Ophriel CRMPrivacy Policy
Last updated 19 September 2026
This policy covers the Luxara Payslip Android app and the Ophriel CRM that serves it, both operated by Luxara Holidays Private Limited ("we", "us").
Who this applies to
The Payslip app is for our own employees. Accounts are created by our HR team — there is no public sign-up in the app, and it is not usable by members of the public.
What we collect, and why
| Data | Why |
|---|---|
| Identity — name, employee code, job title, work email, phone, date of joining | To identify you as an employee and put your name on your payslip. |
| Payroll and financial — salary, earnings and deduction lines, tax withheld, and the last four digits of your bank account with the bank's name | To calculate, issue and display your payslip, and to file statutory returns. |
| Statutory identifiers — PAN, UAN, PF and ESI numbers | Required by Indian payroll and tax law. The app shows them on your staff profile so you can check them; PAN and bank account numbers reach the app already masked. |
| Contact and emergency details, and the address you enter on your staff profile | HR records, and to reach someone if you are unwell at work. |
What we do not do
- We do not sell or share your data with third parties for advertising.
- The app contains no advertising, analytics or tracking SDKs.
- We do not collect your location, contacts, camera, microphone or files.
- We do not use your payroll data to train anything.
How it is protected
- All traffic between the app and our servers is encrypted with HTTPS/TLS.
- Your sign-in token is held in Android's encrypted storage, backed by the device keystore, and is excluded from cloud backup and device-to-device transfer.
- Bank account numbers, PAN and other sensitive profile fields are encrypted in our database. The app only ever receives them masked. In full, they are shown only to you on the web staff profile form, and to HR, over HTTPS.
- The app blocks screenshots and screen recording on every screen.
- You can only ever see your own payslips. The server identifies you from your signed-in session and ignores any attempt to ask for someone else's.
Payslip PDFs you download
When you download a payslip, the PDF is saved to your device where you chose to put it. From that point it is an ordinary file under your control — anything that can read your Downloads folder can read it, and deleting the app does not delete files you have already saved.
How long we keep it
Payroll records are retained for as long as Indian tax and labour law requires (currently eight years for tax records), and for as long as you are employed with us. Sign-in tokens expire after 12 hours, and signing out anywhere ends every session you have, on the web and in the app.
Your rights, and deleting your account
You can see your details in the app, and correct most of them on your staff profile on the web. Bank and statutory details lock once HR has verified them — changing those is a request to HR, because they are the numbers we pay and file against.
Because accounts are issued by HR and not self-created, account deletion is handled by us rather than by a button in the app. See Deleting your account and data for how to ask, what gets deleted, and what we are legally required to keep.
Contact
Questions about this policy, or a request about your data: hr@luxaraholidays.com.