Privacy Policy

Account Information: When you register for NEXUS, we collect your name, email address, phone number, business name, and business type. For subscription plans, we also collect billing information such as your payment method details.

Business Data: As a multi-tenant platform, NEXUS stores the business data you enter, including product catalogs, inventory records, customer profiles, sales transactions, employee information, and supplier details. This data belongs to you and is isolated from other tenants on the platform.

End-Customer Data: If you use our online store or CRM features, we may process information about your customers on your behalf, including their names, contact details, order history, and delivery addresses.

Usage Data: We automatically collect information about how you interact with the Service, including IP addresses, browser type, device information, pages visited, features used, and timestamps.

Communications: When you contact us for support or provide feedback, we retain the contents of those communications along with your contact details.

We use the information we collect for the following purposes:

• Service Delivery: To provide, operate, and maintain the NEXUS platform, including processing transactions, managing your inventory, and powering your online store.
• Account Management: To create and manage your account, process payments, and communicate with you about your subscription.
• Service Improvement: To analyze usage patterns and improve the performance, reliability, and features of our platform.
• Support: To respond to your inquiries, troubleshoot issues, and provide technical assistance.
• Communications: To send you important updates about the Service, security alerts, and, with your consent, marketing communications about new features or promotions.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes in the installation and contracting jurisdiction.

We implement industry-standard technical and organizational measures to protect your data, including:

• Encryption of data in transit (TLS 1.3) and at rest (AES-256)
• Strict tenant isolation ensuring your business data is never accessible to other users
• Regular automated backups with point-in-time recovery capability
• Role-based access controls and audit logging within the platform
• Regular security assessments and penetration testing

Your data is stored in the installation region selected for your account. The exact subprocessors, hosting location, and applicable safeguards are disclosed for the installation before production use.

We may share your information with trusted third-party service providers who assist us in operating the platform:

• Payment Processors: To process authorized subscription or transaction payments through providers configured for your country.
• Communication Providers: To send transactional emails, SMS notifications, and WhatsApp messages on your behalf.
• Cloud Infrastructure: To host and deliver the Service reliably and securely.
• Analytics: To help us understand usage patterns and improve the Service (data is aggregated and anonymized).

We do not sell your personal information or business data to third parties. Third-party providers are contractually bound to use your data only for the purposes we specify.

We use cookies and similar technologies to:

• Essential Cookies: Maintain your session, remember your preferences, and ensure the platform functions correctly.
• Analytics Cookies: Understand how you use the Service so we can improve it. These cookies collect aggregated, anonymous data.

We do not use advertising or tracking cookies. You can manage cookie preferences through your browser settings, though disabling essential cookies may affect the functionality of the Service.

You have the following rights regarding your personal data:

• Access: You can request a copy of the personal data we hold about you.
• Correction: You can update or correct inaccurate personal data through your account settings or by contacting us.
• Deletion: You can request deletion of your personal data, subject to our legal obligations to retain certain records.
• Data Export: You can export your business data at any time through the platform's built-in export tools.
• Opt-Out: You can opt out of marketing communications at any time by clicking "unsubscribe" in any email or contacting us directly.

To exercise any of these rights, contact us at hello@nexuspos.com.

We retain your personal data and business data for as long as your account is active or as needed to provide the Service. Specifically:

• Active Accounts: Data is retained for the duration of your subscription.
• Cancelled Accounts: Business data is retained for 90 days after cancellation to allow for reactivation. After 90 days, data is permanently deleted.
• Legal Requirements: Certain records may be retained for the period required by the law applicable to your contracting entity and the applicable tax or fiscal profile.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will notify you by email or through a prominent notice on the Service at least 30 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: