Privacy Policy

1 Information We Collect

When you engage with Nezzex Software Solutions, we may collect the following types of information:

• Personal Identification Information: Name, email address, phone number, and business/company name provided during registration, checkout, or service inquiry.
• Payment & Billing Information: Payment amounts and transaction references necessary to process your service orders. Payment card details are securely handled by PayHere (PCI-DSS Level 1 certified) and are never stored on our servers.
• Project & Communication Data: Project requirements, uploaded files, and messages exchanged via our client portal live chat system.
• Technical & Browsing Information: IP address, browser type, device information, and website usage patterns collected automatically via server logs.

2 Use of Information

We use the collected information for the following purposes:

• To process and fulfil your software development orders, including project scoping, milestone billing, and delivery coordination.
• To communicate with you via SMS and Email regarding your order status, project milestones, deployment details, and invoice receipts.
• To personalise your client portal experience and present relevant project tracking, reports, and service recommendations.
• To improve our website, service offerings, and engineering standards based on client feedback and usage data.
• To detect and prevent fraud, unauthorised access, and abuse of our client portal or payment gateway.

3 Information Sharing

We respect your privacy and do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except in the following circumstances:

• Trusted Service Providers: We share necessary information with PayHere (payment processing), Notify.lk (SMS notifications), and Gmail SMTP (email delivery). These providers are contractually bound to handle your data securely and confidentially.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid legal requests, court orders, or governmental authority directives.

4 Data Security

We implement industry-standard security measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. Our systems use JWT-based authentication, encrypted database connections, and server-side input validation. All payment transactions are processed through PayHere's PCI-DSS Level 1 encrypted gateway. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

5 Cookies and Tracking Technologies

We use session cookies and browser local/session storage to maintain your client portal login session, theme preferences, and checkout state. These are strictly functional and do not track third-party advertising behaviour. You may disable cookies through your browser settings, but this may limit access to authenticated portal features.

6 Your Rights & Data Retention

You have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate or incomplete data via your client portal profile.
• Request deletion of your account data, subject to active contractual or legal obligations.

We retain your data for as long as necessary to fulfil the purposes outlined in this policy, comply with legal obligations, and resolve any disputes.

7 Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. Any changes will be posted on this page with a revised "Last Updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information.