Privacy Policy
Last updated: 2 November 2026
This policy explains how Novature HRMS (the Android app, the web app and the website, operated by Novature, India – “we”, “us”) handles personal data. Novature HRMS is a business HR system. Your employer (the “Company”) subscribes to Novature HRMS and decides what employee data is entered. For employee data, the Company is the data controller and Novature processes the data on the Company’s behalf.
1. Who can use the app
The app is for employees, managers and HR administrators of companies that have a Novature HRMS account. Accounts are created by the Company administrator or through company registration on our website. The app is not directed at children.
2. Data we process
| Category | Examples | Purpose |
|---|---|---|
| Account & login | Email address, password (handled by our authentication provider; we do not see plain-text passwords), role and company membership | Sign-in, access control |
| Employee profile & contacts | Name, employee code, official and personal email, mobile, department, designation, manager, joining date, date of birth, gender, marital status, blood group, address, emergency contact | HR records and self-service, as entered by the Company or employee |
| Statutory & bank details | PAN, last 4 digits of Aadhaar, UAN, ESI number, bank name, account number and IFSC | Payroll and statutory compliance (only if the Company enters them) |
| Attendance & location | Punch-in/out time, punch method, and precise GPS location at the moment you punch (when the Company uses geo-fenced attendance), QR gate scan data, device label | Recording attendance and verifying you are at an approved work location. Location is collected only when you tap a punch button while using the app; it is not collected in the background. |
| Camera | Camera access to scan the company’s security-gate QR code | QR attendance. Images are not stored or uploaded. |
| Leave, requests & approvals | Leave applications, comp-off, regularisation, expense claims and receipts, approval history | Leave and workflow management |
| Salary & payroll | Salary structure, earnings, deductions, PF/ESI/PT/TDS amounts, payslips | Payroll processing and payslips |
| Documents & files | Company logo, CSV uploads, employee documents and receipts uploaded by users | HR records |
| Company & billing (website only) | Company name, admin contact, employee count, invoices and payment status | Subscription management. Payments are made on our website via Razorpay or bank transfer; we do not store card details. |
We do not use advertising SDKs, do not sell personal data and do not use data for advertising.
3. Who can see the data
Data is separated per company. Users of one company cannot see another company’s data. Within a company, access depends on role (employee, manager, HR/Company admin). Novature platform administrators can access company-level account and billing information to operate the service, and may access other data only to provide support or when legally required.
4. Service providers
We use Supabase (database, authentication and file storage) to host the service, GitHub Pages to host the website and web app, and Razorpay for website payments. These providers process data only to provide their services to us.
5. Security
Data is transmitted over HTTPS. Access is restricted by sign-in and per-company, role-based database access rules. No system is completely secure, and we cannot guarantee absolute security.
6. Retention
Data is kept while the Company’s account is active and as long as the Company needs it for HR, payroll and legal record-keeping. When a Company account is closed, data is deleted on request (see Data Deletion), except where we must keep it by law.
7. Your choices and rights
You can view and request corrections to your profile in the app. You can deny location or camera permission in Android settings; geo-fenced or QR attendance may then not work. To access, correct or delete your data, contact your Company administrator or write to info@novature.in. Requests are handled in line with applicable Indian law, including the Digital Personal Data Protection Act, 2023.
8. Changes
We will post updates on this page with a new “Last updated” date.
9. Contact
Novature, India • info@novature.in • https://novature.in