1. Who we are and who is responsible
Nexvora Workspace is business software made by NexvoraSoft, Karachi, Pakistan (“we”). Companies use it to run sales, projects, tasks, communication and HR, and their staff use the website and the Nexvora mobile app (Android and iOS).
The company that gives you your account (your employer) decides what information is kept about you and is responsible for it. Where we host Nexvora for that company, we process the information on its behalf and only to provide the service. Some companies run Nexvora on their own server; then the information stays on that company's server and we do not have access to it.
2. Information the mobile app uses
- Account details — your name, work email, role, department and employee details, set up by your company. Used to sign you in and show your information.
- Sign-in — your email and password are sent to your company's Nexvora server only to sign in. The app keeps a sign-in token in the phone's secure storage (Android Keystore / iOS Keychain) so you stay signed in; it is removed when you sign out.
- Server address — the address of your company's Nexvora server, kept on the phone.
- Attendance — the time you check in and out.
- Precise location — only if your company requires it — at the moment you tap Check in or Check out, the app reads the phone's location once and sends it with that check-in, so your company can confirm you were at the workplace. The location and its distance from the office are stored with that day's attendance. The app never tracks your location in the background or at any other time, and it does not ask for location at all when your company does not use this.
- Leave, payslips, loans and advances — the requests you make, their decisions, and your payslips, as kept by your company's HR and payroll.
- Notifications — if you allow notifications, the phone gets a push token from Google Firebase Cloud Messaging (and Apple Push Notification service on iPhone). It is stored on your company's server with your account so you can be told about approvals, leave decisions, payslips and similar updates. It is removed when you sign out or uninstall the app.
- Managers also see their team's attendance and the requests waiting for their approval, as allowed by their role.
3. What the app does not do
- No advertising, no ad identifiers and no selling or renting of personal information.
- No analytics or tracking SDKs; the app does not follow you across other apps or websites.
- No access to your contacts, photos, microphone, messages or files. (A payslip PDF you choose to open is saved in the app's temporary folder and opened with your PDF viewer.)
- The camera is used only when you tap Scan QR code to connect the app to your company; it reads the QR code on the screen and no photo is taken, saved or sent.
- No background location.
4. The website and the hosted service
When you use Nexvora in the browser, we process the business information your company enters (clients, leads, quotations, invoices, projects, tasks, emails and WhatsApp messages it connects, HR records) only to provide the service to that company. Sign-in uses a secure, http-only session cookie; we do not use advertising cookies.
If you send the demo request form, we use your name, company, email and phone to contact you about the demo.
If your company turns on Ask Nexvora (AI questions about its own data), the question and the data needed to answer it are sent to the AI service the company chose (for example Anthropic, OpenAI or Google) under that company's account. People can only ask about information their role already lets them see.
6. How information is protected
- Passwords are stored only as secure hashes. Sign-in tokens on the phone are kept in the operating system's secure storage and change regularly.
- Information is sent over HTTPS on the hosted service. Companies running their own server on an office network decide how their server is secured; we recommend HTTPS there too.
- Access inside Nexvora follows roles, departments and permissions set by your company, and important actions are logged.
7. How long information is kept
Your company decides how long it keeps its records (for example attendance and payroll may have to be kept for legal reasons). On the phone, signing out removes the sign-in token and the notification registration; uninstalling the app removes everything it stored on the phone. When a company stops using the hosted service, its data is deleted after the notice period in its agreement.
8. Your choices, and deleting your data
- You can turn off notifications or location for the app at any time in the phone settings (if your company requires location, check-in will then ask for it).
- To see, correct or delete your information, or to have your account deleted, ask your company's Nexvora administrator or HR — they manage your account.
- You can also write to support@nexvorasoft.com with your name, work email and company. For the hosted service we pass the request to your company and act on its instruction, normally within 30 days.
9. Children
Nexvora is a workplace app for company staff. It is not meant for children, and we do not knowingly collect information from anyone under 16.
10. Changes to this policy
We will update this page when the app or the service changes how information is used, and change the date at the top. Important changes will also be announced in the app or by email to company administrators.
11. Contact
NexvoraSoft, Karachi, Pakistan · support@nexvorasoft.com · WhatsApp +92 301 2419263