Privacy

This page covers two things: what the portal records about how you use it, and what it stores in your employee record.

What we collect

While you use this portal we record how it is used: the pages you open, the links and buttons you click, how far you scroll, and how long things take to load. This is about the portal, not about you. We use it to find the parts that are slow, confusing or broken, and then fix them.

Session replay: Microsoft Clarity

One tool does this work: Microsoft Clarity privacy statement (microsoft.com). It creates a replay of your visit: a reconstruction of what happened on screen that we can play back afterwards.

Replays are linked to your account, so a replay can be traced back to you by name. We do that deliberately: when someone tells us “the approvals page didn’t work for me”, it lets us find that exact session instead of guessing.

What we mask and never record

HR content is hidden from replays. Query subjects and messages, replies in a thread, attachment file names, anything you type into search, and employee names are masked: in a replay they appear as blocked-out shapes, not readable text. So we can see that you raised a query. We cannot see what you wrote in it.

We do not record anything from outside this portal, and we do not capture your Google password. Sign-in happens on Google’s own screens, not ours.

Who can view session replays

Access to the replay dashboards is limited to the small, named group who build and run this portal. It is not open to People Ops generally, and it is not open to your manager. Replays exist to fix the portal. They are not used to monitor individuals, and they are not used in any HR, performance or disciplinary decision.

Why we do this (lawful basis)

We rely on the employment relationship rather than asking you to click “accept”. Under India’s Digital Personal Data Protection Act and comparable laws in the other countries where Noora Health and its partner entities operate, an employer may process employee data for employment purposes without consent. In a workplace, a request for “consent” from your employer is not really a free choice anyway. So rather than show you a cookie banner, we tell you plainly, here, what happens.

Your employee record

This portal also holds your employee record. That is the set of details People Ops need in order to pay you, to meet the law in your country, and to reach someone if there is an emergency. Most of it you gave to People Ops yourself, on paper or by email. It now lives here instead.

What is stored

Here is the whole list. Nothing else about you is kept in this record.

• Your contact details. Your personal email address, your phone number, and your home address.
• Your emergency contact. The name and phone number of the person you asked us to call, and how they know you.
• Government ID numbers. Only the ones the law in your country requires. In India: Aadhaar, PAN and UAN. In the United States: your Social Security number. In Bangladesh: NID and TIN. If you work in Indonesia or Nepal, we do not store a government ID number for you at all.
• Your bank details. The name of your bank, its branch or routing code, and your account number, so your salary reaches the right account.
• Your salary. The amount you are paid.
• Your photo. A picture of you, if People Ops have added one.

Why we keep it

For three reasons, and no others. To pay you. To do what the law requires of an employer, such as tax and provident fund. To reach your emergency contact if something happens to you at work.

We do not use this record to judge your work. It is not used in any promotion, performance or disciplinary decision.

We do not ask you to click “accept” for this, for the same reason we explain above: India’s Digital Personal Data Protection Act lets an employer use employee data for employment purposes without consent, and the other countries we work in have similar rules.

Who can see it

Only People Ops for your own entity can open your record. Someone in Bangladesh People Ops cannot open an India record, and the reverse is also true.

Your manager cannot see any of it. Neither can your colleagues. None of it appears on the org chart, or in any staff list, or in any file this portal lets people download.

How your ID numbers and bank details are protected

Your government ID numbers and your bank account number are encrypted. They are stored as scrambled text, which is useless to anyone who does not hold the key.

Nobody sees those numbers just by opening your record. The screen shows only the last four digits. To see a whole number, a People Ops admin has to ask for that one number on its own, and the portal writes down their name and the time. We keep that list.

Your salary works differently again. The portal can store it and replace it, but it never shows it back to anyone — not even to the People Ops admin who typed it in.

Questions or requests

If you have questions about any of this, including what has been recorded about you, please get in touch and we will walk you through it.

Email People Ops about your data

Last updated 27 August 2026. · Return to the portal