Privacy

Privacy policy for the Nexus Retail ordering app

What data the ordering app collects, how we use it, who we share it with, how long we keep it and how you can delete your account and data.

Who we are

Restaurants and shops (the store) use Nexus Retail, operated by Nexus Media SRL, for their ordering app. Each store is responsible for its customers' data, and Nexus Media processes that data on the store's behalf.

Each store keeps its own customer accounts: an account you create in one store's app is separate from accounts in other stores.

You can reach us at:

Nexus Media SRL office@nexusmedia.ro Șoseaua Bucium nr. 80A, Iași, Romania

Data we collect

  • Account data: your name, email address, phone number and password, which is stored only as a hash.
  • Sign-in with Google, Apple or Facebook: your name, email address, profile picture and the identifier of the account you used. We receive only these basic profile data, never your contacts, posts or other account data.
  • Order data: the products you order, the delivery address and your invoicing details.
  • Calls to the store's phone: only when the store uses the app on an Android phone as its order line: the caller's number and the state and time of each incoming call (details below).
  • Technical data: the session cookies the app needs to work.

Incoming calls (caller ID)

A store can use the Nexus Retail app on an Android phone as its phone line for orders. Only in this mode, and only after the store's staff grant the Phone and Call logs permissions, the app learns the number of each incoming call on that phone, the call's state (ringing, answered, ended, missed) and its time. The app does not read the phone's call history, contacts or text messages, and never records or listens to calls.

The app sends this data, together with the app version and the phone's model and operating system, only to the store's Nexus Retail register paired with that phone. There, the staff see who is calling and the earlier orders of the customer with that number, so they can take the phone order faster.

We do not use call data for advertising, we do not sell it and we do not share it with third parties. Only that store sees it.

The list of recent calls is kept for at most 24 hours, on the server and in the app's private storage, and is then deleted. A number stays in the store's records only if the staff save the caller as a customer or record an order for them.

The feature is optional. The store can turn it off at any time by removing the phone from the register's settings or by revoking the app's permissions in Android settings.

How we use your data

We use your data to:

  • create your account in that store and sign you in;
  • process and deliver your orders;
  • send you emails about your orders and your account.

We never sell your data and never use it for advertising.

The use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who we share your data with

We share your data only with:

  • the store you order from;
  • the service providers needed to run your order, for example Stripe, which processes online card payments, and the provider that delivers our emails;
  • others, only where the law requires it.

How long we keep your data

We keep your data while your account exists. Records the law requires, such as fiscal receipts, are kept only for the period the law requires.

Your rights and deleting your data

You have the right to access, correct and delete your data and to object to its processing.

For any of these requests, write to us at office@nexusmedia.ro.

How to delete your account and data

  1. Email office@nexusmedia.ro from the address you use to sign in to the app.
  2. Name the store or give its app address, that is, the web address you open to order.
  3. Nexus Media deletes the account and its link to your Google, Apple or Facebook account and confirms the deletion by email within one month, as the GDPR requires.

Records the store must keep by law, such as fiscal receipts, are kept only for the period the law requires.

Remove the connection at Google, Apple or Facebook

You can also remove the app's access from your provider account at any time:

  • Facebook: Settings & privacy › Settings › Apps and websites
  • Google: Google Account › Security › Your connections to third-party apps & services
  • Apple: Apple Account › Sign-In and Security › Sign in with Apple

Complaints

You have the right to complain to the Romanian data protection authority, ANSPDCP (www.dataprotection.ro).