Privacy Policy

This policy explains how OSWorks ("we") collects and handles personal data when you use Digister ("the Platform"). It covers the application and the related services we operate.

Digister is a register management platform. Your organisation decides what is recorded in it; we hold that data on their behalf and use it to run the service.

• Account data — your name, email address, a short "about" description, and a profile photo, where you provide them.
• Company membership — which companies you belong to, your role in each, and whether that membership is currently active.
• Register content — the registers, entries, line items and file attachments you create or edit within the Platform.
• Entry activity history — a record of changes to entries: which field changed, your name and account identifier as the person who changed it, and when.
• Session and sign-in data — session tokens, sign-in timestamps, and a record of the dates you were active, used to keep you signed in and to detect the same account being used from more than one place at once.
• Technical data — browser type and IP address, used for security and rate limiting.

• to provide, operate and secure the Platform's features and services;
• to identify you within your organisation's workspace and attribute the entries you create or change;
• to show notifications about activity in the companies you belong to;
• to maintain the security of your account — keeping you signed in, limiting repeated failed sign-in attempts, and warning you when your account is signed in elsewhere;
• to send transactional messages such as sign-in and account notices;
• to improve and develop new features of the Platform.

We do not use your data to train models, build advertising profiles, or track you across other websites.

This is the part people are most often surprised by, so we state it plainly. Every change to an entry is recorded against your name: which field you changed, and when. Other members of the same company can see that history, because a register is only trustworthy if it shows who recorded what.

Your name and profile photo are also shown alongside the entries you add, and in the members list of each company you belong to.

Your data is stored in the Platform's database, hosted in India. Profile photos and files attached to entries are kept in the Platform's own file storage — a storage volume on the server, or an object storage service we have configured for the Platform — and are served only to signed-in users with access to them. Passwords are never stored in readable form.

Access is enforced per company: the Platform checks your membership on every request, so you only ever see the companies and registers you have been granted access to. We take reasonable technical and organisational measures to protect your information from unauthorised access, disclosure, alteration or destruction. No system can be guaranteed completely secure.

Content is kept for as long as your organisation keeps it. Deleting a register does not immediately erase it — it moves to the Bin, where it can be restored. After 30 days in the Bin it is deleted permanently, along with its entries, and after that it cannot be recovered.

Removing you from a company ends your access to it but does not delete the entries you recorded there, or your name in their history — that record belongs to the organisation's register.

We do not sell, trade or rent your personal information. Your data is shared only:

• within your organisation — other members of your workspace may see your name, profile photo and your entries in activity history;
• with your organisation's administrators, and with the super admins who operate the Platform;
• with service providers who host or maintain the Platform on our behalf;
• as required by law, regulation or legal process.

Subject to applicable law, you may:

• request access to the personal information we hold about you;
• correct inaccurate personal data — your display name, description and photo can be changed at any time on your Profile page, and your photo removed from it;
• request deletion of your account by contacting your organisation's administrator;
• ask your administrator which companies your account has access to, and ask to be removed from any of them;
• object to or restrict certain processing, withdraw consent, and request a portable copy.

To exercise these rights, contact office@osworks.in. We respond within 30 days.

Digister uses session cookies to keep you signed in and to protect forms against cross-site request forgery. These cookies are essential for the Platform to function, and disabling them will prevent sign-in from working. We use no third-party tracking, analytics or advertising cookies.

Your data is primarily stored in India. Where data is transferred outside India, we rely on contractual data-protection commitments with each service provider involved to protect it.

The Platform is intended for businesses and is not directed at children. We do not knowingly collect data from anyone under 18.

We may update this policy and will post the revised version here with an updated date. Material changes will be notified in the product or by email before they take effect.

For privacy questions contact office@osworks.in, or speak to your organisation's administrator about data recorded in your company's registers.

Our Grievance Officer, required under India's information technology rules, is the Grievance Officer, OSWorks, reachable at office@osworks.in.