Privacy policy

Last updated 21 October 2026

1. 1. Who we are

   Nyra is provided by Lumona Pte. Ltd., a company incorporated in Singapore (“we”, “us”). We are responsible for the personal data described in this policy, and we handle it in line with Singapore’s Personal Data Protection Act 2012 (the PDPA).

   This policy covers this website, demo and contact requests, partner applications and our conversations with prospective customers and partners. Data that customers keep inside their own Nyra workspace is covered in section 10.

2. 2. What we collect

   We collect only what we need to answer you and to run this site:

   • What you give us in a form, by email or on a call: your name, work email, phone number, company, role and anything you tell us about your business.
   • Technical data our servers record when you visit, such as your IP address, browser type, the pages you request and when. We use it to keep the site working and secure.
   • How you use the site, measured with Google Analytics: the pages you view, how you arrived, your device, browser and approximate location, and which forms you send.
   • The small number of cookies listed in section 7.

   Please do not send us sensitive personal data, such as identity numbers, health information or other people’s payroll details, through the website forms.

3. 3. How we use it

   • To reply to your request, arrange a demo and prepare a quote.
   • To follow up about Nyra after you have contacted us. You can ask us to stop at any time.
   • To assess partner applications and manage partner relationships.
   • To keep this site secure, fix problems and understand what is broken.
   • To see which pages people find useful and which lead to a demo, so we can improve the site.
   • To meet our legal, accounting and regulatory obligations.

   We do not sell personal data, and we do not use it to make automated decisions about you.

4. 4. Consent, and withdrawing it

   By sending us a form or contacting us, you consent to us using your details for the purposes above. You can withdraw that consent at any time by contacting us. We will stop within a reasonable time and tell you if withdrawing affects anything we are doing for you, such as a demo that is already booked.

5. 5. Who we share it with

   • Service providers who host this website and our business systems, and who may only use the data to provide that service to us.
   • Google, which runs Google Analytics for us and receives the usage data described above.
   • Professional advisers, such as our auditors and lawyers, when they need it to advise us.
   • Authorities or other parties when the law requires it, or to protect our rights or someone’s safety.

6. 6. Transfers outside Singapore

   Our service providers may store or process personal data outside Singapore. When that happens we take steps to make sure the data is protected to a standard comparable to the PDPA, as the PDPA requires.

7. 7. Cookies

   This site sets the cookies it needs to work, and Google Analytics cookies that measure how the site is used. We do not use advertising cookies.

   You can block or delete cookies in your browser settings, or turn off Google Analytics with Google’s opt-out browser add-on.

   Cookie	What it does	How long it lasts
   nyra_locale	Remembers the language you chose.	1 year
   XSRF-TOKEN	Protects forms against cross-site request forgery.	Your visit, up to 120 minutes
   nyra-session	Keeps your visit working from page to page.	Your visit, up to 120 minutes
   _ga	Google Analytics: tells visits from the same browser apart.	2 years
   _ga_7SF3K17T6L	Google Analytics: keeps track of the current visit.	2 years

8. 8. How long we keep it

   We keep personal data only as long as we need it for the purposes above, or as long as the law requires, for example for tax and accounting records. After that we delete it or remove anything that identifies you.

9. 9. How we protect it

   We use reasonable security arrangements to protect personal data, including encrypted connections (HTTPS) and access limited to the people who need it for their work. No system is perfectly secure, but we act promptly on any incident and notify you and the authorities when the PDPA requires it.

10. 10. Data inside Nyra workspaces

    When a company uses Nyra, the data it keeps in its workspace, such as its employees, customers and payroll, belongs to that company. Each customer runs on its own instance and its own database. We process that data only to provide the service, under the customer’s instructions and our agreement with them.

    If your details are in a company’s Nyra workspace, for example as an employee, please contact that company first. We will help them answer your request.

11. 11. Your rights

    You can ask us what personal data we hold about you, how we have used or disclosed it in the past year, and to correct anything that is wrong. We will reply as soon as we reasonably can, normally within 30 days, and tell you if we need longer.

    If you are not satisfied with our answer, you can complain to Singapore’s Personal Data Protection Commission.

12. 12. Data protection officer

    Our data protection officer handles questions, requests and complaints about personal data. Use the contact details below and mention privacy in your message.

13. 13. Changes to this policy

    We may update this policy as Nyra and the law change. The date at the top shows when it last changed, and we will tell customers directly about any change that affects them.