Legal

Privacy Policy

Last updated: June 9, 2026  ·  Ergzo Solutions Private Limited

Ergzo Solutions Private Limited (“Ergzo”, “we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, disclose, retain, and protect personal data when you use the Ergzo mobile application, the Ergzo website, and related services used for ergonomic screening, assessment workflows, reporting, follow-up tracking, and workplace analytics.

1. Scope and Roles

Ergzo is primarily offered for workplace use by enterprise and institutional customers, including environment, health and safety teams, medical officers, HR teams, plant managers, factory managers, ergonomists, assessors, and authorized viewers. Workers do not currently maintain direct end-user accounts in the app, although assessment records may relate to a worker or a pseudonymous worker profile created by an authorized company user.

Depending on the context, Ergzo may act as an independent data fiduciary/controller for website, support, account administration, and product operations, and may also act as a processor/service provider on behalf of a customer organization for workplace assessment records handled within the service.

ℹ️

Workplace use: Ergzo is designed for adults in workplace settings and is not intended for children or consumer use.

2. Data We Collect

Account and organization data

For enterprise access and account administration, we may process user and organization information such as name, business email address, company name, designation, access role, team membership, company identifier, and authentication records.

Assessment and ergonomic data

When an authorized user performs an assessment, Ergzo may process posture keypoints, joint angles, ergonomic scores, risk levels, timestamps, department information, task or scene context, joint risk observations, intervention-related status, and associated analytical outputs. These data points may be linked to a worker name or a pseudonymous/default worker label such as “Person #” depending on customer workflow choices.

Media and local device data

Photos, imported gallery media, locally recorded assessment videos, and optional screen-recorded assessment replays may be created or processed on the device for ergonomic analysis and review. Ergzo’s intended production design is that raw assessment media remains on the user’s device unless the user separately exports or shares it outside the app.

Company assets and operational content

The app may process company logos, worker photos, department names, team structures, session names, notes, and other organization-provided content needed to support assessment workflows and reporting.

Website and support data

When you visit the website, contact us, request a demo, or communicate with support, we may collect standard website, correspondence, and business-contact information needed to respond, provide access, maintain security, and administer our services.

CategoryExamplesPrimary storage pattern
Account and org dataName, email, company name, role, team accessBackend / authenticated service environment
Assessment analyticsKeypoints, joint angles, scores, risk levels, timestamps, departmentFirebase Auth / Firestore and app database as applicable
MediaPhotos, imported videos, local screen recordingsStored and processed locally on device by design
AI request payloadJoint risks, scores, task context, scene contextSent only when user taps AI feature

3. How We Use Personal Data

No sale of personal data: Ergzo does not sell personal data and is not designed for advertising profiling or cross-app tracking.

4. Permissions and Device Access

Ergzo requests or may request only the permissions reasonably necessary for assessment features, optional local media handling, and related workflows.

Camera

The camera is used to capture posture or movement needed for ergonomic screening and assessment. Camera access is used only within relevant workflows initiated by the user.

Photos / Gallery

Photo library or media access may be used to import existing photos or videos for local ergonomic analysis and to add optional company logos or related assets. Imported media is intended to remain on-device unless a separate export or sharing action is taken by the user.

Screen Recording

Optional screen recording may be used to create a local replay of the assessment with posture analysis, score overlays, and face blur for later review by the authorized user. This feature is optional and is not designed to capture content from other apps.

Microphone

Ergzo is not intended to record or use audio as part of an assessment. Ergzo’s intended production behavior is that assessment screen recordings are silent, and the microphone permission should be removed where technically feasible.

Notifications

Notification permissions are used for operational reminders such as high-risk follow-up prompts and weekly reporting notifications. Ergzo does not use push notifications for unrelated promotional marketing.

⚠️

Permission note: Some features may be unavailable if a required permission is denied.

5. AI-Generated Recommendations and Action Plans

Ergzo may offer an optional AI feature that generates recommendations or action plans when a user affirmatively taps the relevant in-app control. This feature is not required to conduct an assessment or to view baseline scores.

When the AI feature is used, Ergzo may send a limited data payload such as ergonomic scores, joint risks, task context, or scene/work context to a generative AI service to produce recommendations. Raw assessment photos, raw videos, and raw audio are not intended to be sent for this feature.

AI outputs are generated automatically and may require human review. Customers and users remain responsible for evaluating whether any recommendation is appropriate for their workplace, workforce, operational constraints, and applicable health and safety obligations.

6. Sharing and Disclosure

Ergzo may disclose personal data or related records only in limited circumstances and only to the extent reasonably necessary for the stated purpose.

Ergzo does not sell personal data to data brokers and does not share personal data for cross-context behavioral advertising.

Marketing or Demonstration Footage

Any use of real worker imagery or factory recordings for testimonials, demonstrations, client onboarding materials, case studies, website content, or marketing materials should occur only under a separate and specific authorization process appropriate to that purpose. Such use should not be assumed from ordinary assessment participation alone.

7. Retention, Deletion, and Record Integrity

Ergzo retains personal data and related records only for as long as reasonably necessary for the purposes described in this policy, including service delivery, enterprise administration, workplace safety recordkeeping, trend analysis, intervention tracking, compliance, dispute handling, security, and legitimate business operations.

Certain assessment and session records may be retained even where a customer can delete or archive other entities such as workers, departments, or related organizational structures. This design may be used to preserve audit integrity, reduce the risk of selective underreporting, maintain before-and-after intervention histories, and support longitudinal ergonomic and safety analysis.

Where a worker identifier is removed from an assessment record, Ergzo may instead display a default or pseudonymous label rather than the original worker name, subject to technical and legal limitations.

⚠️

Limitations on deletion: Erasure or deletion rights may be limited where retention is required for legal compliance, contractual obligations, safety record integrity, fraud or misuse prevention, defense of legal claims, or another valid lawful basis recognized by applicable law.

8. Your Rights and Choices

As an India-first service, Ergzo aims to provide notices and controls aligned with the Digital Personal Data Protection Act, 2023, while also preparing for broader rights frameworks applicable in other regions. Depending on the relationship involved, the applicable law, and whether Ergzo acts as a controller/data fiduciary or processor/service provider, individuals may have rights to request access, correction, updating, restriction, objection, consent withdrawal, grievance redressal, portability where applicable, and deletion or erasure subject to lawful retention exceptions.

Where Ergzo processes data on behalf of a customer organization, requests relating to worker-linked assessment records may need to be routed through the relevant customer organization that controls the underlying workplace assessment program. Ergzo may also require verification of identity, authority, or organizational role before acting on a request.

To exercise rights or raise a complaint, contact privacy@ergzo.com.

9. Security and Safeguards

Ergzo uses reasonable technical, organizational, and administrative safeguards designed to protect personal data against unauthorized access, disclosure, alteration, misuse, and destruction. These measures may include role-based access controls, encryption in transit, cloud-service security controls, pseudonymization measures such as face blur and worker label substitution, internal access restrictions, and review of service-provider protections.

No platform, application, network, or storage environment can be guaranteed to be perfectly secure. Users and customer organizations are responsible for protecting device access, passwords, exported media, and any information they choose to share outside Ergzo.

10. International Users and Legal Basis

Ergzo currently positions India as the primary governing privacy regime. If Ergzo expands internationally, additional region-specific disclosures, transfer mechanisms, or legal-basis descriptions may be added for jurisdictions such as the EEA, United Kingdom, California, and other applicable regions.

Where required by applicable law, Ergzo may rely on consent, contract performance, legitimate interests, employment-related necessity, legal obligations, or other recognized lawful bases depending on the service context and the data involved.

11. Children and Age Limitations

Ergzo is intended for workplace use involving adults and is not directed to children. Ergzo does not knowingly offer the service as a child-directed product and does not intend to process children’s personal data as part of its normal product design.

12. Consent in Assessment Workflows

Ergzo may present a session-start consent notice or similar gate before an assessment workflow begins. That notice is intended to inform the user that workers are being recorded or assessed for ergonomic risk assessment, that face blur may be applied throughout the recorded screen and assessment, and that data handling will occur according to the workflow described in the app and this policy.

Where consent is used, Ergzo aims to make the notice clear, specific, and understandable. Ergzo may also rely on other valid grounds recognized under applicable law in enterprise and workplace contexts.

13. Changes to This Policy

Ergzo may update this Privacy Policy from time to time to reflect product changes, legal developments, platform requirements, security improvements, or operational changes. The revised version will be posted on this page with an updated effective date, and where required, additional notice may be provided in-app, by email, or through another appropriate channel.

14. Contact and Grievance

Entity: Ergzo Solutions Private Limited

Email: privacy@ergzo.com

Website: www.ergzo.com

If you have a privacy concern, rights request, correction request, or complaint, please contact Ergzo using the email above with enough detail for us to understand the issue and verify the request.