Privacy Policy

1. Interpretation and Definitions

Interpretation

Words with capitalised initial letters have meanings defined under the following conditions. These definitions apply equally whether they appear in singular or plural form.

Definitions

• Website — The marketing site accessible at https://nexuspos.lk and its sub-domains (including demo.nexuspos.lk).
• Service — The Nexus POS cloud-based point-of-sale and business management platform subscribed to by businesses.
• We / Us / Our — Nexus POS, the operator of the Website and Service.
• You — Any person who accesses the Website or uses the Service, including business owners, staff members, and visitors.
• Business Data — Sales records, inventory, purchase orders, customer details, and other operational data entered into the Service by a subscriber business.
• Personal Data — Any information that identifies or can identify a natural person directly or indirectly — for example, a name, email address, or phone number.
• Usage Data — Data collected automatically when you browse the Website, such as IP address, browser type, pages visited, and time spent.
• Cookies / Local Storage — Small files or browser storage entries placed on your device to retain preferences across sessions.
• Third-Party Services — External platforms used to deliver the Website or Service, including WhatsApp (Meta) for customer communication and Hostinger for web hosting.

2. Data We Collect

2.1 Website Visitors

The nexuspos.lk marketing website is a static site. We do not operate a contact form and do not collect Personal Data through the Website itself. The only information stored on your device is:

• Theme preference — whether you have selected dark or light mode, stored in your browser's localStorage. This never leaves your device.

We do not currently run any analytics, advertising trackers, or third-party scripts on the Website. Standard server access logs (IP address, browser type, requested URL) may be retained by our hosting provider, Hostinger, in accordance with their own privacy policy.

2.2 Demo Platform

When you access the live demo at demo.nexuspos.lk, no account registration is required. Any data you enter into the demo environment is used solely for demonstration purposes and is periodically reset. Please do not enter real business or personal data into the demo.

2.3 Contact via WhatsApp or Phone

When you contact us through WhatsApp (+94 763 314 355) or by phone, we receive your phone number and the content of your messages. This information is used exclusively to respond to your enquiry and to set up the Service. It is not shared with third parties for marketing purposes.

2.4 Service Subscribers (Business Accounts)

When a business subscribes to Nexus POS, we collect:

• Business name, contact person name, phone number, and email address — for account setup and billing.
• Business Data entered into the platform (products, sales, inventory, purchase records, customer names and contact numbers, user accounts and roles) — processed solely to deliver the Service.
• Technical usage logs (login timestamps, feature usage, error reports) — used to maintain platform stability and improve the Service.

Business Data belongs to the subscribing business. We act as a data processor for this information and do not use it for any purpose other than providing and improving the Service.

3. How We Use Your Data

• To deliver the Service — Business Data is processed to operate your POS system, inventory, reports, and user access.
• To respond to enquiries — Contact information received via WhatsApp or phone is used exclusively to reply to your message and onboard new customers.
• To provide support — Account and technical data are used to diagnose issues and provide remote assistance (Anydesk, phone, ticket).
• To maintain and improve the platform — Aggregated, anonymised usage patterns help us prioritise features and fix bugs.
• To comply with legal obligations — Data may be retained or disclosed where required by Sri Lankan law or lawful authority.

Your personal data is never sold, rented, or shared with advertisers, data brokers, or marketing platforms.

4. Retention of Your Data

We retain data for as long as necessary to fulfil the purpose for which it was collected:

• WhatsApp / phone enquiry records are retained for as long as the conversation is active and deleted once the matter is resolved, unless a longer period is required by law.
• Business account and Business Data are retained for the duration of the active subscription. Upon cancellation, data is retained for 30 days to allow export and then permanently deleted.
• Technical logs are retained for a maximum of 90 days.
• localStorage data (theme preference) persists in your own browser until you clear your browser data.

5. Transfer of Your Data

The Nexus POS platform is hosted on servers provided by Hostinger, which operates data centres in various locations. Business Data and account information may be stored on servers outside Sri Lanka. Hostinger maintains industry-standard security certifications. By subscribing to the Service, you consent to this transfer.

Communication data transmitted via WhatsApp is subject to Meta's own privacy policy and data-transfer practices.

6. Your Rights and Data Deletion

You have the right to request access to, correction of, or deletion of any Personal Data we hold about you. To exercise these rights:

• Send an email to info@nexuspos.lk with the subject line "Data Request" or "Data Deletion Request", including your business name and registered phone number.
• Clear your browser's localStorage to remove theme data stored locally on your device (Settings → Clear browsing data in your browser).

Requests will be acknowledged within 5 business days and fulfilled within 30 days where technically feasible. For active subscriber accounts, certain data may need to be retained to fulfil contractual obligations until the subscription period ends.

7. Security

The Website is served over HTTPS with TLS encryption. The Nexus POS platform uses dedicated, isolated databases per business — your data is never shared with or accessible by other subscribers. User access is controlled through role-based permissions configured by the business owner.

While industry-standard measures are in place, no method of transmission over the internet is 100% secure. We are committed to protecting your data using commercially reasonable means and will notify affected businesses promptly in the event of a data breach.

8. Children's Privacy

The Website and Service are not directed at children under the age of 13 and we do not knowingly collect personal data from minors. If you believe a child has submitted personal data through this Website, please contact us at info@nexuspos.lk and the data will be deleted promptly.

9. Links to Other Websites

This Website may contain links to external sites (WhatsApp, social media profiles, partner pages, etc.) that are not operated by us. Clicking a third-party link will take you to that site. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites. We encourage you to review the privacy policy of every site you visit.

10. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time. Changes become effective when the updated policy is posted on this page with a revised "Last updated" date. Your continued use of the Website or Service after any change constitutes your acceptance of the revised policy.

For questions about this policy, contact us at info@nexuspos.lk or via WhatsApp at +94 763 314 355.