Privacy policy

NevyntOS is a workplace portal run by Nevynt Technologies. Each organisation that uses it (“your organisation”) decides what goes into its workspace and who can see it. For that information your organisation is the data controller and Nevynt Technologies processes it on its behalf. This policy explains what the portal holds, why, and the choices you have.

What we hold

• Your sign-in details: name, work email, job title, role, a hashed password, two-factor settings and recent sign-in activity.
• Directory details your organisation adds: department, manager, location, employment type and contact details.
• The work you do in the portal: leave, timesheets, expense claims and receipts, helpdesk tickets, documents, posts and comments, reviews and goals.
• Where your organisation runs payroll here: pay, tax and statutory details and bank account information for paying you.
• Client records your organisation keeps: client contacts, projects, invoices, payments, signed agreements and acknowledgements.
• Shared credentials your organisation stores, encrypted with a managed key and shown only to people allowed to see them, each view recorded.
• An audit trail of significant actions, and technical logs (request times, errors) used to keep the service running.

Why we use it

To run the portal for your organisation — signing you in, showing you your work, sending the emails and notifications you rely on, and keeping the service secure and working. We don’t sell personal data, show advertising, or use your information to build profiles for anyone else.

Who it’s shared with

People in your organisation, as its roles and permissions allow. Service providers that host and run the portal for us — cloud hosting, storage, database and email delivery — under contracts that keep the data confidential. Authorities, only where the law requires it.

Where it’s kept, and for how long

On cloud infrastructure in the region your organisation’s workspace is set up in. It is kept while your organisation uses the portal and as its retention settings say; documents follow their retention policy, and the audit trail is kept as a record. When an organisation leaves, its workspace data is deleted after an agreed export period.

Your rights

You can ask to see a copy of the information held about you, to correct it, or to have it erased. Your organisation’s administrators can export everything held about a person and erase it on request in the portal itself; ask them first. You can also write to us at privacy@nevynt.tech, and complain to your data protection authority.

Security

Traffic is encrypted in transit; passwords are hashed; sessions can be ended from your security page; secrets are encrypted at rest; and access is limited by role, with sensitive actions recorded in the audit trail.

Cookies

The portal uses only the cookies it needs to sign you in and remember your display preferences — see the cookies page.

Changes and contact

We’ll update this page when the portal changes how it handles data, and change the date above. Questions: privacy@nevynt.tech.