Privacy policy
Understand your data and your choices.

1. Who we are and our data roles

Skylinx Global Solutions, an Indian partnership firm based in Hyderabad, owns and operates Emplinx. Emplinx is the software product; Skylinx Global Solutions is the contracting and responsible legal entity.

We determine the purposes of our own website enquiries, business relationships, billing, marketing choices and legal records. For workforce, candidate, project and financial data entrusted to Emplinx by a customer, that customer normally determines the purpose, authorised users and retention instructions. Skylinx processes those records under the accepted service agreement and Data Processing Addendum.

If your employer or organisation gives you access to Emplinx, its privacy notice and lawful instructions govern its employment and business decisions. Limited security, abuse-prevention and statutory processing has its own defined purpose; it does not authorise unrelated use of customer records.

2. Information collected by this website

The walkthrough form collects your name, company, work email, optional role, workforce size, selected plan and billing preferences, and the workflow you wish to discuss. A request receipt and operational review records support follow-up.

With optional measurement permission, we record restricted page and journey events and campaign labels. Events exclude names, email addresses and enquiry text. Protected network hashes help prevent abuse; raw IP addresses are not stored in the website application database. Hosting and access providers may process network or session information to operate and protect the website.

Provide business contact details only. Do not include employee files, payroll records, bank details, identity documents, health data or confidential client records in a general enquiry. A protected-data review uses an agreed secure route.

3. Customer product information and purposes

Enabled Emplinx workflows may process employee and candidate records, attendance and leave, approved payroll inputs, payslips, claims, assets, project allocation, timesheets, skills, communications, approvals and audit evidence. The selected modules, actual fields, recipients, purpose and retention are identified in the customer processing schedule.

We use customer data only for the instructed service and agreed processing purposes, together with separately identified lawful security or statutory requirements. Supporting a field or workflow does not establish that an employer may lawfully collect every category.

Bank and payment details, authentication secrets, health information and biometrics require the applicable sensitive-data assessment and safeguards. Government identifiers must be limited to a lawful, necessary purpose. Do not send passwords, OTPs, full card details or prohibited Aadhaar authentication information through ordinary enquiries, documents or support messages.

4. Lawful grounds and separate permissions

The applicable legal ground depends on the processing, jurisdiction and our role. Required consent must be specific, informed and capable of withdrawal. A privacy-policy receipt, policy acknowledgement, background check, biometric permission and NDA or IP acceptance are separate events; one does not automatically authorise the others.

Indian information-technology and sensitive-personal-data requirements apply where they cover the activity and remain in force. The Digital Personal Data Protection Act and Rules have phased commencement; each statutory obligation applies when it has commenced and covers the processing. Applicable contractual safeguards are assessed separately.

Biometric, facial-attendance, location or recording functions require their own defined purpose, notice, permissions and retention. Device permission alone does not authorise continuous tracking or unrelated surveillance. Where law requires an alternative attendance method or separate consent, the customer must provide it.

5. AI assistance and human decisions

Approved assistive features use authorised inputs for a disclosed purpose. Employment, salary, payroll finalisation, payments, statutory accounting and other consequential decisions remain with competent authorised people and the relevant source systems. Human review must assess sources, freshness, assumptions and possible errors.

Customer employee, payroll, health and confidential business content is not authorised for independent general-purpose model training. Customer-specific tuning requires a separately agreed lawful purpose, provider terms, security, retention and rights assessment. One customer’s confidential information must not be exposed to another customer.

Undisclosed loyalty, personality, employability or flight-risk scoring, covert workforce surveillance and solely automated consequential adverse decisions are prohibited product uses. Pseudonymised or aggregated information remains personal data where an individual can reasonably be identified.

6. Hosting, recipients and transfers

Emplinx’s primary product hosting uses Oracle Cloud Infrastructure in the India South (Hyderabad), India region, ap-hyderabad-1. The deployment’s processing schedule identifies the actual provider entities, services, backup and disaster-recovery locations, support access and any approved AI recipients. Primary hosting in India does not by itself establish that every processing activity stays in India.

This marketing website uses Cloudflare hosting and storage for website enquiries and permitted activity records. Its infrastructure is separate from the Emplinx customer application. Customer-selected integrations may have their own terms and data roles.

Access is restricted to authorised people and contracted providers needed for the relevant purpose. Subprocessors follow the applicable contractual safeguards, change-notice and objection arrangements. Restricted transfers require the applicable legal mechanism and safeguards; a general policy or an India-hosted database does not substitute for them.

We do not sell website enquiry information or use confidential workforce records for unrelated advertising. Legally required disclosure is assessed for authority, necessity and scope, with notice where permitted.

7. Retention, exports and deletion

Website enquiries and related review records are eligible for deletion 90 days after their last recorded activity. Optional activity records are eligible after 90 days. Enquiry cleanup currently runs when a new website enquiry is processed; optional activity cleanup also runs when a permitted activity event is recorded. Independent scheduled cleanup requires the hosting operator to configure and verify the private cleanup job. Until that job is active, deletion may occur later during periods without the relevant processing activity. Contact privacy@skylinxglobal.com for a deletion request. Device measurement preferences remain until changed or cleared.

The Ask Emplinx conversation stays in the current page’s browser state. This website does not send it to an external language model; it is cleared when that page session is replaced.

For customer processing under the standard accepted DPA, exit day 0 is the effective end of the affected processing service: ordinary processing stops then, agreed return or export is due by day 30, active-content deletion by day 90 and scheduled backup expiry by day 180. These deadlines share the same starting date; they are not consecutive extra retention periods.

Earlier lawful deletion instructions, mandatory retention, regional switching rules and precise record-specific legal holds can change the applicable handling. Retained records are restricted to their lawful purpose, with review and expiry. Qualified deletion confirmations identify actual completion and any remaining lawful exceptions.

8. Rights, requests and grievances

Your rights depend on the applicable law and our processing role. They may include information or access, correction, erasure, consent withdrawal, grievance redressal and other rights where applicable. Overseas portability or objection rights are not presented as universal Indian entitlements.

For customer-controlled workforce records, contact your organisation’s privacy contact first. You may also contact privacy@skylinxglobal.com; we route the request and assist according to our role. We remain responsible for requests about our own processing.

Give enough information to identify the service or website receipt. Identity and authority checks must be proportionate. Do not send full identity documents, bank details or passwords through an ordinary email request. Requests are handled within the applicable legal deadline; internal routing does not restart that clock.

Withdrawing consent does not invalidate earlier lawful processing or remove independent statutory duties. It may affect a function that genuinely depends on that consent. Statutory complaint routes and mandatory remedies remain available where applicable.

9. Security and incident communication

Safeguards must match the service, data sensitivity, risk and accepted security schedule. The Trust Centre explains shared responsibilities and how to request scope-specific evidence. A written policy or infrastructure-provider certificate is not proof that the whole application is independently certified.

Report suspected compromise to security@skylinxglobal.com with a safe description of the affected service. Do not send credentials or another person’s records. Incident notification follows the accepted DPA and applicable legal duties, using available facts and staged updates rather than waiting for a final investigation.

Ordinary support hours do not postpone urgent security or statutory reporting duties. Customer-specific primary and fallback contacts are recorded in the accepted incident schedule.

10. Communications, children and restricted services

Requested service and security messages are separate from promotional communication. Promotional email, SMS, voice or messaging requires the applicable permissions; permission for one channel or purpose does not cover every other channel. Marketing withdrawal does not prevent necessary service notices.

Emplinx business accounts are intended for authorised adult users. Limited dependant or minor information requires an approved lawful purpose, an appropriate notice and guardian arrangements where required. General service acceptance does not supply every required parental permission.

Healthcare records, protected health information, training on live client data and separately regulated services require their own approved scope and applicable agreements. An ordinary workforce subscription, demonstration or website enquiry does not authorise unrestricted clinical-data processing.

11. Updates and contact routes

Privacy and rights: privacy@skylinxglobal.com. Legal notices: legal@skylinxglobal.com. Security reports: security@skylinxglobal.com. Business enquiries: info@emplinx.com or info@skylinxglobal.com. Telephone: +91 40 45471622. Office addresses appear in the footer.

The displayed date identifies this website policy update. A material new processing purpose requires the additional notice and lawful ground applicable to that purpose. Continuing to browse does not replace required consent or silently amend an accepted customer agreement.