Legal

Privacy

What Luwawa holds, why, and what it will not do with it. Written to be read.

Draft, pending legal review. Three details are still being finalised: the sub-processor list, retention periods and the effective date. Each is marked Pending below and will be filled in before this page is published.

Who holds what

Luwawa is employment software sold to employers. Your employer decides what goes into it and who may see it, which makes them the controller of that data. We process it on their instructions.

If you are an employee asking why a record exists, your employer is the right first question, and we will help them answer it. Fickson Limited, Blantyre, Malawi, operates the service.

What we hold

Employment records
Names, contact details, role, pay, leave balances, and documents your employer uploads.
Bank details
Held for payroll, encrypted at rest, and never shown in full again after entry.
Connected tools
Where an employer connects Slack, GitHub or Linear: an account identifier, a display name, an email for matching, and metadata about activity. From Slack, public channels only; private channels and the contents of direct messages are not read, and message text is not kept on a record.
Check-ins
Daily answers are visible to your manager and to people with company-wide view, such as HR. The weekly How you are answer is visible only to you; HR sees an anonymous company trend with no names.
Applications
What a candidate submits goes to the hiring team of the company they applied to. An AI model scores the CV against the job description to help them sort applications. People at the company make every decision.

What we do not do

No selling
Your data is not sold, and not shared with advertisers.
No private messages
Private channels and the contents of direct messages in a connected tool are never read.
No training
Luwawa does not train models on employment records.
No spare permissions
A connected tool is never asked for a permission the product does not use.

Deletion and access

An employer can remove a connection at any time, which deletes the stored tokens and stops further reading. Ending a Luwawa account removes the workspace, subject to any period your employer must keep records for.

Requests to see or correct your own record go to your employer first. Write to us and we will make sure they can act on it.

Sub-processors

The hosting, email and storage providers that run Luwawa, each with what it handles and where. Pending

OpenRouter, the AI model provider that scores a CV against the job description. Pending

Retention

How long each kind of record is kept after an account ends, by type of record. Pending

Contact

Privacy questions go to help@luwawahr.com. Effective date: Pending