Privacy Policy

NIYAM handles account, website, service, support and security data to operate the service. For data that an organisation places in its workspace, that organisation controls its users, purposes and instructions, while NIYAM processes the data to provide the service. Individuals should contact their organisation for workspace-specific questions and may also contact NIYAM for assistance.

• Account and identity data: name, email address, mobile number, country, sign-in method, verification status, workspace membership, role and permissions.
• Construction operations data: site and project records, daily updates, attendance, worker information, materials, photographs, bills, expenses, payment proofs, approvals and reports.
• Client and communication data: invitations, shared links, contact details, report access, comments, support messages and delivery status.
• Subscription data: selected plan, billing cycle, invoice and payment status, provider references and transaction history. Payment providers handle payment credentials in their own interfaces.
• AI workflow data: prompts, uploaded documents and images, extracted fields, suggestions, review decisions and related operational records.
• Device and service data: browser storage, device and network details made available to the service, timestamps, request and security logs, error information and interface preferences.

Data comes from you, your organisation and its authorised users, people who communicate with NIYAM, service interactions, connected providers, and automated operational and security records. Do not submit another person’s personal data unless you are authorised to do so and have provided any required notice.

• create accounts, verify identity and maintain authenticated sessions;
• provide workspace, project, field, finance, approval, reporting and sharing workflows;
• process subscriptions, invoices, payment status and customer support;
• deliver requested email, invitation, notification and shared-link communications;
• provide AI-assisted extraction and suggestions when an authorised user invokes those features;
• secure the service, prevent abuse, investigate incidents, debug failures and maintain audit records;
• comply with lawful obligations, enforce service terms and protect users and the public; and
• analyse service performance and improve features using appropriately controlled operational information.

NIYAM processes personal data as needed to provide requested services and perform agreements, on the basis of clear consent where required, for lawful operational and security purposes, and to comply with legal obligations. Where consent is the applicable ground, it may be withdrawn through the relevant control or by contacting support, subject to processing that remains required or authorised by law.

Data is shared only as needed with authorised workspace users and administrators, recipients selected by users, service providers supporting the service, professional advisers under appropriate duties, and public authorities or other parties where disclosure is legally required or necessary to protect rights and safety.

See Data Sharing and Subprocessors for provider categories and processing context.

After sign-in, the web application uses local browser storage for session information and interface preferences. Session storage is also used during an active billing checkout. NIYAM application code does not currently set first-party cookies. Details and controls are in the Cookie Policy.

Payment providers may collect payment credentials directly. NIYAM records the provider references and transaction status needed to operate subscriptions, billing support and reconciliation.

Personal data is kept only while needed to provide the service, maintain security and auditability, resolve disputes, meet contractual commitments, and comply with applicable law. Retention can differ by record type, workspace instruction, backup cycle and legal obligation. When retention is no longer justified, data is deleted or de-identified using the applicable operational process.

NIYAM uses role and permission controls, authenticated access, operational logging, production configuration checks and other technical and organisational measures designed to protect service data. No system can guarantee absolute security. Report a suspected account or data incident to support promptly.

Depending on applicable law and NIYAM’s role, you may ask for information about processing, access or correction, deletion, withdrawal of consent, restriction of particular uses, grievance redressal, or nomination and other statutory rights. NIYAM may need to verify identity and may direct workspace-controlled requests to the relevant customer organisation.

Contact support@niyam.app. You may also use any complaint route available under applicable law after giving NIYAM a reasonable opportunity to address the concern.

NIYAM is a business construction-operations service and is not designed for children to create accounts independently. Organisations must not permit a child to create or use an account, or submit children’s personal data, unless the required authority, notice, safeguards and verifiable consent process are in place.

Material changes will be communicated through an appropriate service, account or contact channel. The date at the top identifies the latest published version.