Privacy Policy

1. Who we are

“NextGenDash”, “we” and “us” mean the operator of nextgenedash.com. For any privacy question or request, and for grievances under India's Digital Personal Data Protection Act, 2023, write to admin@nextgenedash.com.

2. Two kinds of data

Your account data — you, as a customer of NextGenDash. We decide how this is used, as described here.

Your business data — the bills, menus, sales, purchases, inventory, expenses and files you create or upload, including details of your customers (for example a name and phone number added to a bill). You own this data and decide what goes in; we process it only to provide the service to you.

3. What we collect

• Account: name, email address, password (stored hashed by our authentication provider, never readable by us), business name, outlets, and team members you invite.
• Business data: everything you enter or upload, as described above.
• Billing: your plan and payment status. Card, UPI and bank details are entered on Razorpay's checkout and are never stored by us.
• Support: messages you send through in-app chat, support tickets or email.
• Technical: server logs (IP address, browser type, pages requested, errors) kept for security and troubleshooting.
• Messages to our social accounts: if you message our Facebook Page or Instagram account, we receive your message and public profile identifier so we can reply.

We do not use advertising trackers or sell personal data.

4. How we use it

• To run the service: billing, POS, dashboards, reports, exports and receipts.
• To process payments and manage your subscription.
• To answer support requests and our social-media messages.
• To keep the service secure, prevent abuse, and fix problems.
• To send service emails (account, security, receipts). Marketing emails only with your consent, and you can opt out any time.

5. AI features

Features such as the Copilot, insights, menu-pricing suggestions and reply drafts send the relevant part of your data to our AI provider (currently OpenAI) to generate a response. Under their API terms this data is not used to train their models. AI-drafted replies and posts are never sent or published until a person approves them.

6. Who processes data for us

• Supabase — database, authentication and file storage (servers in Singapore).
• Vercel — website and application hosting.
• Hostinger — a server that runs scheduled background jobs.
• Razorpay — payments.
• OpenAI — AI features (see section 5).
• Meta (WhatsApp, Facebook, Instagram) — sending WhatsApp bill receipts you choose to send, and our own social-media messages.
• Email provider — delivering service emails.

Each receives only what it needs for its task. Some of these providers store or process data outside India; we rely on their contractual safeguards.

7. How long we keep it

We keep your data while your account is active. After you close your account we delete account and business data within 30 days, except records we must keep by law (for example tax and payment records) and routine backups, which expire on their normal cycle.

8. Your rights

You can access, correct, export or delete your data. Much of this you can do yourself inside the app; for anything else email admin@nextgenedash.com. You may also withdraw consent for optional uses such as marketing. We reply within 30 days. See how to delete your data.

9. Security

Data is encrypted in transit (HTTPS). Each business's data is isolated from every other business at the database level. Stored credentials for connected services are encrypted. No system is perfectly secure, but we work to protect your data and will notify you and the authorities of a breach as the law requires.

10. Children

NextGenDash is a business service and is not intended for anyone under 18.

11. Changes

If we make a material change we will update the date above and tell account owners by email or in the app before it takes effect.