Privacy
Employee privacy is part of the product.
Mavaro is built for employee connection, not employee surveillance. We collect only what's needed for circle matching, protect sensitive fields from admin views, and never sell employee data.
What we collect
Mavaro collects the information employees voluntarily provide during onboarding: name, work email, company, office location, department, role level, work mode, tenure, interests, availability, and connection preferences. We do not collect salary, performance data, or any government-issued identification.
How it's used
Employee profile data is used exclusively for circle matching — to propose small groups of colleagues with compatible availability, goals, and work context. Sensitive optional fields such as dietary restrictions, accessibility needs, and personal notes are used only for circle logistics and are never surfaced in company-facing analytics.
Who can see what
Company admins can view aggregate program analytics, attendance rates, and feedback scores. Individual employee feedback responses are anonymized in aggregate views. Admins can see which employees are assigned to which circles, but cannot view individual feedback tied to a specific person's name.
Data storage and security
When Supabase is configured, employee data is stored in a company-scoped workspace with row-level security policies that prevent cross-company data access. In demo mode, data is stored in browser local storage and is never transmitted to a server.
Data retention
Companies can request deletion of their workspace data at any time by contacting Mavaro. Individual employees can request removal of their profile. Mavaro does not sell, share, or license employee data to third parties.
Contact
For privacy inquiries, data deletion requests, or questions about how your information is used, contact the Mavaro team. Formal privacy documentation, a Data Processing Agreement, and GDPR/CCPA compliance documentation are available for production pilots.
Last reviewed June 2025. This is an MVP privacy overview and not a formal legal privacy policy. A complete privacy policy will be provided prior to production deployment.