Privacy Policy

For your account and billing details, we are the controller. For your business’s own data (your customers, suppliers, sales and so on), you are the controller and we are the processor, handling it only on your behalf to run Nexsora.

• Account details: your name, email address, phone/WhatsApp number, business name and role, and your password (stored only in a secure, hashed form).
• Business data you enter: products, prices, stock, sales, purchases, expenses, customer and supplier details, staff details and uploaded files such as logos and documents.
• Billing records: plan, amounts, payment dates, method and reference numbers. Card payments are handled by the payment gateway; we do not receive or store your full card number or CVV.
• Technical data: sign-in times, device and browser information, IP address and error logs, used for security and to fix problems.
• Messages you send us: support requests by email, WhatsApp or the Help page.

• To provide, secure and support the service you asked for (our contract with you).
• To take payment, issue receipts and keep accounting and tax records (contract and legal obligation).
• To send service messages such as renewal reminders, security notices and updates to these Terms.
• To improve Nexsora and prevent fraud or misuse (our legitimate interests).
• To send product news or offers only if you have agreed; you can opt out at any time.

We do not sell your personal data.

Only with providers who help us run the service, under agreements that protect your data:

• hosting and database providers (where Nexsora and its backups run);
• our payment gateway and banks, to process payments;
• email, SMS and WhatsApp providers, to deliver messages you or we send;
• professional advisers and authorities where the law requires it.

Some providers are outside Sri Lanka, so your data may be processed in other countries. We take steps to make sure it stays protected.

We keep your data while your account is active. After you close it we keep it for 30 days so you can request an export, then delete or anonymise it. We keep billing and tax records for as long as the law requires (normally several years). Backups are overwritten on a regular cycle.

Each business’s data is kept separate and is only visible to its own users. We use encrypted connections (HTTPS), hashed passwords, role-based permissions and access logs. No online service is perfectly secure, so please use a strong password and do not share it.

You may ask us to: give you a copy of your personal data; correct it; delete it; restrict or object to some uses; withdraw consent you gave; or explain how we use it. Email us and we will reply within a reasonable time. If you are an end customer of one of our business customers, please contact that business first, because it controls that data.

We use only the cookies needed to keep you signed in and to remember settings such as light/dark mode. We do not use advertising cookies.

We will update this policy when our practices change and show the date at the top. Questions or requests:

• SHENZEE Tech (operated by Ashen Nimsara), the provider of Nexsora
• Email: animsara3@gmail.com
• WhatsApp / phone: +94 77 077 5501