Draft. This document has not yet been reviewed by a lawyer and may change. If something here is unclear or you disagree with it, write to nevixstechnology@gmail.com before you sign up.
Privacy Policy
This policy explains what personal data Nevixs Technology ("we") collects when you use NEVIXS, why, who we share it with, and what choices you have. It is written to follow India's Digital Personal Data Protection Act, 2023 and related rules as they apply to us.
1. Who is responsible for what
For your own account and sign-in details, we decide why and how the data is used. For the business records you enter (your customers, suppliers, employees and so on), you, the business, decide what is entered and why, and we process that data for you to run the Service. If you are an employee or customer of a business that uses NEVIXS and you have questions about your records, please ask that business first.
2. What we collect
- Account details: your name, email address, a securely hashed password, and if you turn it on, authenticator-app (MFA) details.
- Business details: business name, mobile number, state, GSTIN and other settings you enter.
- Business records you enter: customers, suppliers, products and stock, quotations, invoices, purchases, payments, expenses, jobs, and employee and payroll records. Employee identity details are stored encrypted.
- Security and usage records: sign-in and security events with your IP address and browser details, active sessions, and an audit trail of who changed which record.
- Payments: if you pay us, our payment provider handles your payment details. We keep the plan, amount and status, not your card number.
3. Why we use it
- To create your account, sign you in and run the Service you asked for.
- To keep the Service secure, prevent misuse, and investigate problems.
- To send emails you need, such as email verification, password reset and team invitations.
- To meet legal duties, and to take payment if you have a paid plan.
We do not sell personal data, and we do not use it for advertising.
4. Cookies
We use only the cookie needed to keep you signed in. It is a secure, HTTP-only session cookie. We do not use advertising or third-party tracking cookies.
5. Who else handles your data
- Hosting: Amazon Web Services, in its Mumbai (India) region.
- Email delivery: Resend, which delivers our account emails.
- Payments: Razorpay, if you pay for a plan.
These providers act on our instructions. We may also share data when the law requires it, or to protect our rights and users' safety. Within a business, the owner and the people the owner gives access to can see that business's records according to their role.
6. Security
Each business's data is kept separate from every other business's at the database level. Connections are encrypted, passwords are hashed, sensitive employee identity details are encrypted, and sign-in is protected with rate limits and optional MFA. No system is perfectly secure; if there is a breach that affects your personal data we will tell you and the authorities as the law requires.
7. How long we keep data
We keep data while your account is active. Business records may need to be kept for tax and accounting law even after you stop using the Service. When you ask us to close your account we will delete or anonymise your personal data unless the law requires us to keep it, and backups are overwritten on their normal cycle.
8. Your rights
You can ask to access the personal data we hold about you, to correct it, to have it erased, to withdraw consent where we rely on it, and to name someone to act for you if you die or cannot act. You can complain to us first and, if you are not satisfied, to the Data Protection Board of India. To use any of these rights, or to ask for an export of your business data, write to nevixstechnology@gmail.com. We aim to reply within 30 days.
9. Grievance contact
For complaints about how we handle personal data, write to nevixstechnology@gmail.com with the subject "Privacy grievance".
10. Children
The Service is for businesses and is not meant for anyone under 18. We do not knowingly collect children's personal data.
11. Changes
We may update this policy. If a change is significant we will tell you in the Service or by email. See also our Terms of Service.
Contact
Nevixs Technology. Email: nevixstechnology@gmail.com.