1. Who we are
Work360 is a staffing and compliance platform operated by TantranZm Technologies Pvt Ltd, a company registered in India with its office at 602, 6th Floor, SSR Corporate Park, Faridabad 121003, Haryana, India.
For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), we are the Data Fiduciary for personal data collected through this website. This policy covers vendor.work360.ai and the vendor network application form on it.
2. What we collect
Information you give us in the application form
The vendor application asks for exactly the following. Nothing else on this page is mandatory, and we do not ask for candidate data at this stage.
| Field | Why we ask |
|---|---|
| Company name | To identify your agency and check it is a registered staffing business |
| Business email address | To reply to your application |
| Contact number | To call or message you about your application |
Information collected automatically
When you visit this site we may also record:
- Technical information such as IP address, browser, device type, operating system and referring page
- Pages viewed, time of visit, scrolling and clicks (see section 5)
- Campaign attribution — where your visit came from, held as
utm_source,utm_medium,utm_campaign,utm_term,utm_content, and LinkedIn’s click identifierli_fat_idwhen you arrive from a LinkedIn ad. If you then apply, these are stored alongside your application so we know which campaign it came from. - Which version of the page you saw. We run two versions of this landing page to see which works better, and record which one you were shown as “a” or “b”.
3. Why we use it
- To review your application to join the vendor network
- To contact you about your application, including by email, phone or WhatsApp
- To assess whether your agency fits the requisitions on the platform
- To onboard you if your application is approved
- To answer enquiries and provide support
- To measure which marketing campaigns and page versions bring suitable vendors
- To keep the platform secure and prevent fraud or misuse
- To meet legal, regulatory, accounting and record-keeping obligations
We do not use your application data to make automated decisions that produce legal effects. A person reviews every application.
4. Consent and legal basis
When you submit the application form you consent to us processing the information in it for the purposes listed above. That consent is specific, informed and given by a clear action — submitting the form — and you may withdraw it at any time (see section 11).
Where we process data for security, fraud prevention or to meet a legal obligation, we do so on the legitimate uses permitted by law rather than consent. Withdrawing consent does not affect processing already carried out, and may mean we can no longer progress your application.
5. Cookies, analytics and session recording
This site records how visitors interact with the page. We use Microsoft Clarity, which captures mouse movement, clicks, scrolling and page navigation and can replay them as a session recording. We use this to find where the page confuses people, not to identify individuals.
What is never recorded: the application form and the confirmation screen are masked, so what you type into them — your company name, email address and phone number — is not captured in recordings or heatmaps. Only your submitted form reaches us, through the secure route described below.
| Technology | Provider | Purpose |
|---|---|---|
| Microsoft Clarity | Microsoft Corporation | Heatmaps and session recordings, to improve the page |
| LinkedIn Insight Tag | LinkedIn Corporation | Measuring ad campaign performance and conversions |
| Preference cookie | Work360 | Remembers which version of the page you were shown, so it stays consistent on repeat visits |
You can block or delete cookies in your browser settings, and you can opt out of Clarity by enabling “Do Not Track” or blocking clarity.ms. Blocking them does not stop you using the site or applying.
6. LinkedIn ads and lead forms
We advertise on LinkedIn. If you reach this page from a LinkedIn advertisement, LinkedIn passes along a click identifier that we store with your application so we can attribute it to the right campaign.
If you submit your details through a LinkedIn Lead Gen Form instead of this website, LinkedIn shares that information with us under its own terms, and we use it to contact you about vendor onboarding, platform services, staffing opportunities and related enquiries. LinkedIn’s handling of your data is governed by its own privacy policy, which you should review separately.
7. Who we share it with
We do not sell your personal data. We share it only with the service providers that run this site, and only so far as they need it:
| Provider | What they handle |
|---|---|
| Vercel Inc. | Hosting and delivery of this website |
| Neon Inc. (on Amazon Web Services) | The database that stores submitted applications |
| Microsoft Corporation | Clarity analytics and session recordings |
| LinkedIn Corporation | Advertising measurement and lead forms |
We may also disclose information where we are required to by law or legal process, to establish or defend legal claims, to prevent fraud or a security threat, or in connection with a merger, acquisition or sale of business assets.
8. Where your data is stored
Applications submitted through this site are stored in a database hosted in the Asia Pacific (Singapore) region. Our hosting, analytics and advertising providers are companies based outside India and may process data in other countries, including the United States.
Transfers of this kind are permitted under the DPDP Act except to territories restricted by the Government of India. Where required, we put appropriate contractual protections in place with these providers.
9. How long we keep it
| Data | Retention |
|---|---|
| Applications that lead to onboarding | For the duration of the relationship, then as long as needed for tax, accounting and statutory record-keeping |
| Applications not taken forward | Up to 24 months, so we can revisit them if a suitable requisition appears, then deleted or anonymised |
| Analytics and session recordings | Per Microsoft Clarity’s own retention period, currently up to 13 months |
| Campaign attribution stored with an application | Same period as the application it belongs to |
You can ask us to delete your application sooner — see your rights.
10. How we protect it
- The site is served only over encrypted HTTPS connections
- Applications are transmitted directly to our database over an encrypted connection, and are not emailed in plain text
- Form fields are masked from session recordings, so your details never enter analytics
- Database credentials are held as encrypted secrets and are not present in the website code
- Access to submitted applications is limited to the people who need it to review them
No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please do not send us sensitive personal data — such as Aadhaar, PAN, bank details or candidate documents — through this public form. Those are handled inside the platform after onboarding, where they are masked by default and access to them is logged.
11. Your rights
Subject to applicable law, you may ask us to:
- Access the personal data we hold about you and a summary of how it is processed
- Correct data that is inaccurate, misleading or incomplete, or complete data that is out of date
- Erase your personal data where we no longer need it for the purpose it was collected for
- Withdraw consent you previously gave, at any time
- Nominate another person to exercise these rights on your behalf in the event of your death or incapacity, as provided by the DPDP Act
- Opt out of marketing messages, while still receiving replies about your application
- Complain to us, and to the Data Protection Board of India if you are not satisfied with our response
To exercise any of these, email us at the address in section 15. We will respond within a reasonable period, and may need to verify your identity first.
12. Grievance Officer
In accordance with the Information Technology Act, 2000 and rules made under it, and the DPDP Act, you may raise a grievance about how your personal data is handled with our Grievance Officer:
Grievance Officer
TantranZm Technologies Pvt Ltd
602, 6th Floor, SSR Corporate Park, Faridabad 121003, Haryana, India
Email: vendor@work360.ai
Phone: +91 0129 404 7111
13. Children
Work360 is a business service intended for registered staffing companies and the professionals who run them. It is not directed at children, and under the DPDP Act a child means a person under 18 years of age. We do not knowingly collect personal data of children, and we do not use it for tracking, behavioural monitoring or targeted advertising directed at children. If you believe a child has given us personal data, contact us and we will delete it.
14. Changes to this policy
We may update this policy as our services, technology or legal obligations change. The revised version will be published on this page with a new “last updated” date. If a change materially affects how we use data you have already given us, we will take reasonable steps to tell you.
15. Contact us
TantranZm Technologies Pvt Ltd (operating Work360 / WORK360.ai)
602, 6th Floor, SSR Corporate Park, Faridabad 121003, Haryana, India
Email: vendor@work360.ai
Phone: +91 0129 404 7111
Website: vendor.work360.ai