What we collect, and what we do with it

1. What we collect

Your account. When you register we ask for your name, email address and mobile number, and during setup your business name, address, GSTIN and logo for your invoices and PDFs. We do not ask for date of birth, identity documents or biometric data.

Data you enter. Everything you put into Neviscater to run your business: customers and their contact details, orders, events, menus, items, recipes, materials, rates, stock, vendors, staff, bills and payments. This is your data. We process it only to provide the service to you.

Usage. Which screens and features are used, errors, and the questions typed into Ask Neviscater. We use this to fix problems and improve the product; it is analysed in aggregate.

On this website. What you type into a contact or demo form (name, business, phone, email, message), and standard analytics (see cookies below). Reading the site requires no account.

2. What we use it for

• To run your Neviscater account: logins, calculations, PDFs, reports, backups and restore points
• To send reports you ask us to send, by email and WhatsApp, in your business name
• To reply to your enquiries and support requests, and to call back after a demo request
• To tell you about renewals, outages and product changes that affect you
• To detect abuse, fraud and errors, and to meet legal obligations

We do not sell personal data, and we do not share it with anyone for their own marketing.

3. Who else processes it

Neviscater uses a few outside services. Each receives only what is needed for its job:

• Hosting and backups: cloud servers (DigitalOcean and Amazon Web Services); backups and restore-point snapshots are stored in AWS's Mumbai region.
• Payments: PhonePe handles subscription checkout. We never see or store your card, UPI or bank details; we receive confirmation of the payment and a transaction reference.
• WhatsApp: reports you send on WhatsApp go through Meta's WhatsApp Cloud API from Neviscater's business number, so the recipient's phone number and the document reach Meta. We send only what you choose to send, when you choose to send it.
• Email: transactional and report email is delivered through Amazon SES or Gmail.
• AI features: when you use AI menu generation, recipe generation, document import or Ask Neviscater, the text needed for that request (a cuisine description, item names, your question, the relevant help articles) is sent to a language-model provider (OpenAI or Anthropic) to produce the answer. Ask Neviscater is given the help articles only, never your business data. Translation of item and material names uses a machine-translation service.
• Analytics and advertising on this website: Google Analytics 4 and Google Ads conversion tracking, as described under cookies.

We may also disclose data when the law requires it, or to protect the rights and safety of our users or the public.

4. Cookies

The application uses only the cookies needed to keep you logged in and to protect forms. This website uses Google Analytics 4 to count visits and Google Ads conversion tracking to see which campaigns lead to demo requests. These set cookies from Google; you can block them with your browser's settings or an ad blocker and the site works the same. The website also loads the Roboto typeface from Google Fonts.

5. How long we keep it

• Account and business data: for as long as your subscription or trial is active, and for at least 3 months after it lapses so you can resume. After that we may delete it. You can export everything from inside the app at any time, and you can ask us to delete the account earlier.
• Backups and restore points: restore points you create are kept until you delete them or the account is deleted; our own backups roll over on a fixed schedule.
• Website enquiries: while the enquiry is open and for up to two years after, then deleted.
• Payment records: as long as Indian tax and accounting law requires.

6. Security

Connections are encrypted (HTTPS). Each business's data is separated from every other business's data; one account can never see another's. Access to production systems is limited to the people who operate the service. No system is perfectly secure; if we learn of a breach affecting your data we will tell you promptly. We will never ask you for a password, OTP or card details by phone, email or WhatsApp; if someone does, it is not us.

7. Your customers' data

The customer names and phone numbers you enter belong to your customers. You are responsible for having their consent to store them and to send them messages; we process them only on your instructions, as your service provider.

8. Your rights

Write to support@neviscater.com from the email address on your account to see what we hold about you, correct it, export it or have it deleted. We answer within seven working days. These are your rights under India's Digital Personal Data Protection Act, 2023; we extend the same to users outside India. If you are not satisfied with our answer, the grievance officer is reachable at the same address and by post at the office below.

9. Changes

If this policy changes in a way that matters, we tell active users by email and change the date at the top. The current version is always at neviscater.com/privacy/.

10. Who we are

Nevis Infosystems, 149 H Nalanda Parisar, Kesharbag Road, Indore 452012, Madhya Pradesh, India. GSTIN 23APLPS3248A1Z3. support@neviscater.com · +91 96070 26060. This policy is governed by the laws of India.