Effective Date: February 26, 2026
At Mahami, we take the privacy and security of your data seriously. This Privacy Policy explains how Novel Cloud Systems Ltd. ("we," "us," or "our") collects, uses, and protects information when you use the Mahami platform, mobile applications, and related services.
Mahami is a B2B (Business-to-Business) service. In the context of data protection:
The Client (Employer): Is the Data Controller. They determine what employee data is collected and how it is used.
Novel Cloud Systems Ltd: Is the Data Processor. We process data only as instructed by the Client to provide the services.
We collect information provided directly by the Client and through the User’s interaction with the Platform.
Account Information: Name, email address, job title, and department.
Employee Records: Personnel IDs and contact details.
Authentication Data: Passwords and login credentials.
Location Data (GPS): If enabled by the Client, we collect precise location data to verify attendance via geofencing when a user "clocks in" or "clocks out."
Biometric Data: If the Client uses biometric authentication (e.g., face recognition or fingerprint), this data is processed locally on the device or via encrypted templates. Note: We do not store raw biometric images; only mathematical templates.
Timestamp Data: Exact times of attendance entries.
Information contained within tasks, files uploaded, comments, and workflow approval histories.
We use the collected data for the following purposes:
To provide, maintain, and improve the Mahami platform.
To generate attendance and productivity reports for the Client.
To verify the physical presence of employees at designated worksites (Geofencing).
To provide technical support and respond to inquiries.
To ensure the security and integrity of our systems.
We do not sell your personal data. We only share information in the following circumstances:
With the Client: All data generated by a User is accessible to their employer (the Client).
Service Providers: We use third-party hosting (e.g., AWS or Google Cloud) and security providers who are contractually obligated to protect your data.
Legal Requirements: If required by law, we may disclose information to comply with legal obligations or protect our rights.
Novel Cloud Systems Ltd. employs industry-standard technical and organizational measures to safeguard data:
Encryption: Data is encrypted both in transit (TLS) and at rest.
Access Control: Access to sensitive data is restricted to authorized personnel only.
Backups: Regular backups are performed to prevent data loss.
Depending on your jurisdiction (such as GDPR or the Saudi Personal Data Protection Law - PDPL), users may have the right to:
Access the personal data held about them.
Request the correction of inaccurate data.
Request the deletion of their data (subject to the Client’s retention policies and labor laws).
Object to or restrict certain processing activities.
Since Mahami is a workplace tool, users should first contact their employer’s HR department regarding data rights.
We retain data for as long as the Client maintains an active subscription. Once a contract is terminated, we will delete or anonymize data after a 30-day grace period, unless otherwise required by law or requested by the Client.
Your data may be stored and processed in servers located outside your home country. We ensure that such transfers comply with applicable data protection laws through Standard Contractual Clauses or similar legal frameworks.
We may update this Privacy Policy from time to time. We will notify Clients of any material changes by posting the new policy on this page and updating the "Effective Date."
For questions regarding this Privacy Policy, please contact us at:
Email: info@ncsys.co.uk | info@ncsys.sa
Address:
Novel Cloud Systems Ltd - UK: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
Novel Cloud Systems Company - Saudi Arabia: Immam Abdullah Ibn Saud Street | Al-Hamra district