Privacy Policy
This policy explains how Royal Bengal AI ("we", "us") handles personal data in TeamPulse, our employee management service at teampulse.royalbengal.ai. It is written to align with the Personal Data Protection Act, 2026 of Bangladesh.
Who controls your data
TeamPulse is used by companies to manage their own staff, so there are two situations:
- When you visit our site or create a company account, we act as the data controller for your account and contact details.
- When a company adds its employees and their records to TeamPulse, that company is the controller of its employees' data and we process it on the company's behalf as its processor. If you are an employee, please direct requests about your records to your employer first.
What we collect
- Account details you give us: your name, work email, company name, and password, or the basic profile Google shares if you sign in with Google.
- Data a company enters about its people: names, emails, phone numbers, teams, roles, attendance and leave records, and profile details. Bank details entered on an employee profile are treated as sensitive financial data.
- Content you create in the product: leave requests, tasks, comments, chat messages, and announcements.
- Technical data: basic log and device information needed to run and secure the service, and analytics available only to our platform administrators.
How we use it
We use personal data to provide and secure the service, authenticate sign-in, route approvals and notifications, provide support, handle billing, and meet legal obligations. We do not sell personal data, and we do not use employee records for advertising.
Consent and legal basis
We rely on your consent and on the performance of our agreement with you to process personal data. Where a company enters its employees' data, that company is responsible for having a lawful basis to do so and for informing its own staff.
Who we share it with
We share data only with service providers that help us run TeamPulse, under agreements that require them to protect it. These currently include or are planned to include:
- Supabase, for the database, authentication, and storage.
- Google, when you choose to sign in with Google.
- Railway, for application hosting.
- An email provider, for transactional and notification email.
- A payment processor, for subscription billing.
We may also disclose data where the law requires it.
Where data is stored
Data is held with our providers named above, which may store it outside Bangladesh. For categories the law requires to be kept locally, such as certain banking and critical data, we work to meet the residency rules in the Personal Data Protection Act, 2026 and its amendments.
How we protect it
Each company is isolated as its own tenant, with database-level row security so one company cannot read another's data. Traffic is encrypted in transit, access to sensitive fields such as bank details is limited by permission, and we take reasonable technical and organizational measures suited to the sensitivity of the data. No system is perfectly secure, so we cannot promise absolute security.
How long we keep it
We keep account and company data for as long as the account is active. Some content has shorter limits, for example chat messages and announcements are kept for 30 days and then removed. When an account closes, we delete or anonymize data within a reasonable period unless the law requires us to keep it.
Your rights
Under the Personal Data Protection Act, 2026 you may ask to access your data, correct it, delete it, receive a copy in a portable form, object to certain processing, and withdraw consent. To exercise these rights, contact us using the details below. If your data was entered by your employer, we will pass the request to them where appropriate.
Children
TeamPulse is a workplace tool for adults and is not directed at children under 18. We do not knowingly collect their data.
Changes
We may update this policy as the product and the law change. We will post the new version here with a new date, and significant changes will be highlighted.
Contact
Royal Bengal AI, Dhaka, Bangladesh. For any privacy question or request, email privacy@royalbengal.ai.