This policy explains how Tessarva handles personal information. It covers people who sign in to Tessarva, the businesses that use it, and visitors to this website.
1. Two kinds of information
- Account information is what we need to give you a sign-in: your email address, your name if you add it, and which workspaces you belong to. We decide how this is handled, and this policy describes it.
- Business information is what a business puts into its workspace, such as its team's details and attendance records. The business decides what goes in and who can see it. We store and process it on the business's behalf, only to run Tessarva for them.
2. What we collect
- Your email address, and your name if you give it.
- Your workspaces and your role in each, such as owner, admin or staff.
- The business information your workspace's members enter.
- A record of important actions inside a workspace, such as a member being added or a record being removed, so that changes can be traced.
- Technical details our servers log when you use Tessarva, such as your IP address and browser, used for security and to fix problems.
Sign-in runs on our own servers. Your password is stored only in a form that cannot be read back, so no one at Tessarva can see it.
3. How we use it
To sign you in, show you the workspaces and tools you have access to, keep the service secure, back up your data, answer your questions, and send you messages about your account. We do not sell personal information, and we do not use it for advertising.
4. Who helps us
A small number of providers process information for us, each only for its own job:
- Cloudflare R2 stores our encrypted backups.
- Resend will send the emails Tessarva itself sends, such as invitations to a workspace, once that is switched on.
- The servers we rent to run Tessarva itself.
Sign-in and account security, such as confirming an account or resetting a password, are handled by our own sign-in service on those servers. No outside company runs sign-in for us.
Some of these providers store data outside Nepal. We choose providers that protect it to a standard at least as careful as our own.
5. Cookies
Tessarva uses two kinds of cookie, and nothing else:
- Sign-in cookies set by our own sign-in service, which keep you signed in as you move between Tessarva's addresses, such as this site and your workspace.
- A theme cookie called
tessarva-theme, which remembers whether you chose the light or dark look.
There are no advertising or tracking cookies.
6. How we keep it separate and safe
Every record belongs to exactly one workspace, and that is enforced by the database itself, not only by our code. Information travels between your browser and Tessarva encrypted, and our backups are encrypted before they are stored. Inside a workspace, each person sees only the tools and records the owner has given them.
7. How long we keep it
- Account and business information is kept for as long as the workspace is in use.
- Records that are deleted, and workspaces that close, are held for 30 days so a mistake can be undone. After that they are permanently deleted, and copies in our backups are removed as those backups expire.
8. What you can ask of us
You can ask to see the personal information we hold about you, to correct it, to receive a copy, or to have it deleted. If the information was entered by a business you work for, such as your attendance records, please ask that business first: it decides what is kept, and we act on its instructions.
9. Children
Tessarva is for businesses and their staff. It is not meant for anyone under 16.
10. Changes
If we change this policy in a way that matters, we will update the date at the top and tell workspace owners before the change takes effect. Our terms of service explain the rest of the agreement between us. This policy is governed by the laws of Nepal.
11. Contact
Questions or requests about your information can go through your Tessarva contact, or by email to legal@tessarva.com (a placeholder address until our legal inbox is confirmed).