Privacy notice

What we keep about you, and why.

Two roles

When you send a plan request on this site, Nexus POS decides what happens with your details: we are the controller. When a restaurant or cafe uses Nexus POS for its orders, staff and customers, the shop is the controller and Nexus POS only keeps that data on the shop’s behalf (we are its processor). Questions about a shop’s customer records go to that shop first.

Plan requests

The form asks for your name, your shop’s name, an email address and the plan you want. Phone, city and a message are optional. We use them only to reply and, if you ask us to, to open your shop. We do not sell them, use them for advertising, or add you to a mailing list.

A request is deleted 12 months after we close it. If it led to a shop, the shop’s billing contact is kept while the shop is a customer.

Shops that use Nexus POS

Each shop runs on its own server. Its menu, orders, staff accounts and customer records stay on that server and are not mixed with other shops. Customer phone and email are optional and shown masked in lists. The shop decides how long customers are kept; by default they are removed or anonymised 24 months after their last order. A nightly copy of each shop’s database is encrypted and kept on our platform server for up to 8 weeks, so a shop can be restored after a lost server.

Cookies

This site sets no cookies. The shop applications use one sign-in cookie that is needed to stay signed in. There are no analytics or advertising cookies.

Who helps us

Servers and storage are hosted by DigitalOcean. Domain names are registered with Namecheap and HTTPS certificates come from Let’s Encrypt; neither receives your personal data. The full list, and any change to it, is given to shops in their data processing agreement.

Your rights

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Reply to any email we sent you, or send a new request with “privacy” in the message. We answer within 30 days. Customers of a shop can ask the shop directly; the shop can export or delete a customer’s record from its own screens.

If you think we handled your data wrongly, you can complain to the data protection authority where you live. In Morocco that is the CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel); in the European Union, your national supervisory authority.

If something goes wrong

If personal data is exposed, we stop it, check what was affected, and tell the authority within 72 hours where the law requires it. We tell affected shops straight away so they can inform their customers.

Changes

We update this notice when what we keep changes. The date below is the date of this version.

21 October 2026