NexAura POSPrivacy Policy
Last updated: 6 October 2026 · Applies to the NexAura POS website (nexaurapos.com) and the NexAura POS Android app
NexAura POS (“we”, “us”) is a point-of-sale and record-keeping service for shops. This policy explains what we collect, why, where it is stored, how long we keep it, and how you can delete it. We only describe what the service actually does.
Information we collect
- Account details: your name, email address and (if you add it) phone number, and your password, which is stored only as a secure hash by our sign-in provider. If you use “Continue with Google”, Google shares your name, email address and profile picture link with us; we never receive your Google password.
- Business details: business name, type, address, phone, tax rate, invoice settings and logo.
- Business records you enter: products, prices, stock and units; sales bills, returns and refunds; purchases; expenses and the cash book; daily sales totals; customers’ and suppliers’ names, phone numbers, credit limits, balances (khata/udhaar) and notes.
- Images you upload: business logo, product photos and up to 8 bill/receipt photos per entry. Photos are resized on your device before upload.
- Team information: the email addresses you invite, each member’s role and permissions, and an activity log of actions in each business (who did what, and when).
- Subscription details: your plan, trial and renewal dates, and any payment reference and note you submit on the website. We do not collect card or bank account numbers.
- Technical information: when you sign in, our sign-in provider records your IP address and browser/device type for that session to keep accounts secure. We do not use advertising IDs.
Information stored on your device
- Your sign-in session and a few app preferences (for example, the last business you opened).
- An offline copy of the records you open (products, customers, suppliers, today’s bills and settings), so the app keeps working without internet.
- Entries you make while offline (sales, cash book entries, daily sales and expenses). They stay on the device until they are sent to our database, then they are removed from the outbox.
Signing out removes the offline copy from the device; entries that have not been sent yet stay so they are not lost, and are sent the next time you sign in on that device. We do not use cookies for tracking.
How we use it
- To create and secure your account and let you sign in.
- To store your business records and show them only to you and the team members you allow, according to their role.
- To produce receipts, invoices, ledgers, reports and exports (PDF and CSV are created on your device).
- To manage your plan and to contact you about your account.
We do not sell your information, use it for advertising, or use analytics or advertising trackers.
Where it is stored and who processes it
- Supabase (database, sign-in and file storage) — our data is hosted in the Asia Pacific (Mumbai, India) region.
- Netlify hosts the website and app files.
- Google provides “Continue with Google” sign-in, and Google Fonts provides the typefaces the app displays (your browser downloads them from Google).
- jsDelivr delivers the open-source database library the app uses.
These providers process data only to run the service. All connections use HTTPS (encrypted in transit). Each business’s records are separated, and every request is checked against your role in that business by the database itself.
Sharing
Business records are visible only to that business’s owner and the members the owner adds, according to their role. Information you choose to send, such as a WhatsApp receipt, is shared by you. We may disclose information if the law requires it.
Keeping and deleting data
- We keep your data while your account exists.
- Delete your account in the app: tap your name (top right) → Delete my account. This immediately and permanently deletes your login, your profile, every business you own with all its records, books, images and team access, your plan and payment history, and invitations sent to your email.
- Or request deletion on the web: nexaurapos.com/delete-account.html.
- A business owner can also erase a single business with all its records and images (Settings → Edit business → Erase business).
- What is not deleted: if you worked as a team member in someone else’s business, the entries you made there stay with that business, because they are part of the owner’s business records; your name is no longer linked to your login. Our providers’ security logs (for example, sign-in records) are kept for a short period by the provider and then removed.
Security
Passwords are never stored in readable form. Access to records is restricted by role at the database level, uploaded images are private and shown only through short-lived links, and all traffic is encrypted.
Children
NexAura POS is a business tool for adults and is not intended for children under 13. We do not knowingly collect children’s data.
Changes
If we change this policy we will update the date above and, for significant changes, let account owners know in the app or by email.
Contact
NexAura POS · Email: sohailahmadsair@gmail.com