Nephara logoNephara

Privacy Policy

Last updated: September 22, 2025

Welcome to Nephara. This Privacy Policy explains how Nephara ("we," "us," or "our") collects, uses, discloses, and protects information in relation to our workspace platform and services (collectively, the "Service"). This policy applies to the data we process on behalf of our business customers ("Customers") and the data we collect from visitors to our website and administrators of Customer accounts.

1. Information We Collect

We collect information in three main categories:

a) Customer Data

Our Customers and their authorized users ("End Users") submit data to the Service for processing and storage. This "Customer Data" includes all information related to project management, chat, calls, employee documents, payroll information, calendar events, and any other content provided by the Customer or its End Users.

We are a "data processor" for Customer Data. Our Customers are the "data controllers," meaning they determine how this data is used. Our processing of Customer Data is governed by the agreement we have with our Customer, including any Data Processing Addendum (DPA).

b) Account Information

We collect information required to create and manage a Customer account. This includes the name, email address, phone number, and company name of the account administrator, as well as billing and payment information processed by our third-party payment processors.

c) Usage and Technical Information

We automatically collect information when you interact with our Service. This includes IP addresses, device information, browser type, log data, analytics events, and information collected through cookies and similar technologies to help us operate and improve the Service.

2. How We Use Information

  • To Provide and Maintain the Service: We use Customer Data solely to operate, secure, and support the Service as instructed by our Customer. We use Account Information for account creation, billing, and communication.
  • To Improve and Personalize the Service: We analyze Usage Information to understand user needs, troubleshoot issues, and enhance functionality.
  • To Communicate with You: We use Account Information to send service updates, security alerts, and support messages. We may also send marketing communications, which you can opt-out of.
  • For Legal and Security Purposes: We may use information to enforce our terms, prevent fraud, and comply with legal obligations.

3. Data Sharing and Disclosure

We do not sell your data. We may share information under the following circumstances:

  • With Sub-processors: We use third-party vendors and services (e.g., cloud hosting providers, payment processors) to help us operate the Service. These sub-processors are bound by confidentiality and data protection agreements.
  • As Directed by the Customer: We may share Customer Data as directed by the Customer, for example, when they enable a third-party integration.
  • For Legal Compliance: We may disclose information if required by law, subpoena, or other legal process.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.

4. Data Security

We implement industry-standard technical and organizational measures to protect the information we process. This includes encryption of data in transit and at rest, access controls, and regular security assessments. However, no security system is impenetrable, and we cannot guarantee the absolute security of your information.

5. Your Data Rights and Choices

Depending on your location, you may have certain rights regarding your data, such as the right to access, correct, or delete your personal information.

For End Users of the Service, please direct your data rights inquiries to the Customer (e.g., your employer) who is the controller of your data. We will assist our Customers in responding to these requests. For requests related to Account Information, please contact us directly.

6. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We rely on appropriate legal mechanisms, such as Standard Contractual Clauses, to ensure that your data is protected when transferred internationally.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and, where appropriate, through other communication channels.

8. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: [email protected].