Privacy Policy

This Privacy Policy applies to personal data processed by N&T Software Private Limited through:

• The N&T Software website and contact forms;
• Demo, quotation and consultation requests;
• POS software and business management systems;
• Web dashboards and customer portals;
• Android and iOS applications;
• Restaurant, food-business, retail and franchise POS solutions;
• Customer, employee, supplier and inventory management modules;
• Support, implementation, training and maintenance services;
• Payment, SMS, WhatsApp, online-order and third-party integrations;
• Marketing, sales and business communications.

This Policy does not replace the privacy policy that an N&T Software business customer may be required to provide to its own customers, employees, suppliers or other individuals.

When N&T Software Determines the Purpose

N&T Software determines how and why personal data is processed when handling website visitors, business enquiries, quotations, customer accounts, billing, support, security, recruitment and N&T Software marketing activities.

When We Process Data for a Business Customer

When a restaurant, retailer, franchise, shop or other business uses our software to process its own customer, employee, supplier or transaction data, that business generally determines why and how the data is used.

In those circumstances, N&T Software processes the data on behalf of the business customer according to the applicable agreement, approved configuration and documented instructions.

The exact data collected depends on the services, modules, integrations and features selected by the customer.

We may collect personal data:

• Directly from you when you submit a form, request a demo, contact us or create an account;
• From an employer, franchise owner, outlet manager or authorised administrator;
• When data is entered, imported or generated through the POS software;
• Automatically through website cookies, server logs and application logs;
• Through payment, SMS, WhatsApp, delivery, accounting, marketplace and other authorised integrations;
• From business directories, professional networks and publicly available business sources;
• From service providers assisting with hosting, analytics, marketing, support or security.

Business customers must ensure they have authority to provide personal data to N&T Software and to use it through the selected software modules.

We may process personal data to:

• Respond to enquiries and arrange product demonstrations;
• Prepare proposals, quotations and contracts;
• Create and administer customer accounts;
• Configure, implement and operate POS solutions;
• Process billing, KOT, orders, purchases, stock and reports;
• Provide customer, employee, supplier and branch-management functions;
• Support payment, online-order and messaging integrations;
• Provide technical support and user training;
• Diagnose errors, investigate incidents and improve system performance;
• Protect accounts, prevent fraud and maintain security;
• Maintain backups, audit logs and business continuity;
• Send service notices, invoices, renewal reminders and security alerts;
• Send marketing communications where permitted;
• Analyse aggregated product usage and improve our services;
• Establish, exercise or defend legal rights;
• Meet legal, tax, regulatory and contractual obligations.

Depending on the nature of the interaction and applicable law, we may process personal data:

• With the individual’s free, specific and informed consent;
• To provide requested products, services or information;
• To take steps requested before entering into a commercial relationship;
• To perform a contract with a customer or authorised user;
• For permitted or legitimate business uses;
• To comply with a legal obligation;
• To protect systems, users, rights, property and security;
• For other purposes permitted under applicable law.

Where consent is the applicable basis, an individual may withdraw consent. Withdrawal does not affect processing that occurred lawfully before the withdrawal or processing that must continue under another lawful requirement.

Business customers may use N&T Software products to collect and process personal data relating to their customers, employees, suppliers, franchisees and other individuals.

The business customer is responsible for:

• Providing appropriate privacy notices to affected individuals;
• Obtaining consent or another lawful authority where required;
• Configuring access permissions and user roles correctly;
• Ensuring that imported and entered data is accurate and lawful;
• Responding to privacy requests relating to its business records;
• Setting appropriate retention and deletion instructions;
• Using SMS, WhatsApp, email and promotional functions lawfully.

We may collect billing names, addresses, tax details, invoice records, payment modes, payment status and transaction reference numbers.

Where payments are processed through a bank, payment gateway, UPI provider, card terminal or other third-party payment service, payment credentials may be collected directly by that provider under its own privacy policy and security requirements.

N&T Software generally receives information such as payment status, transaction reference, amount, date and settlement status rather than complete card, bank-account or UPI authentication credentials.

Our website and applications may use cookies, local storage, pixels, SDKs and similar technologies.

Non-essential cookies should be activated only where appropriate consent or another lawful permission exists.

More information is available in our Cookie Policy.

Service Communications

We may send communications necessary to operate the service, including account notices, OTPs, security alerts, invoices, support updates, maintenance notices and renewal reminders.

Marketing Communications

We may send product information, offers, newsletters or invitations where you have requested them or where otherwise permitted.

You may unsubscribe using the link in the message or by contacting us. Unsubscribing from marketing will not stop essential service or security communications.

We may share personal data with:

• Cloud-hosting, storage, backup and infrastructure providers;
• Payment gateways, banks and payment-service providers;
• SMS, email, WhatsApp and notification providers;
• Customer-authorised delivery, accounting, ERP, marketplace and online-order integrations;
• Technical support, analytics and security providers;
• Professional advisers, auditors, insurers and legal advisers;
• Government agencies, regulators, courts and law-enforcement authorities where legally required;
• A purchaser, investor or successor involved in a lawful merger, reorganisation or business transfer;
• Other parties where the individual or customer has authorised the sharing.

Service providers are authorised to use personal data only for the agreed service, legal compliance and security purposes.

N&T Software does not sell personal data for monetary consideration.

N&T Software serves customers in India and other countries. Personal data may therefore be processed or stored in locations outside the individual’s state, province or country.

International processing may occur through cloud, communication, support, analytics, payment or integration providers.

Where applicable, we use contractual, organisational and technical measures intended to protect personal data and comply with restrictions imposed by applicable law.

We retain personal data only for as long as reasonably required for the relevant purpose, contract, security need or legal obligation.

Data may be retained for longer where necessary to comply with law, investigate fraud, respond to legal claims, protect systems or enforce agreements.

We maintain administrative, technical and organisational safeguards appropriate to the nature of the service and associated risks.

Safeguards may include:

• Role-based access and permission controls;
• Authentication and password-security measures;
• Encryption, masking or other protective measures where appropriate;
• System, access and activity logs;
• Monitoring and incident investigation;
• Backup and recovery arrangements;
• Network, application and infrastructure security;
• Employee and contractor confidentiality obligations;
• Security requirements for relevant service providers;
• Periodic security review and remediation.

We maintain procedures to identify, investigate, contain and remediate suspected personal-data incidents.

When a personal-data breach affects data controlled by an N&T Software business customer, we may notify and assist that customer in accordance with the applicable agreement.

Where required by applicable law, N&T Software will notify affected individuals and relevant authorities within the prescribed timeframe and provide available information about the nature of the incident, likely consequences, mitigation measures and recommended protective actions.

Depending on applicable law and N&T Software’s role in processing the data, an individual may have the right to:

• Request information about personal data being processed;
• Request access to available personal data;
• Correct inaccurate or misleading personal information;
• Complete incomplete personal information;
• Update outdated personal information;
• Request erasure where retention is no longer necessary or legally required;
• Withdraw consent where processing relies on consent;
• Opt out of marketing communications;
• Raise a complaint or grievance;
• Nominate another individual to exercise applicable rights in circumstances permitted by law.

We may request information necessary to verify identity, authority and the validity of a request.

Some requests may be restricted where retention or processing is required for invoicing, taxation, fraud prevention, security, legal claims or another lawful purpose.

The N&T Software website, sales services and business-account services are intended for businesses and authorised adult representatives.

We do not knowingly invite children to create commercial customer accounts or submit business enquiries independently.

A business customer may use the POS system to process information concerning a child, such as an order, customer record or authorised employee record. The business customer is responsible for determining whether parental or guardian consent is required.

Where N&T Software directly processes a child’s personal data and verifiable parental or guardian consent is legally required, we will take appropriate steps before that processing.

An N&T Software mobile application may request device permissions depending on its functions.

Device permissions may be managed through the device settings. Disabling a required permission may prevent the related feature from working.

Our systems may automatically calculate sales totals, stock movement, low-stock alerts, shift summaries, transaction reports, branch comparisons and other operational analytics.

These outputs depend on the data, settings and rules supplied or configured by the business customer.

N&T Software does not use website or POS personal data to make solely automated decisions producing significant legal effects for individuals unless that functionality is specifically disclosed, agreed and lawfully implemented.

Our website or software may contain links to or integrations with third-party websites, payment providers, messaging services, delivery platforms, marketplaces and applications.

N&T Software does not control the independent privacy practices of those third parties. Users should review the applicable third-party privacy policy before providing personal data or enabling an integration.

We may update this Privacy Policy to reflect changes in our services, integrations, security practices, business processes or legal requirements.

The revised version will display a new “Last Updated” date. Material changes may also be communicated through email, account notification or another reasonable method.

Continued use of the services after an update will be subject to the revised Policy, except where fresh consent or another action is legally required.

Privacy questions, rights requests and grievances may be submitted using the following contact details:

Include “Privacy Request” in the email subject and provide:

• Your name and contact details;
• The business or N&T Software customer connected with the request, if applicable;
• A clear description of the request;
• Information reasonably required to verify identity and authority.

We will acknowledge and respond within a reasonable period, subject to identity verification, applicable law and whether N&T Software or its business customer controls the relevant personal data.