Privacy Policy

Cybernex Solutions Ltd, [REGISTERED ADDRESS], BRN [BRN], is responsible for the data described here. Contact: [email protected].

• Account: name, email, phone number, company name and address, logo, plan and billing details.
• Staff: names, emails, access levels and POS passcodes (passcodes are stored hashed).
• Logins and security: for each session, the device and browser, IP address, approximate location (city and country, worked out from the IP address) and times; two-factor codes, stored hashed and valid for a few minutes.
• Contact form: your name, email, phone number and message.
• Business data you enter, such as products, sales and customers, which we process on the shop's behalf.

• To provide NexStore and keep it running (contract).
• To protect accounts: two-factor codes, spotting unusual logins, and the sessions list (legitimate interest).
• To bill you and meet our legal and tax obligations (legal obligation).
• To answer your messages and support requests.
• To send the emails you choose in Settings → Notifications, such as the daily summary and low-stock alerts. You can turn them off there.

We do not sell personal data and do not use it for advertising.

We use these providers (sub-processors) to run NexStore:

• Supabase: database and logins.
• SendGrid: sending emails (codes, invoices, notifications).
• Cloudflare: hosting, network and protection against attacks.
• Google Maps: showing and finding shop addresses.
• Shopify: only if you connect your Shopify store.

Some of them process data outside Mauritius. In that case we rely on the safeguards the law requires. We may also disclose data when the law obliges us to.

• Account and business data: while the account is open, then 30 days after closure (see the Terms of Service).
• Billing records: as long as tax law requires.
• Session records and two-factor codes: only as long as needed to secure the account.
• Contact-form messages: as long as needed to answer you and follow up.

You can ask to see, correct or delete your data, object to or limit its use, and receive a copy in a common format. Write to [email protected]; we answer within one month.

If you work for a shop, some requests are handled together with the shop owner. You can also complain to the Data Protection Office of Mauritius or, in the European Union, to your local supervisory authority.

Connections are encrypted (HTTPS), passwords, passcodes and codes are stored hashed, each shop can only reach its own data, and owners can turn on email two-factor authentication and sign out other devices from Settings → Security.

We only use cookies needed for NexStore to work: the login session cookies and the cookie that remembers your language. We use no advertising or analytics cookies, so there is no cookie banner.

NexStore is a service for businesses and is not meant for children.

We publish any new version on this page with a new date, and email account owners about important changes.