PRIVACY & DATA PROTECTION

Privacy Policy

This policy explains how NEXUSPAY, operated by Nexus Core Technologies, handles personal and business information when merchants and their authorized users use our payment, wallet, point-of-sale, and business tools.

Effective September 21, 2026

We collect information you provide when creating or managing an account, including your name, contact details, business information, authorized users, and documents needed for identity or business verification.

When you use NEXUSPAY, we also process transaction details, settlement and payout instructions, product and sales records, support messages, device and browser data, IP address, security events, and service usage information. We do not ask merchants to store a customer's full card number in NEXUSPAY.

We use information to provide and improve the platform, authenticate users, complete verification, route payments and payouts, calculate balances and settlements, deliver receipts and notices, provide support, prevent fraud and abuse, enforce our agreements, and meet legal, regulatory, accounting, and security obligations.

We may share only the information needed with payment gateways, banks, e-wallets, identity-verification providers, cloud and communications providers, professional advisers, and government or regulatory authorities. These parties may process data under their own privacy notices. We do not sell personal information.

Merchants are responsible for giving their customers and team members any privacy notices required for information entered into NEXUSPAY or NEXSMART POS. Merchants must only collect information they are authorized to use and must protect access to their accounts, devices, passwords, and PINs.

We retain information for as long as needed to provide the service and for legitimate security, dispute, accounting, anti-fraud, and legal purposes. Some payment and verification records must be kept after an account is closed. When retention is no longer required, we delete or de-identify information using reasonable procedures.

We use administrative, technical, and organizational safeguards designed to protect information. No online service is completely risk-free, so merchants should use strong credentials, keep devices updated, restrict team access, and notify us promptly about suspected unauthorized activity.

Subject to applicable law, you may request access to or correction of your personal information, ask questions about its use, object to certain processing, or request deletion where retention is not required. We may need to verify your identity before acting on a request.

Some service providers may process information outside the Philippines. When this occurs, we take reasonable steps to use providers and arrangements intended to protect the information in accordance with applicable requirements.

NEXUSPAY merchant services are not directed to children. Account owners and authorized business users must have legal capacity to enter into the applicable agreement or be acting for a duly authorized organization.

We may update this policy as our services or legal requirements change. We will post the revised version here and update the effective date. Material changes may also be announced through the platform or the merchant's registered contact information.