.

1. This website

• No analytics or tracking. The site runs no analytics or advertising scripts. The only cookie it sets is a sign-in session cookie (tk_sid), created when you log in and removed when you sign out or after 30 days.
• Your account. If you register, we keep what you give us: your name, email address or mobile number, organisation (optional), city and state, together with the date, time and IP address of each sign-in. We use these to run your account, to show you your compliance calendar and alerts, and to contact you about TIMEKRAFT. You can ask us to delete your account at any time at the address above.
• Sign-in with Google. If you choose Google, Google tells us your name, email address and profile picture and nothing else; we never see your Google password. Google's own privacy policy applies to that step.
• One-time codes. If you choose WhatsApp or SMS, a 6-digit code is sent to your mobile number through Meta's WhatsApp Business platform or an Indian SMS gateway, which see your number for delivery. Codes expire after 10 minutes and are stored only as a hash. If you send the code to our WhatsApp number instead, that message is stored so the sign-in can be matched to you.
• Server logs. Our web server records each request: IP address, date and time, page requested and browser type. These logs are used only for security and troubleshooting, are kept in India, and are deleted after 180 days, the period CERT-In directions require.
• Fonts. Typefaces are loaded from Google Fonts, so Google receives your IP address when the page loads.
• Email. If you write to us, we use your message and address only to reply and to follow up on your enquiry.

2. Employee data inside TIMEKRAFT

When a company uses TIMEKRAFT, that company is the Data Fiduciary for its employees' and candidates' personal data under the Digital Personal Data Protection Act, 2023. We act as its Data Processor and process that data only on its instructions, to provide HR, attendance, payroll and compliance services.

• Separate instance. Each client has its own database and services. One client's data is never visible to, or used for, another client.
• Location. Databases are hosted on Oracle Cloud in the Mumbai region. Nightly backups are AES-256 encrypted, stored privately on AWS in the Mumbai region, and kept for 30 days.
• Access. Access is limited by role, company and location. Salary figures are withheld on the server from roles without payroll access. Every change to records is logged with before and after values.
• Aadhaar. Aadhaar numbers are masked on screens, in change history and in the employee app. The full number is available only to authorised payroll roles, for statutory documents that call for it.
• Face login. Where an employer enables face login, the app keeps a numerical face template derived from the employee's record photo, not a separate image. Templates are rebuilt daily from current employees only, so a leaver's template is removed automatically.
• Machine learning. Anomaly and correction models run inside the client's own instance, on that client's data.
• Share links. Managers can be sent view-only links to the live attendance board. These links are unlisted and excluded from search engines, and employers decide whether to use them.
• No sale. We do not sell personal data or use it for advertising.

3. If you are an employee

To see, correct or ask questions about your data, please contact your employer's HR team first, since they decide how it is used. We will help your employer respond. If your concern is not resolved, write to us at the address below.

4. Grievances and contact

Pearl Anchors Consulting, the company behind TIMEKRAFT. Write to info@pearlanchors.com with "privacy" in the subject. We will acknowledge your message and tell you what we are doing about it.

5. Changes

We will update this page when our practices change, and revise the date at the top.