Privacy Policy
Comprehensive privacy architecture, data governance standards, and rights disclosure for Wyu users.
1. Overview & Regulatory Framework
Labecon Innovations Private Limited (hereinafter referred to as "the Company", "We", "Us", or "Our") operates the Wyu Ops mobile application (the "Platform"). We operate as a Data Fiduciary under India's Digital Personal Data Protection (DPDP) Act, 2023. This Privacy Policy explains how we collect, process, store, archive, protect, and delete the personal data of security professionals, guards, and contractors (the "Data Principals", "Users", or "You") who register and utilize our platform.
2. Information We Collect and Process
To provide vertical SaaS workforce management tools, verified identity protocols, and operational utility features, we collect several categories of personal data. The specific data processed depends on your interaction with the Platform:
Identity Verification, Profile, and Account Data
- Registration details such as full name, mobile number, email address, organization or agency name, job role, service location, and account credentials.
- Identity verification records obtained through lawful onboarding checks, including reference identifiers, verification status, and supporting audit logs.
- Profile information required to configure access permissions, shift assignment workflows, and operational reporting within the platform.
Operational Activity Data
- Attendance, shift-in, shift-out, patrol, site assignment, task completion, incident reporting, and workflow status records generated while using the Platform.
- Device identifiers, IP address, timestamps, browser or app metadata, and error logs used to secure accounts and maintain service reliability.
Communication and Support Data
- Messages, support requests, grievance details, service feedback, and other communications submitted through in-app or web-based support channels.
- Attachments or evidence shared voluntarily for incident management, verification, onboarding, or compliance review purposes.
3. Legitimate Purposes & Legal Grounds for Processing
We process your personal data under the strict boundaries of contractual necessity and Legitimate Uses as prescribed by regional regulations (including the DPDP Act, 2023):
- Service delivery and account administration: to register users, manage authentication, enable workforce operations, and provide core Platform features.
- Operational continuity and accountability: to assign duties, record attendance, maintain auditability, and support enterprise or agency workflows.
- Security, fraud prevention, and compliance: to detect unauthorized access, enforce policy controls, and meet applicable legal or contractual obligations.
4. Data Storage, Sovereignty, and Security
Your personal data is stored and processed using infrastructure selected to support security, availability, and lawful data handling obligations.
- Infrastructure controls: access to production data is restricted to authorized personnel and protected using role-based permissions, encryption, and logging.
- Security safeguards: we apply reasonable technical and organizational measures to protect data against accidental loss, unauthorized access, misuse, alteration, or disclosure.
- Cross-border handling: where service providers or operational tooling are used, we ensure the processing remains subject to appropriate contractual and security controls.
5. Data Retention, Archiving, and Deletion Lifecycle
We enforce strict data minimization practices. Personal data is systematically destroyed or anonymized once its core operational purpose finishes.
- Retention aligned to purpose: we keep personal data only for as long as necessary to deliver the Platform, resolve disputes, satisfy legal requirements, and preserve audit records.
- Archiving controls: records may be retained in secure archives for compliance, investigation, or operational continuity purposes where required.
- Deletion and anonymization: once retention obligations end, personal data is deleted or irreversibly anonymized in accordance with our internal lifecycle controls.
6. Rights of the Data Principal
In compliance with India's Digital Personal Data Protection (DPDP) Act, 2023, users may exercise the following rights by contacting our Privacy Desk:
- Right to access information about the personal data we process.
- Right to correction and completion of inaccurate or incomplete data, subject to lawful verification requirements.
- Right to grievance redressal through our designated privacy or support channel.
- Right to withdrawal of consent, where processing is based on consent and withdrawal is legally permitted.
7. Age Restrictions & Age-Gating
The Platform is engineered strictly for adult professionals executing specialized security and workforce operations. We do not knowingly collect, analyze, or accept account registrations from individuals under eighteen (18) years of age. If we identify that a minor's profile has bypassed identity checks, the record will be erased immediately.
8. Contact Information & Privacy Desk
For data rights inquiries, privacy policy questions, or to engage with our privacy framework, please reach out to our representative:
- Privacy Desk / Grievance Officer: Parth Gupta
- Corporate Address: 34 Ashish Nagar, Near Ados, Pados Apartment, Kanadia Road, Indore, Madhya Pradesh, India.
- Privacy Contact Email: grievance@wyu.work
9. Governing Law & Jurisdiction
This Policy is governed by and construed in accordance with the laws of India. Any legal disputes arising out of or in connection with content moderation or intermediary liabilities on the Platform shall be subject to the exclusive jurisdiction of the courts located in Indore, Madhya Pradesh, India.