Who this policy is for
WorklyOne is used by organisations. Two kinds of people are covered here: the organisation that registers a workspace, and the employees whose records are held inside it.
Where an organisation uploads or records information about its own employees, that organisation decides what is collected and why. Nuvixor processes it on the organisation's behalf. If you are an employee and want to see or correct your record, ask your employer first — they control it.
Information held in a workspace
A workspace can contain the following, depending on what the organisation chooses to use:
- Organisation structure: departments, reporting lines, locations, and the history of changes to them.
- Employee profiles: the fields the organisation chooses to record about each person.
- Roles and permissions: what each person is allowed to see and do.
- Leave requests and their approval history.
- Employment letters generated from templates, including the issuer, the template version used and the recipient.
- Salary slips organised by payroll period.
Separation between organisations
Every organisation is reachable at its own address and sees only its own data. Sign-in, people, requests and documents are all scoped to that workspace. No organisation can read another organisation's records.
Who can see what
Access is granted per feature and per scope — a person's own record, their department, or the whole organisation. Salary slips are visible only to the employee they belong to and to the roles the organisation has authorised.
Nuvixor staff do not browse workspace content. Access is limited to what is necessary to operate the service, investigate a fault, or respond to a request from the organisation.
Registration
Organisations join by request rather than automatic sign-up. When you submit one, we collect the organisation name, the workspace address you would like and the name and email address of the first administrator. A WorklyOne administrator reviews the request before any workspace is created.
Technical information
Our hosting provider records standard server logs including IP address, device type and the time of each request. These are used to run the service, investigate faults and prevent abuse.
WorklyOne does not use analytics, tracking or advertising software. We do not measure how individual people move around the product, and nothing in it reports to a third-party analytics service.
Who we share it with
We use a small number of service providers to run WorklyOne. Each processes data only on our instructions, and none of them may use it for their own purposes:
- Supabase — the database where workspace records are stored, and the authentication that signs people in.
- Vercel — application hosting and server logs.
- Google Workspace — our company email, where registration requests and support are handled.
How long we keep it
Workspace data is kept for as long as the organisation's workspace is active. On a documented request from the organisation to close its workspace, we delete its data within 30 days, except where we are required by law to keep a record.
Security
Data in transit is protected with HTTPS, and records are held in a managed database with access restricted to the application and to the Nuvixor staff who operate it. Access within a workspace is controlled by the roles and permissions the organisation configures.
Who is responsible for your data
WorklyOne is operated by Nuvixor Tech Pvt Ltd, SQ99 Mall, Bahria Town, Lahore 54000, Punjab, Pakistan ("Nuvixor", "we"). We are the data controller for the information described in this policy.
Questions, requests or complaints: info@nuvixor.com. We respond within 30 days.
What we never do
- We do not sell your personal information, and we never have.
- We do not share your data with advertising networks or data brokers.
- We do not use your data to build advertising profiles.
- We do not require more permissions than the feature you are using needs.
Your rights
You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Where the GDPR or similar laws apply, you may also object to or restrict processing and request your data in a portable format.
To exercise any of these, email info@nuvixor.com from the address associated with your account.
If you are an employee whose record is held in a workspace, contact your employer in the first instance. If you cannot reach them, write to info@nuvixor.com and we will pass the request to the organisation that controls the data.
Children
WorklyOne is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has provided us with personal information, contact info@nuvixor.com and we will delete it.
Changes to this policy
If we make a material change, we will update the effective date at the top of this page and, where the change is significant, notify you in the app. Continuing to use the app after a change means you accept the revised policy.
This policy covers the WorklyOne app. For the nuvixor.com website, see our website privacy policy. Contact info@nuvixor.com with any question about it.