Privacy Policy

1. Who is responsible for your data

Business records. The business that owns a Nuronix account decides what goes into it — customers, suppliers, employees, invoices, payroll and so on. For that information the business is the controller (the “data fiduciary” in India, the “business” under the CCPA), and Nuronix is its processor (“service provider”), acting only on the business's instructions. Our Data Processing Agreement sets out those terms.

Your own account. For your sign-in details and how you use our website and software, Nuronix is the controller.

If you are a customer, employee or supplier of a business that uses Nuronix, please contact that business first about your data; we will help them answer you.

2. What we collect

• Account details: name, email, phone number, business name, address and tax registration numbers you enter.
• Business records you create in the software, such as products, invoices, bills, payments, stock, employees, payroll and CRM records.
• Sign-in and security data: when and from which device and IP address you sign in, and an audit trail of changes made in your account.
• Subscription payment details are handled by our payment providers; we do not store card numbers.
• Basic technical data, such as browser type and error reports, used to keep the service working.

3. Why we use it, and our legal basis

• To provide the software you signed up for and keep each business's data separate from every other business — performance of our contract with you.
• To sign you in securely, prevent fraud and abuse, and investigate problems — our legitimate interest in a safe, working service.
• To bill your subscription, keep accounting records and answer lawful requests — legal obligation.
• To send service messages (trial, payment and security notices) — contract and legitimate interest. Marketing emails are sent only with your consent, and every one has an unsubscribe link.
• To improve the product using usage information that does not identify you — legitimate interest.

We do not sell personal information, we do not “share” it for cross-context behavioural advertising (as the CCPA defines it), and we do not use your business records to train AI models or for advertising.

4. Cookies and similar storage

Our website and app use only strictly necessary storage: your browser keeps your sign-in session, your language and a few screen settings. We do not use advertising or third-party analytics cookies, so there is nothing to opt in to. If that changes, we will ask for your consent first where the law requires it.

5. Where your data is stored, and international transfers

Nuronix runs on Vercel (application hosting and file storage for images) and Neon (the PostgreSQL database). The database is currently hosted in the United States (AWS us-east-1). Data is encrypted in transit (HTTPS/TLS) and at rest by our providers, with automatic backups.

If you are in the European Economic Area, the UK or Switzerland, your data is therefore transferred to the United States. We rely on our providers' data processing terms, which include the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, and, where a provider is certified, the EU–US Data Privacy Framework and its UK extension. You can ask us for a copy of the relevant safeguards.

6. Service providers (sub-processors)

• Vercel Inc. (USA) — hosting and file storage.
• Neon Inc. (USA, AWS us-east-1) — database.
• Our email provider — sign-in, invoice and notice emails.
• Payment providers for our subscription and, only if a business turns them on for its own store, Razorpay, Stripe, PayPal, Paystack, Tap or M-Pesa.
• Only when the related feature is used: Google (sign in with Google), MSG91 or Twilio (SMS codes), and the AI model provider behind the in-app assistant.

We will update this list before adding a new sub-processor that handles customers' business records.

7. Who can see it

Only people your business invites, limited by the roles you give them. Nuronix staff access an account only to provide support you ask for, to keep the service secure, or when the law requires it. We disclose data to authorities only when legally required, and we tell the business first unless the law forbids it.

8. How long we keep it

We keep your data while your account is active. When a trial or subscription ends, the account becomes read-only and then locked, but the data is not deleted, so you can come back. You can ask us to delete your account and data at any time; we then delete it within 30 days, and copies held in backups are overwritten in the normal backup cycle. We keep only records the law requires us to keep (for example, our own invoices to you).

9. Your rights

Depending on where you live, you can ask us to: tell you what personal data we hold and give you a copy; correct it; delete it; give it to you in a portable format; restrict or object to how we use it (including processing based on legitimate interest, and all direct marketing); and withdraw consent at any time. In India you may also nominate someone to exercise your rights. Your business can also export its records from the software at any time.

California residents: you have the right to know, delete and correct personal information and to opt out of its sale or sharing — we do neither — and we will not treat you differently for using these rights. You can use an authorised agent.

We answer requests within one month (GDPR / UK GDPR), 45 days (CCPA) or 30 days (PIPEDA and India), and may need to confirm who you are first. There is no charge.

10. Security and data breaches

We use encrypted connections, hashed passwords, optional two-step sign-in, role-based access, per-business data separation and audit logs. If a breach affects personal data, we will tell affected businesses without undue delay and notify regulators where required.

11. Children

Nuronix is business software and is not meant for children. We do not knowingly collect personal data from anyone under 16.

12. Contact and complaints

For privacy questions, requests or complaints, email info@nuronixai.in with the subject “Privacy”.

You may also complain to your data protection authority: in the UK, the Information Commissioner's Office (ico.org.uk); in the EU, the authority in your country; in Canada, the Office of the Privacy Commissioner (priv.gc.ca); in California, the California Privacy Protection Agency; in India, the Data Protection Board of India.

13. Changes to this policy

If we change this policy in a meaningful way, we will update the date above and tell account owners in the app or by email before the change takes effect.