PointNXT Privacy Policy

1. Scope & Operating Entity

This Privacy Policy governs the collection, storage, processing, and protection of data processed by PointNXT ("Platform", "Services", "we", "us", or "our"), operated by AdaptNXT Technology Solutions Pvt. Ltd., headquartered in Bengaluru, Karnataka, India.

PointNXT operates as an Enterprise Omni-Channel Order Management System (OMS), Inventory Management System (IMS), Shipping Automation Engine, and Multi-Channel Fulfillment Platform. Our platform connects merchants' e-commerce storefronts, online sales marketplaces, courier services, ERP systems, and conversational AI shopping bots.

This policy applies to all merchants, store owners, enterprise clients, website visitors at pointnxt.com, and end-customers whose order details are synchronized through our order processing and shipping routing pipelines.

2. Information We Collect

To deliver sub-second inventory sync across 25+ sales channels and execute order routing, PointNXT processes specific categories of business and customer data:

A. Merchant Business & Account Information

• Account Registration Details: Full name, work email address, mobile phone number, WhatsApp contact, business name, and job title.
• Billing & Tax Identifiers: Company legal name, registered business address, GSTIN (Goods and Services Tax Identification Number), billing email, and transaction ledger history.
• Warehouse & Location Data: Physical fulfillment center addresses, contact personnel, pincodes, and operational routing rules.

B. Store & Channel Integration Credentials

To establish automated synchronization, merchants grant PointNXT API permissions for their connected channels (e.g., Amazon India, Flipkart, Meesho, Myntra, Nykaa, Shopify, WooCommerce, ONDC Network, Delhivery, Tally, etc.):

• Integration Credentials: Store API secret keys, OAuth access tokens, seller account IDs, warehouse API credentials, and courier account tokens.
• Data Encryption: All store tokens and credentials are encrypted at rest using AES-256 bit encryption and isolated per merchant tenant.

C. Transaction & Buyer Order Data (Processed on Behalf of Merchants)

When end-customers purchase items from connected sales channels, PointNXT automatically ingests the following details to execute order management and shipping:

• Order Identifiers: Channel order ID, order timestamp, payment status (COD vs Prepaid), payment gateway reference, and order total.
• Buyer Delivery Details: Recipient name, delivery shipping address, billing address, contact phone number, and recipient email address.
• Product & Inventory Data: Stock Keeping Unit (SKU) codes, product titles, quantities, unit prices, weight, dimensions, and real-time inventory counts across warehouses.
• Logistics & Tracking Data: Air Waybill (AWB) numbers, carrier assignment, label print logs, and courier dispatch/delivery status updates.

D. Website Inquiry & Lead Capture Data

When you submit demo requests, contact forms, or pricing inquiries on pointnxt.com, we collect your name, work email, phone number, company name, monthly order volume, IP address, user-agent string, and Cloudflare Turnstile security challenge verification tokens.

3. How We Use Your Data

PointNXT uses collected data exclusively to operate, optimize, and secure our multi-channel e-commerce infrastructure. We never sell, rent, or monetize your business data, inventory metrics, or customer details.

• Sub-Second Inventory Synchronization: Instantly adjusting stock counts across all connected marketplaces when an order is placed on any single channel.
• Order Routing & Automated Shipping: Allocating orders to the nearest warehouse, auto-assigning logistics carriers (Delhivery, BlueDart, Shiprocket, Xpressbees, etc.), generating shipping labels, and printing bulk GST invoices.
• Delivery Notifications & Tracking: Sending automated order confirmations, dispatch alerts, and WhatsApp tracking updates to recipients on behalf of the merchant.
• Returns & COD Reconciliation: Auditing marketplace payout statements, tracking COD cash remittance, and matching returned items against warehouse scans.
• Conversational AI Bots: Powering automated shopping, product query assistance, and order tracking on WhatsApp and Shopify AI bots.
• Platform Security & Anti-Spam: Verifying requests through Cloudflare Turnstile, preventing brute-force attacks, and enforcing multi-tenant isolation.
• Billing & Account Service: Managing pay-as-you-ship token balances, processing invoices, and providing technical support.

4. Legal Grounds for Processing

Under applicable data protection frameworks including the DPDP Act 2023, GDPR (General Data Protection Regulation), and CCPA/CPRA, we process data under the following lawful bases:

• Contractual Performance: Processing order and shipping data is strictly necessary to fulfill our service contract with merchants (executing order fulfillment and inventory sync).
• Legal & Tax Compliance: Retaining sales invoice logs and GST records to comply with statutory accounting and tax regulations in India.
• Legitimate Business Interests: Maintaining system integrity, detecting platform abuse, optimizing server throughput, and protecting against security threats.
• Explicit Consent: Processing opt-in contact requests, non-essential cookies, or marketing communications submitted on our website.

5. Third-Party Integrations & Data Sharing

To deliver unified multi-channel order processing, PointNXT transmits relevant data to specific operational partners as authorized by the merchant:

• Marketplace & E-Commerce Platforms: Transmitting inventory levels and order fulfillment status back to channels such as Amazon India, Flipkart, Meesho, Myntra, Nykaa, Shopify, WooCommerce, and ONDC Network nodes.
• Logistics & Courier Carriers: Sharing shipping addresses, recipient names, phone numbers, and package dimensions with merchant-selected courier services (Delhivery, BlueDart, Shiprocket, Xpressbees, Shadowfax, etc.) to generate AWBs and facilitate physical delivery.
• ERP & Financial Software: Syncing invoice ledgers and stock logs to connected merchant accounting software (Tally, Zoho Books, SAP, etc.).
• Security & Cloud Infrastructure Providers: Utilizing cloud hosting (AWS / Google Cloud) and security services (Cloudflare for Turnstile bot prevention and DDoS mitigation).
• Statutory Authorities: Disclosing information only when mandated by law, court order, or formal request from Indian regulatory or law enforcement agencies.

6. Security & Encryption Standards

Data security is foundational to PointNXT's engineering architecture. We employ defense-in-depth measures to protect your enterprise data:

• Encryption at Rest & in Transit: Store API tokens and database records are encrypted at rest using AES-256 bit encryption. All API calls, webhooks, and web traffic operate over TLS 1.3 encrypted HTTPS channels.
• Multi-Tenant Isolation: Customer and inventory databases are logically segregated, ensuring zero cross-tenant data visibility.
• Role-Based Access Control (RBAC): Strict principle of least privilege applies to system access. Staff access to operational servers is audited and restricted via multi-factor authentication (MFA).
• Infrastructure Protection: Automated vulnerability scans, DDoS defense via Cloudflare, and real-time anomaly detection logs.

7. Data Retention & Erasure

PointNXT retains personal and transaction data only for as long as necessary to fulfill operational services or comply with legal mandates:

• Active Account Data: Store credentials, inventory states, and account settings remain active while your PointNXT subscription is active.
• GST & Financial Records: Order transaction details and invoice logs are retained for 6 to 8 years as mandated by Indian GST and statutory tax regulations.
• API Credential Revocation: When a merchant disconnects a sales channel or closes their account, associated store API keys and access tokens are immediately purged from active cache and zeroed out.
• Data Erasure Requests: Upon written request, non-statutory records will be permanently deleted within 30 days.

8. Merchant & Data Principal Rights

In accordance with the DPDP Act 2023, GDPR, and global privacy frameworks, merchants and data principals hold the following rights:

• Right to Access: You may request a copy of your stored account profile, connected store settings, and transaction summaries.
• Right to Correction: You have the right to request updates or corrections to inaccurate profile, warehouse, or billing details.
• Right to Erasure / Account Termination: You may request the deletion of your account and associated non-statutory records.
• Right to Withdraw Consent: Where processing relies on consent (such as website marketing communications or cookies), you may withdraw consent at any time.
• Grievance Redressal: You have the right to lodge privacy concerns with our designated Grievance Officer.

9. Cookies & Tracking Technologies

PointNXT uses essential, performance, and analytical cookies on pointnxt.com to ensure secure authentication, maintain session stability, and measure page load performance. For full details regarding our cookie usage and how to manage your preferences, please consult our dedicated Cookie Policy.

10. Children's Privacy

PointNXT is a commercial B2B enterprise order management platform intended exclusively for business owners, e-commerce merchants, and individuals aged 18 and older. We do not knowingly solicit, process, or collect personal data from minors under the age of 18.

11. Statutory Grievance Redressal Officer

In accordance with the Information Technology Act 2000, IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, and the Digital Personal Data Protection (DPDP) Act 2023 of India, the contact details of our Grievance Redressal Officer are provided below:

12. Updates to This Policy

PointNXT reserves the right to update or modify this Privacy Policy to reflect operational improvements, new software integrations, or legal requirement changes. When updates occur, we will revise the "Last Updated" date at the top of this page. For significant changes affecting merchant data rights, we will provide advance notice via email or merchant dashboard announcements.