1. Introduction

Neverno Allied Services Pvt. Ltd. (“Neverno”, “Company”, “we”, “our”, or “us”) respects your privacy and is committed to protecting personal data. This Privacy Policy explains how we collect, use, store, share, and safeguard information when you use our website, mobile applications, software platforms, and digital services, including nFlux HRMS, NeverQ, DigiServe, CMMS, audit, finance, and other enterprise solutions.

This policy applies to employees, customers, client representatives, vendors, partners, website visitors, and authorized users of our digital platforms.

2. Information We Collect

We may collect the following information depending on the service used:

A. Identity and Contact Information

Name, employee ID, customer ID, email address, phone number, address, company name, job title, department, designation, and business contact details.

B. nFlux HRMS Data

For HRMS users, we may process employee profile data, attendance records, shift details, leave records, salary slips, payroll information, statutory details such as PF/UAN/ESIC where applicable, bank details, asset assignments, HR documents, identity documents such as Aadhaar/PAN where uploaded by authorized users, grievance or workflow data, and approval history.

C. Attendance, Camera, Face, and Location Data

nFlux HRMS may use camera access for face attendance, document uploads, and QR scanning. Location data may be collected during check-in/check-out to verify attendance geofencing. Face attendance data is used only for identity verification and attendance security.

D. NeverQ Data

For NeverQ, we may process customer profile details, phone number, email address, food order history, cart details, company/canteen/cafe mapping, wallet balance, offline wallet top-up records, order payment status, transaction/reference details where applicable, pickup or delivery status, loyalty/reward information, and support requests.

NeverQ may support online payment for food orders through authorized payment gateway partners. We do not store full card details, UPI PIN, net banking credentials, or payment authentication details. Offline wallet top-ups are recorded only for wallet balance, reconciliation, and settlement purposes.

E. Technical and Device Data

IP address, browser type, device information, operating system, app version, session data, cookies, login activity, notification tokens, device identifiers used for security, crash logs, and usage analytics.

F. Business and Operational Data

Contractual information, service-level records, site and operational data, compliance documents, invoices, billing references, support communications, and other records required to provide services.

3. How We Use Information

We use personal data to:

• Provide and operate our software platforms and services
• Authenticate users and protect accounts
• Manage HR, payroll, attendance, leave, assets, documents, and approvals in nFlux HRMS
• Process food orders, wallet balance, offline wallet top-up records, online food order payment status, order tracking, reconciliation, and support in NeverQ
• Send service notifications, alerts, approval updates, attendance reminders, and operational messages
• Maintain security, audit logs, fraud prevention, and device/session protection
• Provide customer support and respond to inquiries
• Meet contractual, legal, tax, labour, statutory, and regulatory obligations
• Improve platform performance, reliability, and user experience

We do not sell personal data.

4. Permissions Used by Our Apps

Our mobile apps may request permissions only when required for service functionality:

• Camera: face attendance, document upload, QR scanning, asset scanning
• Location: attendance geofence verification and site-based attendance controls
• Notifications: HR alerts, approval updates, attendance reminders, food order updates, and service messages
• Bluetooth: authorized printer use, such as thermal receipt or label printing
• Files / Photos: upload of documents, images, or other records requested through the platform

5. Sharing of Information

We may share information only where necessary with:

• Authorized client administrators, HR teams, managers, or approvers based on role permissions
• Technology service providers such as hosting, cloud, database, analytics, email, SMS, WhatsApp, Firebase/Google notification services, and payment gateway providers
• Legal, regulatory, tax, statutory, or government authorities where required by law
• Professional advisors, auditors, or compliance partners under confidentiality obligations

We require service providers to handle data securely and only for authorized purposes.

6. Data Security

We use reasonable technical and organizational safeguards, including encrypted transmission, secure servers, role-based access controls, authentication controls, audit logs, backups, access restrictions, and incident response practices. However, no digital system can be guaranteed to be completely secure.

7. Data Retention

We retain personal data only as long as necessary for service delivery, employment/HR records, contracts, legal obligations, audit, tax, statutory compliance, dispute resolution, and legitimate business purposes. When data is no longer required, it is deleted, anonymized, or archived according to applicable policy and law.

8. Your Rights and Choices

Subject to applicable law and organizational policy, you may request access, correction, update, deletion, withdrawal of consent, or grievance redressal regarding your personal data.

For enterprise or employee accounts, requests may need to be routed through the relevant employer/client administrator because Neverno processes some data on behalf of client organizations.

9. Cookies and Similar Technologies

Our website and platforms may use cookies and similar technologies for login sessions, security, preferences, analytics, and service improvement. You may manage cookies through your browser settings, but disabling essential cookies may affect platform functionality.

10. Children's Privacy

Our services are intended for businesses, employees, clients, and authorized users. Our apps are not directed to children, and we do not knowingly collect children's data except where a client organization lawfully uses a service in an institutional context and provides the required authority.

11. International Processing

Where service providers or infrastructure are located outside India, we take reasonable steps to ensure appropriate safeguards for data protection, confidentiality, and lawful processing.

12. Updates to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Last Updated” date.

13. Account and Data Deletion Requests

Users may request deletion of their account or personal data by contacting us at info@neverno.in with their registered name, phone/email, employee ID or customer ID, and the app name used.

For enterprise or employee accounts, deletion requests may need to be verified through the relevant employer/client administrator because some HR, payroll, attendance, tax, statutory, audit, legal, and contractual records must be retained as required by applicable law or company policy.

Where deletion is legally and operationally permitted, we will delete or anonymize the applicable personal data within a reasonable period. Data that must be retained for legal, statutory, audit, payroll, tax, security, fraud prevention, dispute resolution, or compliance purposes may be retained for the required retention period.

14. Contact Us

For privacy questions, data requests, or grievances, contact:

• Neverno Allied Services Pvt. Ltd.
• Email: info@neverno.in
• Phone: +91 9830007636
• Website: https://neverno.in
• Registered/Corporate Office: Kolkata, West Bengal, India
• Jurisdiction: Kolkata, West Bengal, India