Effective Date: 28 July 2026 | Version 1.0
Privacy Policy
At a Glance
1. Who We Are
Peoplewise (“we”, “us”, “our”) owns and operates the Peoplewise platform and associated website at peoplewise.in (the “Service”). We are the data controller in respect of personal data collected directly from Users of the Service.
Peoplewise is incorporated and operates under the laws of India. Our registered office is at 8-2-269/5/40, Sagar Society, Road No 2, Banjara Hills, Hyderabad, India 500034.
If you have any questions about this Privacy Policy or how we handle your data, please contact us at privacy@peoplewise.in.
2. Scope of This Policy
This Privacy Policy applies to:
- All users of the Peoplewise platform, including subscribers, trial users and visitors to our website
- Personal data collected through the Peoplewise platform, website, and any associated communications
- Personal data relating to employees or other individuals that Users upload or input into the Service
This Policy should be read alongside our Terms and Conditions of Use, which govern the overall relationship between Peoplewise and Users of the Service. Where Users upload personal data relating to third parties (such as employees), those Users act as data controllers in respect of that data, and Peoplewise acts as a data processor. This is addressed in more detail in Section 7 below.
3. What Data We Collect
3.1 Account and Registration Data
When you create a Peoplewise account, we collect:
- Your name
- Your email address
- Your city/town and country, where you choose to provide it
We do not use passwords for manager accounts. Instead, you sign in with a one-time code sent to your email address, which is valid for a short period and cannot be reused once entered.
3.2 Waitlist Data
If you try to sign up while new registrations are temporarily paused, we collect and store your email address to add you to a waitlist and to email you once a spot becomes available. This entry is removed once you sign up or, if you never do, is retained only for as long as new registrations remain paused.
3.3 Payment Data
Peoplewise does not currently charge for use of the Service, and no payment data is collected today. Once paid subscriptions are introduced, payment will be processed by a third-party payment processor. As part of starting a free trial (see Clause 5.7 of our Terms & Conditions), you will be asked to provide valid payment details in advance, even though no charge is made until the trial ends. We will update this Policy in advance of paid subscriptions launching to name the payment processor and explain what payment-related data we receive from them (for example, payment confirmation, the last four digits of your card, billing address, and invoice records). We will never collect or store your full card or bank account details directly.
3.4 Usage and Platform Data
When you use the Service, we automatically collect:
- Log data including your IP address, browser type, device type and operating system
- Pages visited, features used and actions taken within the platform
- Session duration and frequency of use
- Error logs and technical performance data
We collect this data to operate, maintain and improve the Service, diagnose technical issues, and understand how Users engage with the platform.
3.5 Employee and Third-Party Data You Upload
As part of using the Service, you add limited information about your team members to track and prepare for management conversations (“Employee Data”). This currently consists of:
- First name and last initial
- The date the person joined your organisation and the date they joined your team
- Generational cohort, where provided (used only to tailor generic guidance — not a sensitive category of data)
- Short optional notes (up to 280 characters) you add about a specific conversation or “moment”
We do not currently support uploading full names, job titles, performance appraisals, attendance records, health information or other sensitive employee data, and you should not enter this kind of information into the free-text note fields. If the scope of Employee Data we support changes, we will update this section.
You should only upload Employee Data where you are authorised to do so by your employer and, where required, where there is a valid lawful basis under applicable data protection law. See Section 7 for further details on your obligations as a data controller in respect of Employee Data.
3.6 Communications Data
If you contact us by email, via our website or through the platform, we collect:
- The content of your message
- Your name and email address
- Any attachments or supporting information you share
3.7 Cookie and Tracking Data
We use cookies and similar tracking technologies on our website and platform. Please refer to our Cookie Policy for full details of what cookies we use and how to manage your preferences.
4. How We Use Your Data
4.1 Providing and Operating the Service
- To create and manage your account
- To process your subscription and payments
- To deliver the features and functionality of the platform
- To provide customer support and respond to your enquiries
4.2 Communications
- To send transactional emails relating to your account and subscription (e.g. invoices, renewal notices, password resets)
- To notify you of material updates to the Service, these Terms or this Privacy Policy
- Where you have opted in, to send product updates, guidance and information about the Service
4.3 Improving the Service
- To monitor and analyse usage patterns to improve the platform
- To diagnose and resolve technical issues
- To develop and test new features
- To generate aggregated, anonymised insights about how the Service is used (this data cannot identify you)
4.4 Legal and Compliance
- To comply with our legal and regulatory obligations
- To enforce our Terms and Conditions
- To protect the rights, property or safety of Peoplewise, our Users or third parties
- To respond to lawful requests from regulatory authorities or law enforcement
5. Lawful Basis for Processing
We process your personal data on one or more of the following bases, in accordance with the Digital Personal Data Protection Act 2023 (India) (“DPDP Act”) and, where applicable, other data protection legislation:
- Contract: Processing necessary to perform our contract with you (e.g. operating your account, providing the Service, processing payments)
- Consent: Where you have given us your clear, informed consent to process your data for a specific purpose (e.g. marketing communications). You may withdraw consent at any time — see Section 11
- Legitimate Interests: Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights (e.g. fraud prevention, improving the Service, internal analytics)
- Legal Obligation: Where we are required to process your data to comply with a legal or regulatory requirement
Where we process Employee Data on your behalf, your organisation is the data controller and is responsible for identifying the appropriate lawful basis under applicable law.
6. AI Features and Your Data
The Service includes an AI-powered chatbot on our public website, which answers common questions about Peoplewise using Anthropic's Claude AI model. It is available to visitors browsing our website, including before you create an account, and is separate from your Peoplewise account and any Employee Data you upload once you are a subscriber.
When you send a message to the chatbot, we share the following with Anthropic (a third-party AI provider based in the United States):
- The text of the message you type
- Recent messages from the same conversation, to give the AI context (up to the last 8 messages)
We do not send your account details, IP address or any other personal data to Anthropic as part of this feature. The chatbot answers only using information already published on our website and does not have access to your account, team or personal data. Use of the chatbot is subject to a daily message limit and rate limiting to prevent misuse, and we can switch it off entirely at any time.
Anthropic processes this data in accordance with its own privacy policy and API terms, available at anthropic.com/legal/privacy — we encourage you to review these for details of how Anthropic itself handles data submitted through its API. Your messages to the chatbot are not used by Peoplewise to train any AI model.
We do not currently use AI for any other purpose within the Service, including anything relating to Employee Data you upload once subscribed. If we introduce further AI-assisted features, the following commitments will apply from the date those features launch:
- Your personal data and inputs will not be used to train, fine-tune or improve the underlying AI models used in the Service
- Inputs you provide will be processed by the AI solely to generate outputs for your use within the Service
- Your inputs and outputs will not be shared with third-party AI model providers for the purposes of training or improving their models
- We may use aggregated, anonymised and de-identified usage data (which cannot be traced back to you or any individual) to monitor and improve the performance of the Service
We will notify you in accordance with Section 15 before introducing any further AI-assisted feature, and will update this section to describe how it works and how your data is used.
7. Employee Data: Controller and Processor Responsibilities
When you upload Employee Data into the Service, Peoplewise acts as a data processor and you (or your employer) act as the data controller. This means:
Your responsibilities as data controller:
- Ensuring you have a valid lawful basis under applicable data protection law (including the DPDP Act) to process and upload Employee Data
- Providing employees with appropriate notice about how their personal data is being used
- Only uploading Employee Data that is necessary for the management purpose you are undertaking
- Not uploading sensitive personal data (such as health information, disability details, or other special category data) unless strictly necessary and with a valid lawful basis
- Complying with any Data Subject Access Requests or other rights requests made by the employees whose data you have uploaded
Our responsibilities as data processor:
- Processing Employee Data only on your documented instructions
- Not disclosing Employee Data to third parties except as necessary to provide the Service or as required by law
- Implementing appropriate technical and organisational security measures to protect Employee Data
- Assisting you to fulfil your data protection obligations, including responding to rights requests
- Deleting or returning Employee Data at the end of the service relationship, in accordance with our retention policy and your instructions
Where required by applicable law or your organisation's data protection requirements, we are willing to enter into a Data Processing Agreement (DPA). Please contact us at privacy@peoplewise.in to request this.
8. How We Share Your Data
We do not sell, rent or trade your personal data to third parties. We may share your data in the following limited circumstances:
8.1 Service Providers
We currently share data with a small number of trusted third-party service providers who help us operate the Service: cloud hosting and infrastructure providers, our email delivery service, and Anthropic, which powers the AI chatbot described in Section 6. As the Service grows, we may also begin sharing data with providers in the following categories:
- Payment processors, once paid subscriptions are introduced
- Customer support and helpdesk platforms
- Analytics and performance monitoring tools
All third-party service providers are required to handle your data securely, in accordance with our instructions, and in compliance with applicable data protection law. We do not authorise them to use your data for their own purposes.
8.2 Legal and Regulatory Disclosures
We may disclose your data where required to do so by law, court order, or at the request of a competent regulatory authority or law enforcement body, provided the request is lawful.
8.3 Business Transfers
If Peoplewise is involved in a merger, acquisition, restructuring or sale of all or part of its business, your personal data may be transferred to the relevant successor entity. We will notify you in advance of any such transfer where it is material and will ensure that your data continues to be handled in accordance with this Privacy Policy.
8.4 What We Do Not Do
- We do not sell your personal data to third parties
- We do not share your data with advertisers
- We do not use your data for targeted advertising purposes
9. International Data Transfers
Peoplewise is incorporated and based in India, but the majority of the infrastructure we rely on to run the Service is located outside India, principally in the United States. This means that, in practice, most of your personal data is transferred to and processed on servers outside India as a normal part of delivering the Service — this is not a limited exception, it reflects where our hosting, database and AI providers are actually located today.
Where personal data is transferred outside India, we take steps to ensure that appropriate safeguards are in place to protect your data, including:
- Transferring data only to countries or organisations that provide an adequate level of data protection
- Implementing contractual protections with third-party processors
- Complying with the cross-border transfer requirements of the DPDP Act and any applicable implementing rules
10. How Long We Keep Your Data
We retain personal data for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Our general retention periods are:
- If you use self-service account deletion: Your account, all Employee Data, and all other data associated with your account (including team members, reflections and notes) is deleted immediately and permanently at the moment you confirm deletion. This action cannot be undone and there is no recovery or reactivation period
- Account data (where you do not delete your account): Retained for the duration of your subscription and for up to 24 months following account closure by other means, to enable reactivation and comply with legal obligations
- Payment and billing records: Retained for a minimum of 7 years in accordance with Indian financial and tax record-keeping requirements
- Usage and platform logs: Retained for up to 12 months for security, diagnostic and analytical purposes
- Communications and support records: Retained for up to 3 years from the date of the communication
You may request early deletion of your data at any time in accordance with Section 11, or use self-service account deletion from your account settings for an immediate, permanent delete. We may retain certain data for longer where required by law or for the establishment, exercise or defence of legal claims — for example, payment and billing records are kept for the period stated above even after account deletion.
11. Your Data Rights
Depending on your location and applicable law, you may have the following rights in relation to your personal data:
- Right of Access: To request a copy of the personal data we hold about you
- Right to Correction: To request that we correct inaccurate or incomplete personal data
- Right to Erasure: To request that we delete your personal data, subject to applicable legal and contractual obligations
- Right to Withdraw Consent: Where we process your data on the basis of consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal
- Right to Object: To object to processing based on our legitimate interests
- Right to Data Portability: To receive your data in a structured, commonly used format where technically feasible
- Right to Grievance Redressal: Under the DPDP Act, you have the right to raise a grievance with us about our data processing practices
To exercise any of these rights, please contact us at privacy@peoplewise.in. We will respond to your request within a reasonable timeframe and in accordance with applicable law. We may need to verify your identity before processing your request.
If you are not satisfied with our response, you have the right to raise a complaint with the Data Protection Board of India (once operational) or other applicable supervisory authority.
12. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration or destruction. Our security measures include:
- Encryption of data in transit using TLS/SSL
- Encryption of sensitive data at rest
- Access controls to limit who within Peoplewise can access personal data
- Regular security monitoring and vulnerability assessments
- Secure password storage (passwords are hashed and salted; we never store plaintext passwords)
- Contractual security requirements for all third-party service providers
No method of transmission over the internet or electronic storage is 100% secure. While we take commercially reasonable steps to protect your data, we cannot guarantee absolute security. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately at hello@peoplewise.in.
In the event of a data breach that is likely to adversely affect your rights and interests, we will notify you and the relevant authorities as required by applicable law.
13. Cookies and Tracking Technologies
Our website and platform use cookies and similar technologies to enhance your experience, remember your preferences, and understand how Users interact with the Service.
We currently use only one type of cookie:
- Strictly Necessary Cookies: Essential for the platform to function, such as keeping you securely signed in. These cannot be disabled.
We do not currently use functional or analytics cookies. If we introduce them in future, we will update this section and our Cookie Policy, and will only set them with your consent where required by law.
You can manage your cookie preferences at any time through your browser settings. Please see our Cookie Policy for full details.
14. Children's Privacy
The Service is intended for use by people managers and business professionals. It is not directed at, and is not intended for use by, individuals under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us at privacy@peoplewise.in and we will take prompt steps to delete that data.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. When we do:
- We will post the updated Policy on our website with a revised Effective Date
- Where changes are material, we will notify you by email to the address associated with your account
- Where required by law, we will seek your consent before implementing material changes
We encourage you to review this Policy periodically. Your continued use of the Service following notification of changes constitutes acceptance of the updated Policy, unless we are required to obtain your explicit consent.
16. Links to Third-Party Sites
The Service may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party sites. We recommend that you review the privacy policies of any third-party sites you visit, as we are not responsible for their privacy practices or the content they make available.
17. Grievance Officer
In accordance with the Information Technology Act 2000 and applicable rules, and the DPDP Act 2023, we have appointed a Grievance Officer to address concerns relating to this Privacy Policy and our data practices:
Name: Kate Ravi
Designation: Founder
Email: kate@peoplewise.in
Address: 8-2-269/5/40, Sagar Society, Road No 2, Banjara Hills, Hyderabad, India 500034
We will aim to acknowledge your grievance within 5 days and resolve it within 30 days of receipt.
18. Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy or the way we handle your personal data, please contact us:
Email: privacy@peoplewise.in
Grievance / Data Protection queries: kate@peoplewise.in
Registered office: Peoplewise, 8-2-269/5/40, Sagar Society, Road No 2, Banjara Hills, Hyderabad, India 500034
Website: peoplewise.in
This Privacy Policy should be read alongside the Peoplewise Terms and Conditions of Use and Cookie Policy. These documents together govern your relationship with Peoplewise.
© Peoplewise 2026. All rights reserved.