In short: NVDRA Auth keeps what is needed for your login, your organizations and billing, and tells each NVDRA application only who you are and which roles you have there. We do not sell personal data and we do not show advertising.
Who we are
NVDRA Technologies runs NVDRA Auth and is responsible for the personal data described here. What you do inside an NVDRA application (AdvansEdu, HR Management (HRMS), Expense Management, ThinkTest, Careers) is covered by that application’s own Privacy Policy.
Pakistan does not yet have a general personal data protection law in force. We follow the Prevention of Electronic Crimes Act, 2016 and the Electronic Transactions Ordinance, 2002, and we apply widely accepted data protection principles. We will update this policy when a data protection law comes into force.
What we keep
| What | Details |
|---|---|
| Your account | Name, email address (and whether you confirmed it), mobile / WhatsApp number, password (only as a one-way hash), account status, language and the organization you last used. |
| Organizations | Name, type, email, phone, WhatsApp, website, NTN, address, country, state and city, logo, owner, members with their organization role and status, and who invited them. |
| Application access | Which applications and roles each member has in each organization, and when they last signed in to each. |
| Billing | Subscriptions and plans, invoices, payment proofs you upload (for example, bank receipts) and their verification. |
| Sign-in and security | Sign-in sessions with IP address, browser and the applications used in each; password resets; anti-spam checks on sign-up and sign-in; audit logs of important actions. |
How we use it
- To sign you in once to every NVDRA application, and to sign you out everywhere when you sign out or change your password.
- To let owners and admins manage their organization’s members and application access.
- To issue invoices, verify payments and manage subscriptions.
- To send account emails: confirming your email, password resets, invitations, invoices and reminders.
- To keep accounts safe: stopping automated sign-ups, rate-limiting sign-in attempts and keeping audit logs.
- To meet legal obligations, such as keeping billing records and answering lawful requests.
Who receives it
- NVDRA applications you open receive your name, email, mobile number, account status and the organizations and roles you have in that application, plus the organization’s package and billing status. They receive nothing about your other applications.
- Organizations you belong to: their owners and admins see your name, email, mobile number, role and which applications you can use.
- Service providers: our hosting provider; Cloudflare, which protects the website and, where enabled, runs the human check on sign-up and sign-in (it receives your IP address and browser details); and our email delivery provider.
- NVDRA staff, for support, payment verification and security, as described in the Terms of Service, including “sign in as a user” sessions, which are always recorded.
- Authorities, when the law requires it, for example a court order or a lawful request under the Prevention of Electronic Crimes Act, 2016.
How long we keep it
- Your account is kept until you deactivate it and ask us to delete it, or it is inactive for a long time and linked to no organization. Unconfirmed sign-ups are deleted after 7 days.
- Ended sign-in sessions are deleted after 90 days. Security and audit logs are kept for at least one year, as the Prevention of Electronic Crimes Act, 2016 requires service providers to retain traffic data.
- Invoices and payment proofs are kept as long as tax and accounting laws require.
Security
All connections use HTTPS. Passwords are stored only as one-way hashes. Applications connect with signed requests and short-lived tokens. Payment proofs are stored privately and shown only to the organization’s owner and admins and NVDRA billing staff.
Your choices and rights
You can see and change your name, email, mobile number and password in “My account”, sign out of other devices, leave an organization, or deactivate your account. You can also ask us to see, correct, export or delete your data, or object to a use of it, by writing to support@nvdra.com. We will reply within 30 days; some data, such as billing records, may have to be kept by law.
Cookies
NVDRA Auth uses only the cookies needed to keep you signed in and protect forms. See the Cookie Policy.
Changes
We will update this policy when our practices or the law change, and show the date at the top. If a change materially affects how your data is used, we will tell you before it takes effect.
Contact
NVDRA Technologies
Email: support@nvdra.com