Privacy Policy
Last updated: 24 Aug 2026 · Applies to the Nexcod POS website (nexcodpos.in) and the Nexcod POS Android app.
Who we are
Nexcod POS ("we", "us") provides cloud billing and point-of-sale software for businesses in India, through the website nexcodpos.in and the Nexcod POS Android application. This policy explains what data we collect, why, and the choices you have. By using the service you agree to this policy.
Information we collect
Account data: name, email address, phone number, store name, address, GSTIN and drug licence number that you provide at registration or in Settings. Business data you enter: products, stock, invoices, customers, suppliers, doctors, patients, staff records, attendance and salary entries. Attendance photos: if a staff member marks attendance in the app, the selfie they take is uploaded and stored so the owner can verify it. Technical data: login timestamps, device model, IP address and app version, used for security and abuse prevention. Push tokens: if notifications are enabled, a Firebase device token is stored to deliver them.
How we use information
To operate the service you asked for: generating bills, tracking stock, producing reports, staff attendance and salary records, sending service emails (verification codes, password resets, payslips, alerts) and app notifications. We use aggregate, non-identifying statistics to improve the product. We do not sell, rent or trade your personal data, and we do not use your business data for advertising.
Android app permissions
Camera: used only to scan barcodes / pairing QR codes at billing time and, for staff, to take the attendance selfie. Images are never captured silently; scanning frames are processed on the device and discarded. Internet: required to reach your store data over HTTPS. Notifications: optional; used for attendance, salary and store alerts. The app requests no other permissions.
Data security
All traffic uses HTTPS/TLS. Passwords are stored only as one-way hashes. App sessions use random tokens stored hashed on our server; tokens expire automatically and are revoked when you log out or change your password. Sessions are strictly scoped: an account can only ever access its own store's data, and staff accounts see only what the owner permits. Access to production systems is restricted and logged.
Data retention & deletion
Your data is retained while your account is active. You may delete individual records (customers, products, staff, etc.) inside the software at any time. To delete your entire account and its data, email us from your registered address; we complete deletion within 30 days, except records we are legally required to keep (such as tax invoices, retained for the statutory period). Attendance photos can be deleted on request by the store owner.
Third-party services
Razorpay processes plan payments — we never see or store your full card details. Google Firebase Cloud Messaging delivers app notifications (device token only). Google Drive receives your backups only if you connect your own Drive account, and you can disconnect anytime. Each provider receives only the minimum data needed for its function and is bound by its own privacy policy.
Your rights
You can access and correct your data inside the software, export your data (Settings ▸ Backup), withdraw consent for notifications (device settings), and request a copy or deletion of your data by email. We respond within 30 days. Indian users have these rights under the Digital Personal Data Protection Act, 2023.
Children
Nexcod POS is a business tool intended for adults. It is not directed at children under 13 and we do not knowingly collect data from them.
Data location
Data is stored on secure servers and processed to provide the service. Where data moves across borders, we apply the same protections described here.
Changes to this policy
If we make material changes we will post the new version here with an updated date, and highlight it inside the product where appropriate.
Contact / Grievance
Questions, complaints or deletion requests: support@nexcodpos.in. We aim to acknowledge within 72 hours and resolve within 30 days.