Privacy policy

This policy explains what Nexcod Digital collects, why, and the choices you have. It applies to our website, the customer account area and the API.

What we collect

• Account details — name, business name, email, mobile number, GSTIN and address.
• KYC documents — the documents you upload for verification. For Aadhaar we ask only for the last four digits.
• Usage data — the requests you make through the API, their parameters and results, wallet entries, sign-in history, IP addresses and browser type.
• Payment details — the UTR or reference of payments you make to top up your wallet. We do not store card numbers.

Why we use it

To run your account, deliver each request to the right provider, bill and refund correctly, verify identity as the law requires, prevent fraud and abuse, provide support and improve the Service. We do not sell your data.

Who we share it with

Only the provider that carries out a request (for example a telecom operator or a bank) receives the data needed for it. We also share data when the law requires it. Our team accesses KYC documents only to verify them, and every view is logged.

Security

Sign-in is by one-time code; API keys and one-time codes are stored only as hashes; provider credentials are encrypted; connections use HTTPS. Access inside our team follows roles and is recorded in an audit trail.

How long we keep it

Account and billing records are kept for as long as the law requires (generally eight years for financial records). Request logs are kept for as long as needed for support, disputes and compliance.

Your choices

You can see and correct your details in your account, download your statements, and ask us to close your account. Write to info@nexcoddigital.in for any privacy request.