Privacy Policy
Effective Date: May 13, 2026 · Last Updated: August 15, 2026
Nexora Software Solutions operates Nexora Accbot on a strict zero-monetization data policy. We do not sell, rent, license, or monetize your accounting ledgers, invoices, customer directories, or financial balances. Your data belongs exclusively to your business organization and is used solely to execute your accounting workflows.
01.Information We Collect
To provide multi-tenant cloud accounting, automated financial statements, cheque tracking, and secure invoice generation, we collect the following categories of information:
When you register a workspace, we collect your full name, business name, business registration number, corporate email address, phone number, physical address, and password hash (one-way encrypted via BCrypt with adaptive cost factor).
Financial records entered by your authorized team members, including Sales Invoices, Purchase Orders, General Ledger Journal Entries, Chart of Accounts, Bank Accounts, Supplier & Customer Directories, Cheque Serial Numbers, Maturity Dates, and Transport Ledger Bills.
Subscription order numbers, currency, payment reference IDs, receipt tokens, and uploaded bank transfer deposit slips. Full credit/debit card numbers are captured and tokenized exclusively by certified payment gateways (PayHere, PayPal) and are never stored on Nexora servers.
IP addresses, browser client headers, session tokens, login timestamps, and immutable audit logs recording creation, modification, and deletion of financial transactions to preserve forensic data integrity.
02.How We Use Your Data
- Executing Core Accounting Calculations: Generating real-time Balance Sheets, Trial Balances, Profit & Loss statements, General Ledger postings, and Cheque status feeds.
- Multi-Tenant Isolation & Authorization: Validating tenant boundary constraints so that users only access records belonging strictly to their registered business workspace.
- Subscription Management & Invoicing: Generating automated PDF subscription tax receipts, processing renewals, and activating workspace service tiers.
- Security Protection & Fraud Prevention: Identifying suspicious login spikes, unauthorized API token manipulation, or breach attempts.
- Customer Support: Investigating reported bugs or ledger synchronization discrepancies at your explicit request.
03.Multi-Tenant Architecture & Data Security
We implement enterprise-grade technical and organizational security controls designed specifically for multi-tenant financial SaaS applications:
All data transmitted between your browser and our cloud servers is encrypted using modern TLS/HTTPS protocols (TLS 1.2 or higher, as negotiated by the hosting infrastructure).
Database queries enforce automatic, strict tenant-scoping middleware to prevent cross-tenant data leakage.
Daily incremental and weekly automated snapshots are vaulted in georedundant, encrypted cloud storage.
Granular permission matrix prevents unauthorized staff from viewing sensitive ledgers or settings.
04.Third-Party Sub-Processors & Infrastructure
We partner with industry-leading infrastructure and payment partners to deliver the Service. These partners have access to data solely to perform designated services:
- Cloud Hosting & Database Providers: Enterprise cloud infrastructure hosting encrypted database clusters and microservices.
- Payment Processing Partners: PayHere and PayPal process payment card authorizations and subscription tokenization under strict PCI-DSS Level 1 compliance.
- Transactional Mail Delivery: Dedicated transactional SMTP relays for delivering password resets, subscription receipts, and security alerts.
05.Data Retention, Export & Account Deletion
We retain your accounting records for as long as your workspace maintains an active subscription or archived status.
06.Your Rights & Privacy Choices
Subject to applicable data protection laws, you retain the right to:
- Access and review all personal and organization information held by Nexora Accbot.
- Rectify inaccurate business profile records or contact emails.
- Request full deletion of your user profile and workspace credentials.
- Revoke user authorizations or cancel active subscription billing.
To exercise any of these privacy rights, please submit a written request to our Data Protection Officer at support@mail.nexorasoftwaresolution.com.
07.Cookies & Local Storage
Nexora Accbot uses essential cookies and browser local storage strictly for platform functionality. We do not use third-party tracking, advertising, or analytics cookies.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| accessToken | HttpOnly Cookie | Authenticates your session securely | Short-lived (server-controlled) |
| refreshToken | HttpOnly Cookie | Enables silent session renewal without re-login | Up to 14 days (if Remember Me) |
| accbot_last_activity | Local Storage | Tracks last activity timestamp for inactivity timeout | Until logout |
| accbot_remember_me | Local Storage | Stores your session duration preference | Until logout |
| accbot-theme | Local Storage | Remembers your dark/light mode preference | Persistent |
| accbot_permissions | Local Storage | Caches role-based UI permissions for your session | Until logout |
These storage mechanisms are strictly necessary for the Service to function and cannot be disabled without breaking core authentication and user experience features.
08.Data Breach Notification
In the unlikely event of a data breach that compromises your personal or financial information, Nexora Software Solutions commits to notifying affected users within seventy-two (72) hours of confirmed discovery via email and in-platform notification.
Our notification will include: (a) the nature and scope of the breach; (b) the categories of data affected; (c) the corrective measures taken; and (d) recommended actions for affected users. We will also notify relevant regulatory authorities where required by applicable law.
09.Contact Our Privacy & Security Team
Nexora Software Solutions
Nexora Accbot Data Governance
Kandy
Sri Lanka · WhatsApp: +94 77 232 3941