← Home

Privacy Policy

Last updated: 6 June 2026

This Privacy Policy explains how ERGOCURE® India (“Ergocure”, “we”, “us”) collects, uses, shares, and protects personal data when you use the Ergocure.ai platform and website. We process personal data in accordance with India's Digital Personal Data Protection Act, 2023 (“DPDP Act”) and applicable rules. Where we provide services to an employer, the employer is the data fiduciary for its workforce's assessment data and Ergocure acts as a data processor under contract.

1. Information we collect

Depending on how you use Ergocure, we may collect:

  • Assessment information — your responses to ergonomic questionnaires (such as discomfort, workstation setup, and satisfaction questions) and, where you choose to use a camera-based assessment, workstation imagery captured for posture analysis.
  • Contact and account information — name, work email, organisation, role, and phone number when you request a pilot, contact us, or are invited to an assessment by your employer.
  • Usage information — basic technical data needed to operate and secure the service, such as device and browser type and approximate access times.

2. How workstation imagery is handled (privacy by design)

Camera-based assessments are built to minimise personal data from the outset:

  • Faces are blurred on your device before any image leaves it. This cannot be turned off.
  • Continuous video is never uploaded. Posture is analysed using on-device computer vision; only the resulting joint-angle measurements and a small number of face-blurred still frames are sent for clinical review.
  • Limited retention. Face-blurred imagery is retained for a short period (currently 30 days) to support ergonomist review and quality assurance, after which it is automatically purged.
  • Where your employer applies additional blurring or chooses to suppress imagery from reports, those settings are honoured across every report and review screen.

3. How we use information

We use personal data to:

  • generate your ergonomic risk assessment and personalised report;
  • enable a certified ergonomist to review and validate results before they are shared;
  • provide aggregate, de-identified risk insights to your employer (your employer does not receive your individual clinical detail except as required to deliver your report to you);
  • operate, secure, support, and improve the service; and
  • respond to your enquiries and meet legal and regulatory obligations.

4. Legal basis and consent

We process personal data on the basis of your consent and, where applicable, the legitimate uses permitted under the DPDP Act. Before a camera-based assessment, we present a clear consent notice describing what is collected and why. You may withdraw consent at any time (see “Your rights” below); withdrawal does not affect processing carried out before withdrawal.

5. Sharing and sub-processors

We do not sell personal data. We share it only with: (a) your employer, for the limited purposes described above; (b) vetted sub-processors who host our infrastructure and deliver transactional email under written contracts that require appropriate security and confidentiality; and (c) authorities where required by law. Sub-processors are bound to process data only on our instructions.

6. Data retention

We retain personal data only as long as necessary for the purposes above or as required by law. Face-blurred imagery is purged on the schedule described in Section 2. Assessment results and reports are retained for the duration of the engagement with your employer unless a shorter period is agreed or you exercise your right to erasure.

7. Your rights

Subject to the DPDP Act, you have the right to:

  • access a summary of the personal data we process about you;
  • seek correction or completion of inaccurate or incomplete data;
  • seek erasure of your personal data;
  • withdraw consent; and
  • nominate another individual to exercise your rights in the event of death or incapacity.

To exercise any right, or if you received an assessment link from your employer and wish to withdraw or erase your data, contact us at contactus@ergocure.in. We verify requests before acting on them.

8. Security

We use technical and organisational measures appropriate to the sensitivity of the data, including encryption in transit, access controls, and the on-device privacy protections described above. No system is perfectly secure, but we work to protect your data and to notify affected parties of any breach as required by law.

9. Children and sensitive data

The platform is intended for working adults and is not directed at children. Health-related information you provide is treated as sensitive and handled with corresponding care.

10. Where your data is processed

Personal data is processed on infrastructure located in India. Where any transfer outside India is necessary, we do so only in accordance with applicable law.

11. Changes to this policy

We may update this policy from time to time. We will revise the “Last updated” date above and, where changes are significant, take reasonable steps to notify you.

12. Contact and grievances

For any questions, requests, or grievances about this policy or your personal data, contact our Grievance Officer:

Dr. Mona Pankaj — Grievance Officer
ERGOCURE® India, Mumbai, India
contactus@ergocure.in