Privacy policy: ganav.ai and the Ganav apps

Part A: the ganav.ai website

This notice covers the www.ganav.ai website and the contact form on it. Last updated September 2026.

Who we are

BLS Software Pvt Ltd, Sakti Statesman Building, #710, 7th Floor, 34/1, 7th Main, Iblur, Green Glen Layout, Outer Ring Road, Bangalore 560103, India. Questions about this notice go to info@blssoft.in.

What we collect

When you use the contact form we collect the details you enter: name, work email, phone (if given), company or firm, what you are interested in, and your message. The website itself sets no advertising cookies and runs no third-party tracking. Google Fonts are loaded from Google’s servers, which see your IP address as part of serving the font files.

Why we collect it

To reply to your enquiry, arrange a demo, and send a quote or proposal you asked for. We do not sell or rent your details, and we do not add you to a mailing list without asking.

Where it goes

Form submissions are emailed to sales@blssoft.in and info@blssoft.in and kept in our business mailbox and CRM. Access is limited to the people who handle sales and support.

How long we keep it

For as long as we are in conversation with you, and up to twenty-four months after the last contact unless a business relationship follows. You can ask us to delete your details at any time.

Your rights

You may ask what we hold about you, ask for it to be corrected or deleted, or object to how it is used. Email info@blssoft.in and we will respond within one business day.

Changes

If this notice changes, the date above changes with it. Material changes will be flagged on this page.

Part B: the Ganav HR and Ganav Desk apps

Effective date: 30 October 2026

This part explains what the Ganav HR and Ganav Desk mobile apps (“the apps”) do with information. The apps are made by BLS Software Pvt Ltd (“BLS Software”, “we”, “us”), the company behind TaskLive and Ganav.

The short version

The apps are front doors to TaskLive, the accounting, HR and payroll system your organisation uses. They work only with an account that your employer (Ganav HR) or your firm (Ganav Desk) created for you. There is no sign-up inside the apps.
Your information is kept on your organisation’s TaskLive server, not in the apps. Your organisation decides what is kept and for how long. Your organisation is the data controller; where we host its server, we process the data on its behalf.
The apps have no advertising, no analytics and no tracking, and we never sell information.
Payslips, tax forms and documents are not stored on your phone. They open only when you ask, and the temporary copy is deleted.
Location is read only at the moment you punch attendance, never in the background.
Fingerprint and face recognition are handled by your phone. The apps and our servers never receive your biometric data.

1. Who is responsible for your information

Your organisation - your employer (Ganav HR) or your chartered accountant firm (Ganav Desk). Where a firm runs a company’s payroll, the firm and that company under their own agreement. It is the data controller (a “Data Fiduciary” under India’s Digital Personal Data Protection Act, 2023): it decides why and how your information is used, and handles your requests about it.
BLS Software Pvt Ltd - the processor for the organisation. We host TaskLive servers for organisations that choose hosting, run the TaskLive Portal (connection look-ups and the notification relay) and publish the apps. Some organisations host TaskLive on their own servers; then we do not hold their data.

Questions about your HR, payroll, tax or work records should go to your organisation first. You can also write to us (section 10) and we will pass your request on.

2. Information the apps handle

When you connect and sign in (both apps)

The invite link, invite code or QR code you use, to find your organisation’s server.
Your username, password and, where your account has it, a six-digit two-factor code. Ganav Desk always requires two-factor sign-in.
Information about your phone: its maker and model, whether it is Android or iPhone, and the app version. Your organisation’s server gives your phone a device number so you can see and remove it under My devices.

Ganav HR (employees)

What you view: payslips, Form 16, your tax statement, loans and advances, leave balances, holidays, attendance, documents and letters, your profile and your payroll journey. These come from your employer’s server.
What you send: leave applications and withdrawals, approval of your team’s leave and attendance requests (managers), attendance punches and corrections, your income tax declaration, tax plans and proofs, your flexible benefit (FBP) declaration and bills, onboarding documents and acknowledgements, letter requests, requests to change your details (such as address, phone, e-mail, emergency contacts, education, nominees or salary bank account), and referrals when your employer uses them.
Photos and files you choose to take or attach as proofs or documents.

Ganav Desk (CA firm staff)

What you view: approvals waiting for you across your firm’s client companies (vouchers, pay-run totals, leave, HR requests and other records), month-end work, client queries and team chat.
What you send: approve and reject decisions with your remarks, month-end stage and work-item updates, reminders, replies and notes on queries, chat messages and attendance punches.
Sign-in approval (only if you turn it on): the app creates a security key inside your phone’s secure hardware. Only the public part of the key is sent to your firm’s server. When someone signs in to TaskLive on the web as you, your phone shows the browser, IP address and time of that sign-in so you can approve it or report “This wasn’t me”.

Attendance and location (both apps, only where your organisation uses attendance)

When you tap Punch in or Punch out, the app reads your phone’s location once, at that moment, and sends it with the punch to your organisation’s server, so your organisation can see whether you were at your work site. The app never reads your location in the background or between punches.
You can refuse location access; the punch is still sent, marked as “no location”, and your organisation decides what that means.
Where your organisation asks for it, each punch is confirmed with your fingerprint or face on the phone and signed with a security key kept in the phone’s secure hardware. Your fingerprint or face never leaves the phone.

What the apps do not collect

Your contacts, calendar, microphone audio, advertising identifiers, browsing history, a list of other apps, or your location at any time other than an attendance punch. The camera is used only when you choose to photograph a proof or document, or to read a QR code (connect code or office attendance code); a QR picture is not saved or sent.

3. Notifications

If you allow notifications, the app receives a push token from Expo (a notification service the apps use) and sends it to your organisation’s server. The server passes notifications to the TaskLive Portal, run by BLS Software, which stores the push token encrypted together with a server number, a company number, the app name, the platform and the app version - not your name or e-mail. The Portal delivers notifications through Expo (650 Industries, Inc., USA), which uses Apple Push Notification service (iPhone) or Google Firebase Cloud Messaging (Android).

Notifications are written so that they do not show amounts, message text or client details - for example “Payslip ready” or “Sign-in request”. You can switch notifications off in the app or in your phone settings at any time.

4. Why the information is used

To provide the service you use the app for: show your records, send your requests and decisions to your organisation, record your attendance, and keep your account and phone secure.
To protect accounts: two-factor sign-in, device registration, sign-in approval, and the audit trail your organisation keeps of who did what and from which device.
To check that your app version still works with your organisation’s server.

We do not use the information for advertising, profiling or selling.

5. Security

Every connection from the apps is encrypted (HTTPS). The apps connect only to TaskLive servers under tasklive.ai or to servers the TaskLive Portal confirms are registered, so a look-alike server cannot collect your password.
Sign-in keys are stored in your phone’s protected keychain / keystore, only on that phone, and are not copied into phone backups.
Optional App lock asks for your fingerprint, face or phone PIN when the app opens. Ganav Desk also asks for it before every approval or rejection.
You can sign a lost phone out from My devices in the app or on the web.

6. Sharing

We do not sell or rent information. Information leaves your organisation’s server only:

to the services that deliver notifications (Expo, Apple, Google), as described in section 3;
to BLS Software as the hosting and support provider, under its contract with your organisation;
where the law requires it.

Your organisation may share your information with others (for example, tax authorities for TDS and Form 16) under its own policies.

7. How long information is kept

On your phone: until you sign out, remove the workspace, or uninstall the app. Payslips and documents are not kept; temporary copies are deleted right after you share or save them.
On your organisation’s server: as your organisation decides. Payroll, tax, attendance and accounting records often must be kept for several years under Indian law (for example the Income-tax Act, labour laws and the Companies Act).
Push tokens in the TaskLive Portal: until you sign out, switch off notifications or the token stops working.

8. Your choices and rights

Sign out, remove a workspace, remove a phone under My devices, switch off notifications or location access, or uninstall the app at any time.
To see, correct or delete information, or to close your account, contact your organisation (your HR team or your firm’s administrator). In Ganav HR you can also send a change request for your details from My profile.
Under the Digital Personal Data Protection Act, 2023 you may ask your organisation for a summary of your data, correction, completion and erasure, and for grievance redressal, and you may nominate someone to act for you. Outside India you may have similar rights under local law (for example the GDPR).
Account and data deletion: see www.ganav.ai/delete. Your organisation closes the account; some records may have to be kept for legal reasons.

9. Children

The apps are for adults at work. They are not meant for children, and we do not knowingly collect information from anyone under 18 through the apps.

10. Contact

BLS Software Pvt Ltd, Sakti Statesman Building, #710, 7th Floor, 34/1, 7th Main, Iblur, Green Glen Layout, Outer Ring Road, Bangalore 560103, India - info@blssoft.in

11. Changes to this part

If this part changes, we will publish the new version here with a new effective date and, for important changes, tell users through the apps or their organisation.

How Ganav handles your information.