Privacy Policy

Effective Date: December 31st, 2025

Entity: Wesoftek Solutions Private Limited, incorporated under the Companies Act, 2013, with registered office at Unit No. 105, First Floor, Iris Tech Park, Sector 48, Sohna Road, Gurgaon, Haryana, India, 122018. (“Dunwrk”, “we”, “us”, or “our”).

Dunwrk is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our platform, including our website, web and mobile applications, APIs, and related services (collectively, the “Platform”). It also describes your choices and rights.

By registering for, accessing, or using the Platform, you agree to this Privacy Policy, which forms an integral part of our Terms & Conditions. If you do not agree, please do not use the Platform.

1. Introduction

Who we are & what we do

Dunwrk is a secure SaaS platform that streamlines task management, team collaboration, and project tracking. Our services include task assignment, project timelines, team communications, dashboards, reporting, and admin tools.

Changes to this Policy

We may update this Policy to reflect legal, technical, or business changes. We will post updates on the Platform and, where changes materially affect your privacy, notify registered users via email or prominent notice. Your continued use after the “Effective Date” constitutes acceptance of the updated Policy.

Roles

Unless otherwise stated in a separate agreement, Dunwrk acts as:

• Data controller for account, billing, and support data
• Data processor for workspace data that organizations upload/manage (e.g., tasks, files, comments)

Where Dunwrk is a processor, the organization (workspace owner) is the controller.

2. Children’s Privacy

Our Platform is not intended for children under 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from minors without verifiable parental/guardian consent.

If you believe a minor has provided information to us, contact hello@wesoftek.com and we will promptly delete it.

3. Data We Collect About You

Account & Profile Information

• Name
• Email
• Password (hashed)
• Phone (optional)
• Organization details
• Role/title

If you use SSO (Google/Microsoft/etc.), we receive minimum necessary identifiers/claims (e.g., name, email, tenant ID).

Billing & Payments

• Plan
• Invoices
• Tax IDs (PAN/GST, where applicable)
• Transaction metadata

We do not store card numbers; payments are processed by PCI-DSS compliant providers.

Workspace Content & Usage

• Tasks
• Projects
• Attachments
• Comments
• Dashboards
• Integrations

Related metadata includes:

• Timestamps
• Status changes
• Actors

We also collect access logs and audit trails, such as:

• Login time
• IP address
• Device fingerprint

These are used for security, troubleshooting, and compliance.

Support & Communications

• Helpdesk tickets
• Emails
• Chats
• Survey responses
• Feedback
• Beta participation

Automatically Collected (Cookies / Telemetry)

We may collect:

• IP address
• Device / OS / browser data
• Pages or screens viewed
• Feature usage
• Referrers
• Crash reports
• Performance metrics

Cookies and similar technologies are used (see Cookie Policy):
https://www.dunwrk.com/cookie-policy

You can control non-essential cookies via the banner or settings.

Third-Party Sources

We may receive limited data from:

• Analytics providers
• Error logging tools
• Email delivery systems
• Authentication providers
• Cloud hosting services
• Fraud prevention tools

The data received is limited to what is necessary to provide the service.

4. How We Use Your Data

Purposes

We use personal data to:

• Create and manage accounts/workspaces
• Authenticate users and provide SSO
• Operate, maintain, secure, and improve the Platform
• Provide customer support and service communications
• Send transaction notices
• Personalize the in-product experience (e.g., reminders/notifications)
• Provide opt-in marketing
• Enforce Terms and prevent misuse
• Detect and prevent fraud
• Ensure platform integrity
• Comply with legal obligations
• Respond to lawful requests
• Protect rights and safety

Lawful Bases (Illustrative)

• Performance of contract (providing the Platform and support)
• Legitimate interests (security, service improvement, analytics balanced with privacy)
• Consent (non-essential cookies or marketing)
• Legal obligation (tax, accounting, regulatory compliance)

We do not use your workspace content for advertising.

Aggregated and de-identified analytics may be used to improve services but do not identify you or your organization.

5. With Whom We Share Your Data

We share data only as necessary and with safeguards.

Data may be shared with:

• Workspace members, collaborators, or admins as instructed by you
• Service providers / sub-processors (cloud hosting, CDN, database, analytics, monitoring, email/SMS, payments, support)
• Affiliates, advisors, or auditors for governance and compliance
• Legal authorities when required by law
• Business transfer partners in mergers or acquisitions

Advertising partners only with explicit consent (off by default).

6. Legal and Safety-Related Disclosures

We may disclose information where necessary to:

• Comply with applicable law or legal processes
• Protect the safety, rights, or property of users or the public
• Detect or prevent fraud, security, or technical issues
• Establish, exercise, or defend legal claims

7. Data Retention and Deletion

We retain personal data for as long as:

• Your account remains active
• Services are being provided
• Legal obligations require retention
• Disputes need to be resolved
• Agreements must be enforced

Workspace owners/admins control retention of workspace content.

Deletion requests can be sent to hello@wesoftek.com.

When deletion is initiated:

• Items are soft-deleted (not visible)
• Then permanently erased from active systems

Backups and logs may retain data for up to 90 days before secure overwrite.

Deletion may be delayed where legally required (e.g., tax, fraud prevention, litigation).

After account closure, we retain only minimal records required for legal or regulatory obligations.

8. Your Privacy Choices

You can manage privacy through:

• Account settings – update profile information
• Notifications – manage alerts
• Marketing preferences – unsubscribe anytime
• Cookies – manage through Cookie Policy controls
• Workspace content – add, modify, export, or delete content depending on permissions
• Account deletion – request closure via support

9. Communications from Us

We may send:

• Transactional emails (security alerts, invoices, updates)
• Marketing emails/SMS/push notifications only with consent
• Administrative notices regarding changes to Terms or Policy

10. Protecting Your Information

We implement safeguards including:

• Encryption in transit and at rest
• TLS security
• Hardened cloud infrastructure
• Network isolation
• Role-based access control
• SSO / MFA options
• Least-privilege access policies
• Audit logs and monitoring
• Regular backups
• Vulnerability management
• Incident response procedures

Despite safeguards, no system is completely secure.

Users should:

• Use strong unique passwords
• Enable MFA
• Limit access to authorized users
• Regularly review permissions

Report suspected unauthorized access to hello@wesoftek.com.

11. Your Responsibilities

You must comply with:

• Applicable laws (including data protection laws)
• Your internal policies
• Contractual obligations when processing others’ data

Misuse may result in suspension or termination under our Terms.

12. Third-Party Services

The Platform may integrate with third-party services such as:

• Identity providers
• Storage providers
• Communication tools

These services operate under their own privacy policies, and we are not responsible for their privacy practices.

Review their policies before enabling integrations.

13. International Data Transfers and User Rights

Location & Transfers

We process data in India and may transfer or store it in other countries where our service providers operate.

Where required, we implement appropriate safeguards such as contractual protections.

Your Rights

Subject to jurisdiction and role, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Delete personal data
• Object or restrict processing
• Data portability
• Withdraw consent

For India (DPDP Act)

You may exercise rights by writing to: legal@wesoftek.com

Requests will be authenticated and processed as required by law.

If you are an Authorized User within an organization, contact your workspace admin first.

For the EEA / UK

Where GDPR / UK GDPR apply, Dunwrk will honor applicable rights and lawful bases.

You may contact your supervisory authority if you believe your rights are infringed.

14. How to Contact Us

Email (Privacy / DPO / Grievance): legal@wesoftek.com

Postal Address:
Unit No 105, First Floor, Iris Tech Park, Sector 48, Sohna Road, Gurgaon, Haryana, India – 122018

We are committed to transparency and protecting your information using industry-standard practices. If you believe your privacy has been impacted, please contact us, we will investigate and respond in accordance with applicable law.