Privacy policy

The business owner who signs up decides which employee, customer, and supplier data goes into Nadi. Nadi processes that data on behalf of the business, only to run the features in use.

• Account: email, name, and role in each business. Staff without email use an account made from the business code and staff ID.
• Employee data entered by the business: name, phone number, hat (work role), payroll data, and the last 4 digits of the ID number with its fingerprint.
• Files that are dropped (receipt photos, PDF, Excel) and what was read from them.
• Work events: attendance, leave, schedules, invoices, and decisions, with the time and who did them.
• The face check at clock-in is stored only as passed or not; face photos are neither stored nor uploaded.
• Interview voice recordings sent by applicants and their transcripts, only for the business that posted that job.

Data is used for the features you see in the app. Data is not sold and not used for ads. Files that need AI reading go to the AI model provider through the Nadi server. Long numbers such as bank account numbers are masked first where possible.

Service providers in use: a database and file storage provider (data center in Singapore), a web hosting provider, and an AI model provider. Messages to employees or customers are sent from your own phone through WhatsApp, not by Nadi.

Raw event logs are kept 90 days and audit logs 180 days, after which only summaries remain. Business data (people, payslips, invoices, journals) is kept while the business uses Nadi. The sample businesses at /demo contain made-up data and can be seen by anyone.

You can view and correct your data in the app. To ask for a copy or deletion of data, the business owner contacts Nadi; the official address is being set up. Employees who want their data corrected or deleted contact the business owner first.