NEVORA privacy policy

Who we are

NEVORA is a workforce scheduling and operations service provided by VELANI LLC. This policy explains how information is handled when you use NEVORA through its website or mobile applications. Contact us at support@thevelani.com or by mail at VELANI LLC, 1654 Calle Tulipan, Suite 100, San Juan, PR 00927.

Your workplace

Your employer or organization supplies and manages the information used to run its workspace. Authorized people in your workplace can see information according to their roles.

Your employer decides how NEVORA is used for workplace activities, including scheduling, attendance, timekeeping, payroll records and employee administration. VELANI LLC operates NEVORA and processes these workplace records on your employer’s documented instructions. Requests about workplace records your employer controls are coordinated with your employer, and VELANI LLC helps locate, correct, export or delete information where appropriate. VELANI LLC handles requests about information it controls for its own business purposes, such as direct support communications and service administration. Your employer remains responsible for employment decisions, payroll accuracy, required workplace notices and its own recordkeeping obligations.

Contact your workplace administrator about schedules, pay records or corrections. You can also contact us about privacy, or use the account deletion process below.

Information NEVORA uses

Depending on the features your organization turns on and your role, NEVORA handles:

• Account and work profile information, such as your name, sign-in and contact details, employee ID, role, workplace and assigned work locations.
• Scheduling and attendance information, such as shifts, availability, time-off requests, shift exchanges, recorded work and break times, corrections and approval history.
• Payroll-related information and documents where those features are turned on, including the pay records your organization enters.
• Workplace content, such as company updates, shift notes, requests and acknowledgements.
• Service and security information, such as sign-in and session records, access events, support requests and the technical information needed to deliver and protect the service.
• Notification delivery information, such as push subscriptions on devices where you turn notifications on.

Information comes from you, your organization and its authorized users, your use of NEVORA, and the service providers that perform these functions. If a feature needs a device permission, it explains why when it asks.

Why we use information

To give you access to your account, show authorized work information, run scheduling and attendance features, process permitted requests, deliver workplace communications, provide payroll-related features your organization turns on, answer support requests, investigate misuse, protect accounts and meet applicable obligations.

Who receives information

Your organization and its authorized users receive the information their roles need. Service providers process information for us: Vercel hosts the application and runs its servers; Neon stores the database; a transactional email provider delivers recovery codes and other account email; and your browser’s push service, run by its maker (such as Apple, Google or Mozilla), delivers the notifications you turn on. We may disclose information when the law requires it, or when it’s necessary to address fraud, security incidents or threats to anyone’s rights or safety, as the law allows.

Advertising and tracking

NEVORA does not display advertisements, sell personal information, or share personal information for cross-context behavioral advertising. We do not track users across other companies’ applications or websites for advertising purposes. We disclose information to your employer and our service providers as necessary to operate NEVORA and for the purposes described in this policy.

Where information is processed

Our database and application servers are in the United States, in Northern Virginia. Email delivery, push notification services and our providers’ logs and support may process information in other locations.

How long we keep information

We keep information only as long as we need it. Each period follows the age of the record; a deletion request doesn’t restart it. Where a record fits more than one category, the longest period applies.

• Attendance, approved timecards, payroll calculations, published pay statements and their corrections and approvals: three years from the record’s final entry, or longer when the employment-tax rule below or another requirement applies. They preserve wage calculations, payment history and evidence for payroll questions or disputes.
• Records supporting employment taxes: at least four years after the tax is due or paid, whichever is later.
• Security and access logs NEVORA manages: up to 90 days from the logged event, to investigate unauthorized access and keep the service secure.
• Records of privacy requests: 24 months after the request is closed, to show what was asked, how it was handled and any record kept.
• Optional profile information and account data with no continuing lawful purpose: removed within the deletion timetable below.
• Records under a legal hold or unresolved dispute: until the hold is released and the period that otherwise applies has passed.

When a record has to be kept, we limit its use and access to that purpose. Backups: Our database keeps a restore history of six hours. We are verifying the maximum time any backup or exported copy is kept, and will update this policy once it is confirmed.

Your choices and requests

You can manage notifications in NEVORA and in your device settings. Use your profile, or ask your workplace administrator, to correct workplace information. Email support@thevelani.com about access, correction, deletion or other privacy requests. We confirm your identity in a way that fits the request. NEVORA currently serves the participating employer and its authorized workforce in Puerto Rico. Applicable United States federal and Puerto Rico requirements govern the handling of relevant workplace records.

Deleting your account

Open Profile, choose Delete my account, re-enter your password and confirm. If you no longer have the app, sign in to NEVORA on the web and do the same; see Account deletion. Before you confirm, we show what is removed and what may be kept for a specific obligation. We aim to complete eligible deletion requests within 30 calendar days after we receive the request. We confirm it’s you before deleting anything; if some information must be kept, or the law allows more time, we explain why and for how long. Deleting your NEVORA account doesn’t change your employment.

Security

We protect information with measures that fit it, including role-based access and encrypted connections. No way of storing or sending information removes every risk. Email support@thevelani.com if you think someone else has used your account. Never send passwords, verification codes or payroll documents by email.

Changes

NEVORA is meant for authorized workplace use. We post changes to this policy with a new effective date and give additional notice where required. Questions go to support@thevelani.com.