Privacy at NighaTech.

Signing in uses your Indian mobile number and a one-time SMS code. Your profile, assigned role, project activity, uploads, and applications are stored to operate the workspace. Anyone can create an account by verifying their phone, apply for open jobs, and submit a project or requirement. Staff and management permissions are assigned separately.

Employees and interns are asked for location permission when checking in or out. We record the coordinates, accuracy reported by your device, and server time for that action. There is no continuous location tracking. Authorized management can review attendance. If permission is declined or location is unavailable, no attendance event is recorded; contact your manager for assistance.

Clients can see their assigned projects and shared tasks. Team members can access assigned projects. Management administers projects, content, attendance, and hiring; the superadmin manages account access. Resumes are private and available to the applicant and authorized hiring staff. Public media and published content can be viewed by anyone.

Project and requirement submissions include the contact details and brief you choose to provide. They are private to you and authorized NighaTech management, who can review the request and respond in your workspace. Submitting a request does not publish it on the public portfolio.

The application is hosted on Vercel and stores workspace records in MongoDB Atlas. Authentication messages are sent through NighaTech’s SMS gateway. Uploaded media is stored in MongoDB or Cloudflare R2 when enabled. Essential session cookies keep you signed in; the site does not add advertising trackers.

SMS challenges expire after five minutes. Superadmin sessions expire after 30 minutes or five minutes of inactivity. Other accounts use an eight-hour session by default. Management and employer accounts have a 15-minute inactivity limit by default; other accounts have a 30-minute inactivity limit by default. The superadmin can configure these other-account limits. Activity does not extend the absolute login duration. Business, attendance, and application records are retained for operational needs until reviewed and removed by NighaTech. You can sign out at any time. Requests are reviewed against business and applicable retention requirements.

Do not share your OTP. Contact NighaTech promptly if you believe someone has accessed your account without permission.