Belong · Legal

Belong Privacy Policy

Last updated: 17 October 2026

This Privacy Policy explains how personal data is collected, used, shared and protected on Belong, the workforce management platform provided by Duvee Technologies Private Limited ("Duvee", "we", "us" or "our"). It applies to the Belong web applications for organisations, employees and administrators, and to related emails, SMS messages and support (together, the "Platform").

We process personal data in accordance with the Digital Personal Data Protection Act, 2023 (the "DPDP Act"), the Information Technology Act, 2000 and the rules made under them, the Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016 where applicable, and other laws that apply to us. This policy should be read together with the Belong Terms and Conditions.

Who is responsible for your data
Personal data we process
Aadhaar and identity verification
How personal data is used
Legal basis for processing
Your Belong profile across employers
How personal data is shared
Where data is stored
How long data is kept
Security
Your rights
Children
Changes to this policy
Contact us and grievance redressal

1. Who is responsible for your data

Belong is used by organisations ("Customers") to manage their workforce. Responsibility for personal data depends on how it is used:

Employment records managed by your organisation – such as your designation, salary, contracts, leave, documents, achievements and disciplinary records – are processed on behalf of your organisation. Your organisation is the Data Fiduciary for this data and decides how it is used. Duvee acts as its Data Processor and processes the data only on its instructions and under our agreement with it.
Your Belong account and profile – including your login details, the profile you maintain yourself, your consent decisions and your requests to link your profile with an organisation – are processed by Duvee as Data Fiduciary.
Organisation administrators and HR users – their account and usage data are processed by Duvee as Data Fiduciary.

If you have a question about employment records, please contact your organisation first. We will support your organisation in responding.

2. Personal data we process

2.1 Employees

Category	Examples
Identity and contact	Name, photograph, date of birth, gender, blood group, mobile number, email address, current and permanent address.
Identity documents	Aadhaar number and verification details, PAN and other documents uploaded by you or your organisation.
Employment	Employee ID, designation, department, joining date, work mode, experience level, salary, employment status and exit details.
Banking and statutory	Bank name, account number, IFSC code, account type and UAN.
Profile and history	Education, previous employment, skills, languages, achievements and emergency contacts.
Workplace records	Contracts and digital signatures, leave and compensatory-off requests, attendance, disciplinary notices and related messages, feedback and ratings.
Communications	Notifications, support conversations and messages exchanged on the Platform.

2.2 Organisations and their users

Company name, GSTIN and registered business details, address, business category, logo, and the names, email addresses, phone numbers, roles and permissions of administrators and HR users.

2.3 Technical and usage data

IP address, browser and device information, login and session records, one-time password (OTP) verification records, security logs and activity logs needed to operate, secure and support the Platform.

3. Aadhaar and identity verification

Aadhaar-based verification is performed only with your consent, given through an OTP sent to the mobile number linked to your Aadhaar.
Verification is carried out through authorised verification service providers. We do not collect or store your Aadhaar biometric information.
Aadhaar verification data is stored in encrypted form, and Aadhaar numbers are displayed in masked form wherever possible.
Aadhaar data is used only for identity verification, to prevent duplicate or fraudulent employee records, and to help you link your profile with an organisation at your request.
An organisation that looks up an Aadhaar number on Belong can see only whether a profile exists and a masked name. It cannot see your personal details unless you approve its request.

4. How personal data is used

To create and manage accounts and to verify identity, including by OTP.
To enable organisations to onboard employees and manage employee records, contracts, leave, documents, achievements, feedback and disciplinary processes.
To let employees view and maintain their profile and link it to a new organisation with their approval.
To send service messages by email, SMS and in-app notification, such as OTPs, invitations, leave updates and subscription reminders.
To provide support, respond to requests and resolve issues.
To secure the Platform, prevent fraud and misuse, and maintain audit records.
To maintain, analyse and improve the Platform using aggregated or de-identified information.
To comply with law and to establish, exercise or defend legal claims.

We do not sell personal data, and we do not use employee data from the Platform for advertising.

5. Legal basis for processing

Consent – for example, Aadhaar verification, linking your profile with a new organisation, and optional features. You may withdraw consent at any time. Withdrawal does not affect processing carried out before it, but some features may stop working.
Legitimate uses permitted by law – including processing for employment purposes by your organisation, compliance with legal obligations, and the prevention of fraud.

Customers are responsible for having a valid legal basis for the employee data they enter or instruct us to process, and for giving their employees any notices required by law.

6. Your Belong profile across employers

Belong lets you keep one profile as you move between organisations.

When a new organisation wants to add you, it sends a link request. Your profile is shared with that organisation only after you approve the request on the Platform.
You can reject a link request. Requests that are not answered expire.
When you leave an organisation, it keeps the employment records it is entitled to retain, and you keep your Belong profile.
Once you approve a link request, the new organisation can view your profile and the employment history held on Belong that the Platform makes available to it.

Your organisation – its authorised administrators and HR users can access employee data according to the roles and permissions it sets.
Other organisations – only with your approval, as described in Section 6.
Service providers – hosting and storage, email and SMS delivery, identity and GST verification, and, when paid plans are active, payment processing. They act on our instructions and are bound by confidentiality and security obligations.
Professional advisers – such as lawyers and auditors, where necessary.
Authorities – where required by law, a court order or a lawful request by a government agency.
Business transfers – in connection with a merger, acquisition or sale of all or part of our business, subject to equivalent protection.

8. Where data is stored

Platform data is stored on servers operated by us or our service providers. If any data is processed outside India, we do so only as permitted under the DPDP Act and take reasonable steps to keep it protected.

9. How long data is kept

Employment records are kept for as long as the Customer's account is active and as instructed by the Customer, and afterwards only as long as needed to meet legal obligations.
After a Customer's account ends, its data is deleted or anonymised within a reasonable period, unless we must retain it by law or for the resolution of disputes.
Your Belong account and profile are kept while your account is active. You may ask us to delete your account, subject to records that an organisation or the law requires to be retained.
OTP, session and security logs are kept only for as long as needed for security and audit purposes.

10. Security

We use reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS), encryption of Aadhaar verification data, role-based access controls, time-limited signed links for files, OTP verification and activity logging. No system is completely secure, however, and we cannot guarantee absolute security. If a personal data breach occurs, we will notify affected Customers and individuals and the Data Protection Board of India as required by law.

You are responsible for keeping your login credentials and OTPs confidential. Duvee will never ask for your OTP or password by phone or email.

11. Your rights

Subject to applicable law, you have the right to:

Access a summary of your personal data and how it is processed.
Correct, complete or update inaccurate or incomplete data. Much of your profile can be updated directly on the Platform.
Erase personal data that is no longer needed, unless it must be retained by your organisation or by law.
Withdraw consent that you have given.
Grievance redressal – raise a complaint about how your data is handled.
Nominate another person to exercise your rights in the event of your death or incapacity.

For employment records, please contact your organisation. For your Belong account and profile, or if your organisation does not respond, email us at info@duveetech.com. We may need to verify your identity before acting on a request. If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India.

12. Children

Belong is intended for use by organisations and their adult employees. We do not knowingly process the personal data of children under 18 years of age. Customers must not add anyone under 18 without verifiable parental consent where the law requires it.

13. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date shows when it was last revised. If we make significant changes, we will notify Customers and users through the Platform or by email.

14. Contact us and grievance redressal

For questions about this policy, to exercise your rights or to raise a grievance, please contact our Grievance Officer:

Grievance Officer
Duvee Technologies Private Limited
33/15, Second Floor, Eldams Road,
Bhaskarapuram, Alwarpet,
Chennai, Tamil Nadu 600018, India
Email: info@duveetech.com

We will acknowledge your grievance promptly and work to resolve it within the time required by applicable law.