The terms you agree to, how we handle your data, how we keep it safe, what uptime we commit to and how billing works. Written to be read, not skimmed past.
In short: your company owns its data, we look after it and run the service, you keep your logins safe and use Peopl lawfully, and either side can end the agreement with notice.
1. The agreement
These terms form an agreement between Peopl ("we", "us") and the company or organization that signs up ("you", the "Customer"). By creating a workspace, starting a pilot or using Peopl, you agree to them on behalf of your organization. If a signed order form or quote conflicts with these terms, the order form wins.
2. Accounts and workspaces
Each Customer gets its own workspace. You decide who in your organization gets access and what role they have.
Your administrators are responsible for the accounts they create and for removing access when someone leaves.
Keep passwords confidential and tell us promptly if you suspect an account has been compromised.
Information you give us about your organization must be accurate and kept up to date.
3. The pilot
A pilot is free for 30 days unless agreed otherwise. During the pilot we provide Peopl "as is" and may change features as we learn from you. If you do not continue after the pilot, we delete your pilot workspace 30 days after it ends, after giving you the chance to export your data.
4. Your data
You own your data. Employee records, attendance, payroll figures, documents and everything else you put into Peopl belong to you.
You give us permission to host, process and back up that data only as needed to provide, secure and support the service.
You are responsible for having a lawful basis to collect your employees' data and for giving them any notice the law requires. We process it on your instructions, as described in the Privacy Policy.
We do not sell your data or use it to advertise to anyone.
5. Acceptable use
You agree not to use Peopl to break the law, store content you have no right to store, attempt to access another Customer's workspace, probe or disrupt the service, or resell it without our written agreement.
6. Fees
Paid plans are billed as described in the Payment Policy and your quote.
7. Availability and support
Our availability commitment and maintenance practice are set out in the Uptime Policy. Support is available by email at .
8. Confidentiality
Each side keeps the other's non-public information confidential and uses it only for the purposes of this agreement. This does not cover information that is already public, independently developed, or that must be disclosed by law.
9. Ending the agreement
You can cancel at any time; cancellation takes effect at the end of your current billing period.
We can suspend or end your access if you materially breach these terms and do not fix the breach within 15 days of notice, or immediately where needed to protect the service or other Customers.
After the agreement ends you have 30 days to export your data. After that we delete it from the live service, and from backups as they expire.
10. Warranties and liability
We provide Peopl with reasonable skill and care. Payroll and statutory figures depend on the data and settings you enter, so please review payslips before paying them. Apart from what these terms say, the service is provided without other warranties. Neither side is liable for indirect or consequential losses, and each side's total liability under this agreement is limited to the fees you paid us in the 12 months before the claim. These limits do not apply where the law does not allow them to.
11. Changes to these terms
We may update these terms. For material changes we will email your administrators at least 30 days before they take effect.
12. Governing law
These terms are governed by the laws of India, and disputes are subject to the jurisdiction of the courts in India.
Legal
Privacy Policy
Effective 1 October 2026
In short: your employer decides what employee data goes into Peopl and we process it on their behalf. We collect the minimum we need to run the service, never sell it, and only share it with the providers that keep Peopl running.
1. Who is responsible for what
When a company uses Peopl to manage its employees, that company is the Data Fiduciary (the controller) for its employees' personal data, and Peopl is the Data Processor acting on its instructions, as those terms are used in India's Digital Personal Data Protection Act, 2023. For data about our own customers' contacts and visitors to this website, Peopl is the Data Fiduciary.
2. Data we process
Workspace data added by our Customers: employee names and contact details, employee codes, departments and positions, attendance and leave records, salary structures and payslips, bank details, documents, performance reviews and helpdesk tickets.
Account data: the name, email address and role of each user, and a securely hashed version of their password.
Usage and log data: sign-in times, IP addresses, browser type and the audit log of changes made inside a workspace.
Enquiries: the details you send us when you request a pilot or write to us.
3. How we use it
To provide, maintain and secure the service, including the audit log and backups.
To support you and reply to your requests.
To send service messages such as notifications, security alerts and billing emails.
To understand, in aggregate, how features are used so we can improve them.
We do not sell personal data, and we do not use workspace data for advertising.
4. Who we share it with
We share data only with service providers that help us run Peopl, under contracts that require them to protect it: cloud hosting, cloud file storage for uploaded documents, and email delivery. We may also disclose data where the law requires it. We will tell Customers before adding a provider that processes workspace data.
5. How long we keep it
Workspace data is kept for as long as the Customer's account is active. When an account ends, the Customer has 30 days to export it, after which it is deleted from the live service and from backups as they expire. Enquiries are kept for up to 24 months.
6. Your rights
You can ask to access, correct or erase your personal data, and to nominate someone to exercise these rights for you. If you are an employee of one of our Customers, please send your request to your employer first, since they control your records; we will help them respond. You can also raise a grievance with us at , and, if you are not satisfied, with the Data Protection Board of India.
7. Cookies and this website
This website (peopl.co.in) does not use advertising or tracking cookies. It loads fonts from Google Fonts, which receives your IP address to serve them. The Peopl app uses only the storage it needs to keep you signed in.
We will post changes here and update the effective date. For material changes we will also notify Customers by email.
Legal
Data Security Policy
Effective 1 October 2026
In short: each company's data is isolated in its own workspace, access is role-based, passwords are hashed, traffic is encrypted, every change is logged, and we tell you quickly if something goes wrong.
1. Workspace isolation
Peopl is multi-tenant: many companies use the same application, but every record is tied to a single company's workspace and every request is checked against it. One Customer cannot see another Customer's data.
2. Access control
Role-based permissions decide which modules and records each user can see and change.
Employee self-scope: users with the employee role see only their own profile, leave and tickets.
Administrators can remove a user's access at any time, and it takes effect immediately.
3. Authentication
Passwords are never stored in plain text. They are hashed with bcrypt, a slow, salted hashing algorithm.
Sessions use signed tokens that expire, so a stolen token stops working.
4. Encryption
All traffic between your browser and Peopl is encrypted with HTTPS (TLS). Uploaded documents are kept in private cloud storage that is not publicly accessible, and are served only to signed-in users with permission to see them.
5. Audit log
Changes inside a workspace are recorded with who made them and when. Administrators can review the log at any time from the Audit Log module.
6. Application security
Security headers are set on every response to reduce common web attacks.
Input is validated on the server before it is stored.
Dependencies are kept up to date, and security fixes are prioritised.
7. Our own access
Only the people who run Peopl can access production systems, and only when needed to operate or support the service. We do not browse workspace data; when support needs it, we ask you first.
8. Backups and recovery
We back up the database regularly and keep backups in a separate location from the live service, so we can restore it after a failure.
9. Incident response
If we confirm a security incident affecting your data, we will notify your administrators without undue delay and within 72 hours, tell you what happened and what data was involved, and explain what we are doing about it. We will give you the information you need to meet your own obligations, including notice to the Data Protection Board of India where required.
10. Reporting a vulnerability
If you find a security issue, please email with the details. Please give us a reasonable time to fix it before disclosing it publicly. We will not take action against good-faith research that avoids harming users or their data.
Legal
Uptime Policy
Effective 1 October 2026
In short: we aim for 99.5% availability each month, schedule maintenance outside Indian working hours with advance notice, and credit your bill if we fall short.
1. Our commitment
We aim to keep Peopl available 99.5% of the time in each calendar month, not counting scheduled maintenance and the exclusions below. That allows for about 3 hours and 40 minutes of unplanned downtime in a 30-day month.
2. How availability is measured
Peopl is "unavailable" when users cannot sign in or load the application because of a fault on our side. Availability is the share of minutes in the month in which Peopl was available.
3. Scheduled maintenance
We announce planned maintenance by email at least 48 hours in advance.
We schedule it outside 9:00 to 19:00 IST on weekdays, and keep it as short as we can.
Urgent security fixes may need shorter notice; we will still tell you as early as possible.
4. Exclusions
Problems with your internet connection, devices or browser.
Outages at third-party providers beyond our reasonable control, and events such as natural disasters.
Suspension under the Terms of Service, or misuse of the service.
Free pilots and demo workspaces.
5. Service credits
If availability in a month falls below our commitment, you can claim a credit against your next invoice:
Monthly availability
Credit on that month's fee
Below 99.5%
5%
Below 99.0%
10%
Below 95.0%
25%
Claim credits by emailing us within 30 days of the end of the affected month. Credits are your sole remedy for missed availability and cannot be exchanged for cash.
6. During an incident
If Peopl is down, we email your administrators when we confirm the problem and again when it is resolved, with a short explanation of the cause.
Legal
Payment Policy
Effective 1 October 2026
In short: the pilot is free; after that you pay the price in your quote, monthly or yearly in advance, by invoice in rupees plus GST. You can cancel at any time and keep access until the end of the period you paid for.
1. Pilot
Pilots are free for 30 days and need no payment details. Nothing is charged automatically when a pilot ends; you continue only if you accept a quote.
2. Pricing
Your price is set out in the quote or order form we send you, based on your team size and the modules you use.
Founding customers keep their founding price for as long as their subscription continues without a break.
For other plans, we give at least 30 days' notice of any price change, and it applies from your next billing period.
3. Billing and invoices
We bill monthly or yearly in advance, as agreed in your quote.
Invoices are issued in Indian rupees (INR). GST is added at the applicable rate and shown separately on a GST-compliant invoice.
If your headcount grows during a billing period, additional employees are billed on a pro-rated basis on your next invoice.
4. Paying
Invoices are due within 15 days of the invoice date. You can pay by bank transfer (NEFT, RTGS or IMPS) or by the other methods listed on the invoice.
5. Late payment
We send a reminder when an invoice becomes overdue.
If an invoice is more than 30 days overdue, we may suspend access after giving 7 days' written notice.
Your data is not deleted during a suspension, and access is restored as soon as the overdue amount is paid.
6. Cancellation and refunds
You can cancel at any time. Cancellation takes effect at the end of the current billing period, and you keep access until then.
Fees already paid are not refunded for partial periods, except where we end the agreement without cause or you end it because of our material breach. In those cases we refund the unused part of any prepaid fees.
Service credits under the Uptime Policy are applied to your next invoice.
7. Billing questions
If you think an invoice is wrong, email within 15 days of receiving it. We will not suspend access over an amount you are disputing in good faith while we resolve it.