Privacy policy
Last updated: August 2026
Last updated: August 13, 2026
This Privacy Policy explains how Nawfe ("Nawfe," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit our website, use the Nawfe platform, communicate with us, or otherwise interact with our services.
Nawfe provides a workflow execution platform for repeatable business processes. Our services help customers design, launch, coordinate, track, and improve workflows using forms, tasks, approvals, records, notifications, integrations, and related workflow tools.
This Privacy Policy applies to personal information we collect as a business or controller. When we process personal information on behalf of a customer through the Nawfe platform, we generally act as a service provider or processor, and our processing is governed by our agreement with that customer.
Please read this Privacy Policy carefully. If you do not agree with it, do not use our services.
Personal Information We Collect
We may collect the following categories of personal information.
Account information: name, email address, phone number, company name, job title, username, password, role, permissions, and account settings.
Business contact information: information you provide when requesting a demo, contacting sales, signing up for updates, submitting a support request, or communicating with us.
Customer workflow data: forms, records, tasks, approvals, comments, attachments, messages, workflow configurations, variables, logs, external participant submissions, and other information submitted to or generated through the Nawfe platform.
Billing information: billing contact details, subscription information, payment status, invoices, and transaction records. Payment card information may be processed by our payment processors and may not be stored directly by Nawfe.
Usage information: pages viewed, features used, workflows started, tasks completed, clicks, search queries, timestamps, access logs, device information, browser type, operating system, IP address, approximate location, and diagnostic data.
Integration information: information exchanged with third-party services that you connect to Nawfe, such as email systems, databases, identity providers, storage tools, productivity apps, or other business systems.
Communications information: emails, messages, support tickets, call notes, survey responses, feedback, and other communications with us.
Marketing information: preferences, event registrations, campaign interactions, referral source, website activity, and information about your interest in Nawfe.
How We Collect Personal Information
We collect personal information directly from you when you create an account, fill out a form, request a demo, contact us, use the platform, submit workflow data, or communicate with us.
We collect personal information from customers and authorized users when they configure workflows, invite users, assign tasks, create records, upload files, or invite external participants.
We collect personal information automatically through cookies, pixels, log files, analytics tools, and similar technologies.
We may collect personal information from third parties, including business partners, service providers, integration partners, public sources, and connected third-party services authorized by you or your organization.
How We Use Personal Information
We may use personal information to:
provide, operate, maintain, secure, and improve our services;
create and manage accounts;
authenticate users and control access;
run workflows, forms, tasks, approvals, records, notifications, integrations, and related platform functions;
process transactions and manage subscriptions;
provide customer support and respond to inquiries;
communicate with you about services, updates, security, billing, and administrative matters;
send marketing communications where permitted by law;
personalize website and product experiences;
analyze usage, performance, trends, and customer needs;
debug errors and improve reliability;
prevent fraud, abuse, unauthorized access, and security incidents;
comply with legal obligations;
enforce our terms and agreements;
protect the rights, safety, and property of Nawfe, our customers, users, and others; and
carry out any other purpose disclosed when the information is collected.
Customer Workflow Data
Customers control the personal information they submit to the Nawfe platform through workflows, forms, records, tasks, approvals, attachments, and integrations.
When Nawfe processes customer workflow data on behalf of a customer, we use that information to provide the services, follow the customer's instructions, maintain security, troubleshoot issues, support the customer, and comply with applicable law.
If your personal information was submitted to Nawfe by one of our customers, please contact that customer directly to exercise privacy rights related to that information. We may refer your request to the relevant customer.
Cookies and Similar Technologies
We may use cookies, pixels, local storage, and similar technologies to operate our website and services, remember preferences, authenticate users, understand usage, improve performance, and support marketing.
You can control cookies through your browser settings. If you disable cookies, some features may not work properly.
Where required by law, we will provide additional choices or consent tools for cookies and similar technologies.
How We Disclose Personal Information
We may disclose personal information to:
Service providers: vendors that help us host, operate, secure, support, analyze, market, bill, and improve our services.
Customers and authorized users: if you use Nawfe through an organization, that organization and its administrators may access information associated with your account and platform activity.
External participants: information may be shared with people invited into workflows, depending on customer settings and workflow configuration.
Integration partners: third-party services connected to Nawfe by a customer or authorized user.
Professional advisors: lawyers, accountants, auditors, insurers, and other advisors.
Legal and safety recipients: courts, regulators, law enforcement, government authorities, or other parties when we believe disclosure is required or appropriate to comply with law, protect rights, prevent harm, or enforce agreements.
Business transfer recipients: parties involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction.
We do not sell personal information for money. We also do not knowingly sell or share personal information of individuals under 16 years old.
Data Retention
We retain personal information for as long as reasonably necessary to provide the services, operate our business, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and fulfill the purposes described in this Privacy Policy.
Customer workflow data is retained according to the applicable customer agreement, platform settings, legal requirements, and backup practices.
When personal information is no longer needed, we may delete, de-identify, or aggregate it.
Data Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.
However, no online service is completely secure. Customers and users are responsible for protecting their credentials, managing permissions, configuring workflows carefully, and using appropriate security controls.
International Data Transfers
Nawfe may process and store personal information in the United States and other countries where we, our service providers, or our partners operate.
If personal information is transferred internationally, we will use appropriate safeguards where required by law.
Your Privacy Choices
Depending on where you live and how you interact with Nawfe, you may have rights to:
access personal information;
correct inaccurate personal information;
delete personal information;
object to or restrict certain processing;
request a copy of personal information;
opt out of certain marketing communications;
opt out of certain sales, sharing, or targeted advertising where applicable;
limit certain uses of sensitive personal information where applicable; and
appeal a decision regarding a privacy request where applicable.
To make a privacy request, contact us at [privacy@nawfe.com].
We may need to verify your identity before fulfilling your request. If your request relates to information controlled by a Nawfe customer, we may direct you to that customer.
Marketing Communications
You may opt out of marketing emails by using the unsubscribe link in the email or contacting us at privacy@nawfe.com.
Even if you opt out of marketing communications, we may still send service-related, security, billing, legal, or administrative messages.
California Privacy Notice
This section applies to California residents to the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to Nawfe.
In the past 12 months, we may have collected the following categories of personal information:
Identifiers, such as name, email address, IP address, account ID, and business contact details.
Customer records information, such as billing details, company information, and account information.
Commercial information, such as subscription, transaction, and product-interest information.
Internet or network activity, such as website activity, platform usage, device information, browser information, and access logs.
Geolocation information, such as approximate location inferred from IP address.
Professional or employment-related information, such as company name, job title, department, role, and workflow assignment information.
Inferences, such as product preferences, usage trends, and likely interests.
Sensitive personal information may be processed only if submitted by a customer or user, but Nawfe does not require customers to submit sensitive personal information unless expressly agreed in writing.
We collect, use, and disclose these categories for the purposes described in this Privacy Policy.
We may disclose these categories to service providers, customers, authorized users, external workflow participants, integration partners, professional advisors, legal authorities, and business transfer recipients.
California residents may have the right to know, access, correct, delete, opt out of sale or sharing, limit certain uses of sensitive personal information, and not be discriminated against for exercising privacy rights.
Nawfe does not sell personal information for money. If our use of analytics or advertising cookies is considered "sharing" under California law, we will provide a way to opt out where required.
European and UK Privacy Notice
This section applies to individuals in the European Economic Area, the United Kingdom, and Switzerland where applicable data protection laws apply.
Nawfe may process personal information as a controller for account management, website operations, marketing, sales, billing, security, support, analytics, and business administration.
Nawfe may process personal information as a processor when handling customer workflow data on behalf of a customer.
Our legal bases may include:
performance of a contract;
legitimate interests, such as operating, securing, improving, and marketing our services;
consent, where required;
compliance with legal obligations; and
protection of rights, safety, and security.
You may have rights to access, correct, delete, restrict, object to processing, request portability, withdraw consent, and lodge a complaint with a supervisory authority.
To exercise rights related to information controlled by a Nawfe customer, contact that customer directly.
Children's Privacy
The services are not intended for children under 13, and we do not knowingly collect personal information from children under 13.
If you believe a child has provided personal information to Nawfe, contact us at privacy@nawfe.com, and we will take appropriate steps to delete the information.
Third-Party Links and Services
Our website and services may link to third-party websites, apps, integrations, or services. This Privacy Policy does not apply to third-party services.
We are not responsible for the privacy practices, security, or content of third-party services.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through our website, by email, in the platform, or by other reasonable means.
The updated Privacy Policy will be effective when posted unless otherwise stated.
Contact Us
[Nawfe legal entity name]
[Address]