Privacy Policy
Last updated: June 16, 2026
Nexora HR ("we", "our", or "us") operates the Nexora mobile application and web platform. This Privacy Policy explains how we collect, use, and protect your information when you use our service.
1. Information We Collect
We collect the following types of information to provide and improve our service:
- Personal identification: Full name, email address, phone number, employee ID
- Employment data: Job title, department, salary, leave balances, attendance records
- Authentication data: Email and password (passwords are hashed and never stored in plain text)
- Device data: Device type, operating system, app version (for crash reporting and compatibility)
- Location data: Only when you use the attendance punch-in/out feature, and only with your explicit permission
2. How We Use Your Information
- To authenticate and manage your account
- To provide HR management features: attendance, leave, payroll, and employee self-service
- To generate payslips and HR reports for your organization
- To send email notifications related to leave approvals, payroll, and announcements
- To improve app performance and fix bugs
3. Data Storage & Security
All data is stored securely on Supabase infrastructure, hosted on AWS. We implement the following security measures:
- Row-Level Security (RLS) — employees can only access their own company's data
- HTTPS encryption for all data in transit
- Passwords hashed with industry-standard one-way hashing (scrypt)
- Regular security audits
4. Data Sharing
We do not sell, trade, or rent your personal information to third parties. We may share data only in these cases:
- Within your organization: HR managers and company admins can access employee records within their company only
- Service providers: Supabase (database), and email delivery services — bound by data processing agreements
- Legal requirements: If required by law or legal process
5. Data Retention
We retain your data for as long as your account is active or as needed to provide services. If you request account deletion, your personal data will be removed within 30 days, except where retention is required by law.
6. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and personal data
- Withdraw consent for location access at any time via your device settings
To exercise any of these rights, contact us at support@nexorahr.net. To request account and associated data deletion, use our dedicated account deletion page: https://nexorahr.net/account-deletion.
7. Children's Privacy
Nexora HR is a business application intended for adults in a workplace environment. We do not knowingly collect data from anyone under the age of 16.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of significant changes via email or an in-app notice. The "Last updated" date at the top of this page will always reflect the most recent revision.
9. Contact Us