How WRKTOP Technologies Pvt Ltd handles personal data across every website and platform we operate — PharmaWRK, ServiceWRK, HelloWRK and SalesWRK.
Effective from 22 September 2026 · Last updated 22 September 2026
In short: We collect the minimum we need to run our business and our platforms. We do not sell personal data. We do not use one customer's data to train models for another. Data inside a platform belongs to the customer organisation that put it there — we only process it on their instructions. You can ask us what we hold about you, correct it, or ask us to delete it.
WRKTOP Technologies Private Limited (CIN U72900KA2021PTC144936, registered office 588, Vidyaranyapura Main Road, Block No. 3, HMT Layout, Vidyaranyapura, Bengaluru 560097, Karnataka, India) — "WRKTOP", "we", "us" — builds and operates AI-driven software platforms for B2B organisations.
This policy applies at the company level. It covers all of our websites and every platform in our portfolio, currently PharmaWRK, ServiceWRK, HelloWRK and SalesWRK, and any platform we add in future. It should be read with our Terms of Use.
We handle personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000 and the rules made under it, including the Reasonable Security Practices and Procedures and Sensitive Personal Data or Information Rules, 2011.
It matters which hat we are wearing, because it determines who you should approach about your data.
| Role | When it applies | What it means |
|---|---|---|
| Data Fiduciary (controller) |
Our websites, enquiry and contact forms, marketing, account signup, billing, and support conversations. | We decide why and how this data is processed. Contact us directly to exercise your rights. |
| Data Processor | Personal data that a customer organisation or its users put into a platform — their customers, dealers, patients, employees, contacts, transactions and documents. | We process it only on that organisation's documented instructions. They are the Data Fiduciary. If your data is in a platform because you deal with one of our customers, please approach that organisation first; we will support them in responding, and will redirect you if you contact us. |
We do not seek sensitive personal data through our websites. Some platforms may process it because a customer organisation's own workflow requires it — for example health-related information in a pharmaceutical or service context. Where that happens, the customer organisation determines the purpose, is responsible for obtaining any consent required, and must only submit data it is entitled to process. We apply additional access controls to such data.
| Purpose | Data used |
|---|---|
| Providing, operating and securing the platforms | Account, authentication, usage, Customer Data |
| Authenticating you and preventing unauthorised access | Account, authentication, technical |
| Responding to enquiries, demos and support requests | Contact, account |
| Billing, collection, accounting and statutory tax compliance | Billing and tax |
| Service communications — outages, changes, renewals, policy updates | Account, contact |
| Marketing about our platforms, where permitted | Contact |
| Diagnosing faults, monitoring performance, improving the services | Usage, technical, aggregated and de-identified data |
| Detecting fraud and abuse, and enforcing our Terms | Usage, technical, audit |
| Complying with law and responding to lawful requests | As required |
We do not sell personal data. We do not share it with third parties for their own advertising.
Where the DPDP Act requires consent, we ask for it before or at the point of collection, in clear language, for a specified purpose — and you may withdraw it at any time by writing to contactus@wrktop.com. Withdrawing consent does not affect processing already carried out, and may mean we can no longer provide part of a service to you.
We also process personal data for the "certain legitimate uses" the DPDP Act recognises, including where you have voluntarily provided data for a purpose and not objected to its use for that purpose, for employment purposes, and for compliance with legal obligations, judgments or orders.
Where we act as a processor for a customer organisation, that organisation is responsible for obtaining any notice or consent required from the individuals whose data it puts into the platform.
Our platforms use artificial intelligence and machine learning to read documents and messages, extract structured information, classify and prioritise work, and draft communications. Where that content contains personal data, it is processed as part of providing the service.
We use a small number of cookies and similar technologies:
We do not use analytics, advertising or cross-site tracking cookies. You can block or delete cookies through your browser settings; strictly necessary cookies are required for the platforms to work.
We share personal data only with:
A current list of sub-processors is available on request from contactus@wrktop.com.
Our platforms run on cloud infrastructure. Personal data is primarily stored and processed in data centres located in India. Some sub-processors, including email delivery and AI model providers, may process data outside India.
SalesWRK is currently hosted in the United States and is in the process of being migrated to infrastructure in India. Until that migration is complete, personal data processed in SalesWRK is stored and processed in the United States under the safeguards described below. We will update this policy when the migration completes.
Where personal data is transferred outside India, we do so in accordance with the DPDP Act and any restrictions notified by the Central Government, and under contractual safeguards requiring the recipient to protect the data to a standard consistent with this policy.
We maintain reasonable security practices and procedures appropriate to the nature of the data we hold, including:
No system is completely secure. We cannot guarantee absolute security, and you are responsible for keeping control of the email account used to sign in.
| Data | Retention |
|---|---|
| Website enquiries that do not become customers | 12 months from last contact |
| Account and Customer Data | For the life of the subscription, then 30 days for export, after which it is deleted or irreversibly anonymised |
| Billing, invoices and tax records | As required by the Companies Act, 2013 and Indian tax law — generally 8 years |
| Security and audit logs | 12 months |
| Backups | Overwritten on a rolling 30-day cycle |
We may retain data for longer where required by law or for the establishment, exercise or defence of legal claims.
Subject to the DPDP Act and other applicable law, you have the right to:
To exercise any of these, write to contactus@wrktop.com. We may need to verify your identity. We will respond within 30 days, or tell you if we need longer.
If your data sits inside a platform because you deal with one of our customers, that customer is the Data Fiduciary. Please contact them directly; if you contact us, we will forward your request to them and support their response.
Our websites and platforms are business tools and are not directed at children. We do not knowingly collect personal data of a child under 18 through them, and we do not carry out tracking, behavioural monitoring or targeted advertising directed at children. If you believe a child's data has been provided to us, write to contactus@wrktop.com and we will delete it.
Our websites link to the individual platform sites and may link to other third-party sites. Those sites have their own privacy policies and we are not responsible for their practices. Please read their policies before giving them your data.
If a personal data breach occurs, we will notify the Data Protection Board of India and every affected Data Principal in the form and manner required by the DPDP Act and its rules, and will report to CERT-In as required by the Information Technology Act, 2000 and the directions made under it. Where we act as a processor, we will notify the customer organisation without undue delay so that it can meet its own obligations.
We may update this policy. We will change the "Last updated" date above and, where the change is material, notify account administrators by email or in-product before it takes effect. Please check this page periodically.
In accordance with the DPDP Act, 2023 and the Information Technology Act, 2000 and the rules made under them, all grievances and data protection requests should be addressed to our Grievance Officer & Data Protection Contact by email at contactus@wrktop.com, or by post to Grievance Officer, WRKTOP Technologies Pvt Ltd, 588, Vidyaranyapura Main Road, Block No. 3, HMT Layout, Vidyaranyapura, Bengaluru 560097, Karnataka, India.
We acknowledge complaints within 24 hours and aim to resolve them within 15 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
Privacy questions and requests: contactus@wrktop.com.
General enquiries: our contact page.
Post: WRKTOP Technologies Pvt Ltd, 588, Vidyaranyapura Main Road, Block No. 3, HMT Layout, Vidyaranyapura, Bengaluru 560097, Karnataka, India.