Privacy Policy
Owned and operated by SpreadMe Digital Pvt. Ltd.
Last Updated: July 21, 2026
Effective Date: July 21, 2026
Effective Date: July 21, 2026
AlignHub is a B2B work management and business operations platform owned and operated by SpreadMe Digital Pvt. Ltd. In this Privacy Policy, “AlignHub,” “we,” “us,” and “our” refer to SpreadMe Digital Pvt. Ltd. when it provides the AlignHub website, platform, applications, and related services.
This Privacy Policy explains how we collect, use, store, disclose, and protect personal data when you visit alignhub.io, create or use an AlignHub account, use our platform or integrations, communicate with us, or otherwise interact with our services.
1. About AlignHub and This Privacy Policy
AlignHub provides a unified business workspace that may include credential management, task management, leave management, payroll administration, asset management, team collaboration, reporting, integrations, and white-label configurations.
Core access to AlignHub may be offered without charge. Fees may apply when an organization requests white-label customization, branded environments, custom domains, implementation services, enterprise support, or other paid professional services.
This Privacy Policy should be read together with our Terms of Service, Data Processing Agreement, Cookie Policy, and any additional notice shown when specific personal data is collected.
2. Scope and Our Data-Processing Roles
The role we perform depends on the context in which personal data is processed.
2.1 When we act as a Data Fiduciary or controller
We generally act as the Data Fiduciary or controller for personal data that we collect and use for our own business purposes, including information relating to website visitors, account owners, workspace administrators, trial users, billing contacts, sales enquiries, support contacts, privacy requests, and marketing subscribers.
2.2 When we act as a Data Processor or processor
Organizations may upload, generate, or manage personal data through their AlignHub workspaces. This may include information about employees, contractors, customers, suppliers, or other individuals. When we process that information only on the customer’s documented instructions, the customer generally acts as the Data Fiduciary or controller and SpreadMe Digital Pvt. Ltd. acts as the Data Processor or processor.
Requests concerning personal data controlled by an AlignHub customer should normally be submitted to that customer. We will support the customer in responding to valid requests as required by our agreement and applicable law.
2.3 Information outside this Privacy Policy
- Personal data processed independently by an AlignHub customer outside the services;
- Employee or job-applicant information covered by a separate employment or recruitment notice;
- Third-party websites, applications, and services governed by their own privacy policies; and
- Information that has been lawfully anonymized so that it no longer identifies an individual.
3. Personal Data We Collect
The information we collect depends on how you interact with AlignHub, the modules you use, and the settings selected by you or your organization.
3.1 Account and profile information
- Full name, business email address, telephone number, profile photograph or avatar;
- Organization name, job title, department, workspace name, role, and permission level;
- Language, time zone, notification, and interface preferences;
- Authentication and account-security information; and
- Other profile information you choose to provide.
We do not store account passwords in readable form.
3.2 Workspace and module data
Customers and authorized users may provide or generate the following categories of data through AlignHub:
- Task and collaboration data, including projects, tasks, subtasks, checklists, milestones, descriptions, priorities, due dates, comments, assignments, approvals, workflow statuses, time records, reports, and meeting notes;
- Credential data, including encrypted account credentials, access keys, API keys, tokens, secure notes, and credential-access logs stored through the Credential Vault or related features;
- Leave and attendance data, including work schedules, attendance records, leave requests, approvals, holiday calendars, leave balances, and reasons provided for an absence;
- Payroll administration data, including salary structures, compensation records, tax declarations, statutory deduction information, bank-account details entered by a customer, and payslips;
- Asset data, including device and software records, serial numbers, assigned users, license information, custody records, and technical identifiers associated with managed assets;
- White-label configuration data, including custom domains, logos, brand assets, themes, colors, and customer-specific workspace settings; and
- Files, images, documents, audit trails, and other content submitted to a workspace.
AlignHub supports payroll calculation, payroll records, and payslip generation. AlignHub does not transfer salaries, execute payroll payments, or move funds to employees.
Together, this information is referred to as “Workspace Data.” Customers and users are responsible for ensuring that they have the authority and a lawful basis to upload, share, and process Workspace Data through AlignHub.
3.3 Invitations and team information
- Name and email address;
- Organization, team, and role information;
- Invitation, activation, and membership status; and
- Workspace permissions and assignments.
3.4 Billing and transaction information
When an organization purchases white-label customization or another paid service, we may collect billing contact details, company name, billing address, tax or GST information, order details, invoice records, transaction history, and payment status.
Payments may be processed by an independent payment-service provider. We generally do not directly store complete payment-card numbers, CVV codes, or online-banking credentials.
3.5 Communications, support, and feedback
- Contact details and the organization you represent;
- Sales enquiries, support tickets, complaints, and correspondence;
- Screenshots, files, diagnostic details, and meeting notes; and
- Feedback, survey responses, testimonials, and suggestions you voluntarily provide.
We will not publish your name, photograph, testimonial, or organization details for promotional purposes without your permission.
3.6 Technical and usage information
- Internet Protocol address, browser, operating system, device type, and language;
- Login dates and times, authentication events, session information, and security logs;
- Pages, modules, and features accessed, navigation activity, and session duration;
- Approximate location derived from an IP address; and
- Crash reports, error logs, performance data, and diagnostic information.
3.7 Integrations and external authentication
If you or your organization connects AlignHub to a third-party service, we may receive and process information authorized through that connection. Depending on the integration, this may include a name, email address, profile information, account identifier, calendar information, file metadata, selected files, messages, contacts, or other authorized content.
Where AlignHub supports sign-in through Google, Microsoft, or another identity provider, we receive the information needed to authenticate the account. We do not receive the password used with the external identity provider.
4. Sources of Personal Data
- Directly from you when you register, use the services, contact us, make a privacy request, or provide feedback;
- From your employer, organization, workspace administrator, or another authorized user;
- Automatically from your browser, device, and use of the services;
- From connected applications and identity providers that you or your organization authorize; and
- From payment providers, business partners, and service providers where permitted by law.
5. How We Use Personal Data
- Create, maintain, authenticate, and administer accounts and workspaces;
- Provide credential, task, leave, payroll-administration, asset, collaboration, reporting, and white-label functions;
- Store, display, synchronize, and retrieve Workspace Data;
- Process invitations, approvals, assignments, notifications, and user permissions;
- Provide support, demonstrations, onboarding, implementation, and professional services;
- Process orders, invoices, payments, taxes, and business records for paid services;
- Send account-verification messages, password resets, security alerts, service notices, and policy updates;
- Detect suspicious activity, prevent fraud and misuse, investigate incidents, and enforce our agreements;
- Measure performance, troubleshoot errors, improve existing features, and develop new features;
- Comply with legal obligations, lawful requests, tax and accounting requirements, and regulatory duties; and
- Send marketing communications where you have opted in or where otherwise permitted, with an option to unsubscribe.
We do not sell or rent personal data. We do not use customer Workspace Data for third-party advertising.
6. Legal Grounds for Processing
Depending on the applicable law and context, we process personal data on one or more of the following grounds:
- Your consent;
- Providing the services or taking steps requested before entering into an agreement;
- Complying with a legal obligation;
- Our legitimate interests or those of another party, where those interests are not overridden by applicable privacy rights;
- Certain legitimate uses or other grounds permitted under applicable Indian data-protection law; and
- Establishing, exercising, or defending legal claims and protecting individuals, systems, and property.
Where processing is based on consent, you may withdraw that consent through the method provided at collection, your account settings, or the contact details in this Privacy Policy. Withdrawal does not affect processing that occurred lawfully before withdrawal.
7. Cookies and Similar Technologies
AlignHub and authorized service providers may use cookies, local storage, pixels, software development kits, and similar technologies.
7.1 Essential technologies
Essential technologies support account authentication, security, session management, load balancing, fraud prevention, privacy preferences, and requested platform functions. These technologies are generally necessary for the services to operate.
7.2 Preference technologies
Preference technologies may remember language, time zone, display settings, dashboard layout, selected workspace, and white-label interface preferences.
7.3 Analytics technologies
Analytics technologies help us understand how the website and services are used, identify errors, measure performance, and improve usability. Where required, non-essential analytics technologies are used only after appropriate consent.
You can manage non-essential cookies through our cookie-preference tool or through your browser settings. Disabling certain technologies may affect functionality.
8. How We Share Personal Data
We may disclose personal data only as described below and as permitted by applicable law.
8.1 Within a customer workspace
Workspace Data may be visible to authorized members of the same workspace according to roles, permissions, task assignments, leave or attendance responsibilities, credential-vault permissions, payroll access, and administrator settings.
8.2 Service providers
We may use service providers for cloud hosting, data storage, content delivery, email delivery, customer support, payment processing, analytics, security monitoring, error reporting, identity services, communication tools, and professional services. They may process personal data only for agreed purposes and subject to contractual confidentiality, security, and data-protection obligations.
8.3 Connected applications
When you or your organization enables an integration, we may exchange information with the connected application as needed to perform the requested function. The third party’s handling of information is governed by its own privacy notice.
8.4 Professional advisers and legal disclosures
We may disclose information to attorneys, auditors, accountants, insurers, regulators, courts, law-enforcement bodies, or other authorities where reasonably necessary to comply with law, respond to lawful requests, investigate wrongdoing, protect safety or rights, recover amounts owed, or enforce our agreements.
8.5 Corporate transactions
If SpreadMe Digital Pvt. Ltd. is involved in a merger, acquisition, financing, restructuring, insolvency, or sale of all or part of its business or assets, personal data may be disclosed to relevant parties subject to appropriate confidentiality and data-protection safeguards.
8.6 With your direction or consent
We may disclose personal data when you directly instruct us to do so or provide valid authorization for a specific purpose.
9. White-Label Services and Customer Responsibilities
An organization may purchase a white-labeled version of AlignHub with its own branding, custom domain, theme, configuration, or implementation requirements.
For personal data processed within a white-label workspace, the customer generally determines why and how its users’ personal data is processed and is responsible for providing any required privacy notices, establishing a valid legal basis, configuring permissions appropriately, and responding to individuals’ requests.
SpreadMe Digital Pvt. Ltd. processes Workspace Data on the customer’s documented instructions and in accordance with the applicable customer agreement and Data Processing Agreement. We may separately process limited account, security, support, billing, abuse-prevention, and service-performance information for our own lawful business purposes.
10. Data Storage and International Transfers
AlignHub is operated from India. Personal data may be stored or processed in India and, where a service provider or integration operates internationally, in other countries.
Where applicable law requires safeguards for an international transfer, we use appropriate contractual, technical, and organizational measures and comply with applicable transfer restrictions. You may contact us for more information about transfer safeguards relevant to your data.
11. Data Retention
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, to follow customer instructions, and to meet legal, security, accounting, tax, dispute-resolution, and enforcement requirements.
11.1 Account and profile data
Account and profile information is generally retained while the account is active and for a limited period after closure when needed to complete deletion, prevent fraud, resolve disputes, enforce agreements, or comply with law.
11.2 Workspace Data
Workspace Data is retained according to the customer’s settings and instructions, the applicable customer agreement, and legal requirements. A workspace administrator may delete content or request closure of a workspace, subject to permissions and contractual terms.
11.3 Support, billing, and legal records
Support records are retained for the period needed to resolve the request and maintain an appropriate service history. Billing, invoice, transaction, tax, and accounting records are retained for the period required by applicable law and legitimate business-record requirements.
11.4 Security logs and backups
Security, access, traffic, credential-use, and processing logs are retained for periods reasonably necessary to investigate incidents, maintain service integrity, prevent abuse, and comply with law. Deleted information may remain in encrypted or access-restricted backups until overwritten through our normal backup cycle.
When personal data is no longer required, we delete it, anonymize it, or securely isolate it until deletion is technically feasible.
12. Security
We use reasonable technical and organizational safeguards appropriate to the nature of the information and the risks involved. The AlignHub platform includes end-to-end encryption for supported data and communications, together with other security measures that may include encryption in transit and at rest, role-based access controls, authentication controls, permission management, logging, monitoring, backups, secure development practices, vulnerability management, incident-response procedures, employee confidentiality obligations, and access reviews.
Credential Vault and other sensitive modules are protected through permission controls and encryption. Access is limited to authorized users and personnel who require it for legitimate business purposes.
No online service or storage system can be guaranteed to be completely secure. Users should maintain strong passwords, protect their devices, enable available security features, restrict credential-vault access, and promptly notify us of suspected unauthorized activity.
13. Personal Data Breaches
We maintain procedures to identify, investigate, contain, and respond to suspected personal-data breaches. Where required by applicable law, we will notify affected individuals and relevant authorities and provide information about the incident, the data involved, likely consequences, mitigation steps, and available support.
Customers must notify us promptly if they become aware of unauthorized access to their workspace, Credential Vault, account credentials, or connected systems.
14. Your Rights and Choices
Subject to applicable law and our role in processing the relevant data, you may have the following rights:
- Access: request a summary or copy of personal data and information about how it is processed;
- Correction and updating: request correction of inaccurate or misleading information and completion of incomplete information;
- Erasure: request deletion of personal data that is no longer required, subject to lawful retention needs;
- Withdrawal of consent: withdraw consent where consent is the basis for processing;
- Restriction or objection: request restriction of or object to certain processing where provided by law;
- Portability: request personal data in a portable format where provided by law;
- Grievance redressal: raise a question, complaint, or grievance about our handling of personal data;
- Nomination: nominate another individual to exercise rights in the event of death or incapacity where provided by law; and
- Regulatory complaint: complain to the Data Protection Board of India or another competent privacy authority where applicable.
We do not discriminate against an individual solely for making a valid privacy request. We do not sell personal data or share it for cross-context behavioral advertising as those terms may be defined under applicable US state privacy laws.
14.1 Verification
To protect personal data, we may request information reasonably necessary to verify your identity, account, workspace, organization, or authority to make a request. Please do not submit government identification documents unless we specifically request them through a secure method.
14.2 Response period
We aim to acknowledge privacy requests promptly and respond within 30 days. Where applicable law provides a different deadline or an extension is legally permitted, we will comply with the applicable requirement and inform you where appropriate.
14.3 Account and communication controls
You may be able to update profile details, preferences, notifications, and connected applications through AlignHub settings. You may unsubscribe from promotional emails by using the unsubscribe link in the message. Administrative, security, and service communications may still be sent where necessary to operate your account.
15. Requests Relating to Customer-Controlled Data
Where personal data is contained in a workspace controlled by an AlignHub customer, submit the request to that customer whenever possible. If you submit the request directly to us, we may refer it to the customer and assist the customer in responding as required by our agreement and applicable law.
16. Children’s Privacy
AlignHub is a business service and is not directed to children. Individuals under 18 should not create an account or submit personal data unless their use is authorized and managed by an organization and permitted by applicable law. If we learn that personal data relating to a child has been collected without required authorization, we will take appropriate steps to delete or restrict it.
17. Third-Party Websites and Services
The services may contain links to or integrations with third-party websites, applications, plugins, identity providers, payment providers, or other services. We do not control their privacy or security practices. Information provided directly to a third party is governed by that third party’s privacy notice and terms.
18. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes to our services, features, integrations, processing practices, legal requirements, or security and transparency measures. The revised policy will be posted on our website with an updated “Last Updated” date.
Where a change materially affects how personal data is used, we will provide additional notice by email, an in-product message, a website notice, or another appropriate method where required. Where fresh consent is legally required, we will request it separately.
19. Grievance Officer and Privacy Contact
Questions, privacy requests, grievances, and concerns about this Privacy Policy or our handling of personal data may be sent to:
Grievance Officer / Privacy Contact
Jigar Patel
Legal Entity
SpreadMe Digital Pvt. Ltd.
Product
AlignHub
Telephone
Registered Office
Capitol Icon, 604, GIFT City Road, Sargasan, Gandhinagar, Gujarat 382419, India
Website
Privacy Request Form
When submitting a request, please provide your full name, the email address associated with your account, your workspace or organization name where applicable, the type of request, and enough information to identify the relevant records. Do not include passwords, access keys, or unnecessary sensitive information.
Where relevant, you may escalate a complaint to the Data Protection Board of India or another competent authority after using our grievance-redressal process, as permitted by applicable law.
20. Contact Information and Terms
AlignHub is a product owned and operated by SpreadMe Digital Pvt. Ltd.
Company
SpreadMe Digital Pvt. Ltd.
Product
AlignHub
Address
Capitol Icon, 604, GIFT City Road, Sargasan, Gandhinagar, Gujarat 382419, India
Website
Your access to and use of the services is also governed by the AlignHub Terms of Service and, where applicable, the customer agreement, Data Processing Agreement, and other service terms agreed with SpreadMe Digital Pvt. Ltd.