Privacy policy

1. SIMSYS and your organization

SIMSYS provides SIMSERP. SIMSYS is the trade name of SENTHILKUMAR MUTHUSAMY, a proprietorship registered under GSTIN 33BIVPS2624A1ZB. Our public Google Play developer name is SIMSYS Software. If your employer or another organization gives you an account, that organization manages its workspace, users, permissions and business records. Contact your organization first about employment, customer or other records it maintains. SIMSYS processes those workspace records to provide the service; we also handle our own account administration, billing and support communications.

2. Information we process

• Account and contact details: names, email addresses, phone numbers, organization details, account identifiers, roles and authentication information.
• Business records: information entered or uploaded through enabled modules, such as customer and supplier details, sales, invoices, payments, inventory, employee records, salary reports, attendance, leave requests and approvals. This may include financial information and attachments.
• Attendance location: when location-based attendance is used, coordinates, accuracy, capture time and verification information associated with a check-in or check-out.
• Technical and support information: connection information such as IP addresses, request and error logs, app or device information used in troubleshooting, and messages or files you send to support.
• Subscription and checkout information: selected plans, billing contact information, order references and payment status. Where Razorpay checkout is used, payment information is processed through Razorpay under its own privacy policy.

3. How information is used

We use information to authenticate users, apply workspace permissions, provide selected business modules, synchronize records, process subscriptions, respond to support requests, troubleshoot problems and protect the service. Your organization uses its workspace records for its business purposes, including attendance review, payroll and reporting where those modules are enabled. Processing also supports applicable recordkeeping requirements and the handling of disputes.

4. Device permissions and local data

Location: the mobile attendance feature requests foreground location permission when capturing a punch. It does not continuously track background location. Authorized workspace administrators can review recorded locations and workplace verification results. You can revoke location permission in your device settings; attendance may then be restricted or marked for review according to your organization's policy.

Biometric sign-in: on supported mobile devices, optional biometric login uses the operating system to unlock a saved session. SIMSERP does not receive or store your fingerprint image or biometric template. You can use password sign-in instead.

Local storage: the website and applications use browser or device storage for sessions, preferences, navigation history, checkout context and offline records where supported. Remembered sign-in can retain a session on your device. Sign out on shared devices. Clearing app or browser data may remove local settings and unsynchronized records.

Printing and files: where enabled, printing sends selected receipt or document information to the printer you choose. Exported reports and local backups may contain personal information. You and your organization control access to those files and devices. Bluetooth or other device permissions are used where required for the selected feature.

5. Who can receive information

Workspace information is available to your organization's authorized users according to their assigned access. Information may be processed by service providers needed to operate SIMSERP, such as hosting, communications, support and payment providers, and by integrations your organization enables. Information may also be disclosed when required by law or necessary to address fraud, security incidents or legal claims. External services and app stores have their own privacy practices.

Depending on the services used and your location, processing may take place outside your country. Contact us for details about the hosting and service arrangements applicable to your workspace.

6. Storage, security and retention

Records may be stored in the hosted workspace and, for supported offline features, on your device or in backups. Access controls and secure connections help protect information. No system can guarantee absolute security; protect your account, devices and exported files.

Retention depends on the type of record, your organization's instructions, the ongoing service relationship, and applicable accounting, employment or other recordkeeping obligations. Closing an account or uninstalling the app does not automatically delete organization records or existing backups. Contact your administrator or SIMSYS to request deletion and learn which records must be retained.

SIMSERP deletion and backup timelines

Acknowledgement: We acknowledge account or personal-data deletion requests within 24 hours of receipt and promptly explain any information needed to verify your identity or authority.

Active systems: We complete verified requests to delete your account and associated personal data from active systems within 30 calendar days of receiving your request, or sooner where applicable law requires. We confirm completion and identify any records that must be retained. If identity verification or a legally permitted exception prevents completion, we explain the reason and next steps within that response period; we do not silently restart the deadline.

Backups: SIMSYS-managed routine backups have a maximum retention of 90 calendar days from creation. Data deleted from active systems expires from remaining backups within 90 calendar days after active-system deletion at the latest. Until expiry, that data is restricted to disaster-recovery purposes and is not used for normal business activity. If a backup is restored, completed deletion requests are reapplied before the recovered data returns to normal use.

Required retention: Records needed for a specific legal, regulatory, security, fraud-prevention or dispute purpose are kept separately with restricted access for only the applicable period. We explain the categories, reason and retention period or criteria in our response. These exceptions do not justify keeping the whole account or unrelated personal data indefinitely. Records are deleted when the applicable requirement ends. A shorter deadline required by law takes precedence.

Copies you control: Offline records, exported files, printed records and backups held by you or your organization remain under your control. You or your administrator must remove those copies separately where appropriate.

Request account deletion

Visit Delete your SIMSERP account for a direct email request route, identity-verification steps, and information about associated data and retained records. You do not need to sign in or reinstall the app.

7. Your choices and privacy requests

You can manage available profile settings, sign out, and change device permissions. Depending on applicable law, you may request access to, correction of, or deletion of your information, a copy of your data, or restrictions on or objections to processing. Where processing relies on consent, you may withdraw that consent; some features may become unavailable.

For organization-managed records, contact your workspace administrator. You may also email support@simsys.in with the subject “SIMSERP privacy request.” Include your organization and account email and describe your request. Do not send passwords or full payment details. We may need to verify your identity and coordinate with your organization before acting. You may contact the relevant data protection authority where applicable.

8. Children and organization records

SIMSERP is business software and is not intended for children to register for independent accounts. Organizations that enter records concerning minors are responsible for the required permissions and lawful use of those records. Contact us if you believe a child's information has been provided improperly.

9. Policy changes

Updates will be published on this page with a revised date. Where required, material changes will be communicated through the service or other appropriate contact channels.

Alternative contact

If you need another way to reach SIMSYS about an account or data request, email info@simsys.in or call +91 97870 01002. Do not send passwords or one-time codes.