Privacy Policy
Last updated: July 7, 2026
Quick Summary
Your data is encrypted and secured
We never sell your data to third parties
You own your business data
You can request data deletion anytime
1. Introduction
NexCodeNova ("we", "us", "our"), a technology company based in Sri Lanka, operates ExiusCart. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. We are committed to protecting your privacy and handling your data with transparency.
2. Information We Collect
2.1 Information You Provide
- Account information (name, email, phone number, business name)
- Business data (products, customers, invoices, inventory)
- Payment information (processed securely by payment providers)
- Communications with our support team
2.2 Information Collected Automatically
- Device information (browser type, operating system)
- Usage data (features used, time spent, actions taken)
- IP address and general location
- Cookies and similar tracking technologies
3. How We Use Your Information
We use the collected information to:
- Provide and maintain our services
- Process transactions and send related information
- Send administrative notifications and updates
- Respond to your comments, questions, and support requests
- Improve our platform and develop new features
- Monitor and analyze usage patterns and trends
- Detect, prevent, and address technical issues
- Comply with legal obligations
4. Third-Party Channel Integrations
ExiusCart integrates with third-party sales channels on your behalf. When you connect a channel, we access and process data from that platform solely to provide the integration. You remain the data controller for your customers' information; we act as a data processor on your behalf.
TheDersi
We receive order data, customer information, product listings, and stock levels via webhook and API. Product updates and stock changes are pushed back to TheDersi in real time.
Shopify
We access your Shopify store's orders, products, inventory, and customer data via the Shopify Admin API. We register webhooks for real-time updates and push product and stock changes back to Shopify.
eBay
We access your eBay listings, orders, and inventory via the eBay REST API using OAuth 2.0. Order notifications are received via eBay platform notifications. Product and inventory changes are pushed to eBay.
Daraz
We access your Daraz orders, products, and inventory via the Daraz Open Platform API using OAuth 2.0. Product and stock changes are pushed to Daraz.
Noon
We access your Noon orders, listings, and inventory via the Noon Partner API. Product and stock changes are pushed to Noon.
WooCommerce
We connect to your WooCommerce store via API keys you provide. Orders are received via webhook and inventory is synced bidirectionally.
TikTok Shop (rolling out)
We access your TikTok Shop products, orders, and inventory via the TikTok Shop Open Platform API using OAuth 2.0. Order data syncs via TikTok webhooks. Product listings and stock are pushed to TikTok Shop.
Amazon (rolling out)
We access your Amazon Seller Central account via the Amazon SP-API (Selling Partner API). We access order data, product listings, and inventory solely to sync your Amazon business with ExiusCart.
Google Ads Lead Capture
We receive lead information from your Google Ads Lead Form campaigns via a secure webhook URL. Lead data (name, email, phone) is stored in ExiusCart as leads on your behalf. This feature is available on eligible plans only.
Meta Ads Lead Capture
We receive lead information from your Meta (Facebook/Instagram) Lead Ad campaigns via webhook. Lead data is stored in ExiusCart on your behalf. This feature is available on eligible plans only.
Custom Websites
We provide a webhook URL that your custom website can use to send order and lead data to ExiusCart. All data received through this webhook is processed as order and customer data on your behalf.
5. Data Sharing and Disclosure
We do not sell your personal information. We may share your data only in the following circumstances:
- Service Providers: Third-party companies that help us operate our platform (hosting, payment processing, analytics)
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- With Your Consent: When you explicitly authorize us to share information
6. Data Security
We implement industry-standard security measures to protect your data:
SSL/TLS Encryption
All data transmitted is encrypted
Encrypted Storage
Data at rest is encrypted
Regular Backups
Automated daily backups
Access Controls
Limited employee access
7. Data Retention
We retain your data for as long as your account is active or as needed to provide services. After account termination, we retain data for up to 30 days to allow for data export. Some data may be retained longer for legal compliance or legitimate business purposes. You can request immediate deletion of your data at any time.
8. Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your data
- Export: Download your data in a portable format
- Opt-out: Unsubscribe from marketing communications
- Restriction: Limit how we process your data
To exercise these rights, contact us at support@exiuscart.com or through your account settings.
9. Cookies
We use cookies and similar technologies to:
- Keep you signed in to your account
- Remember your preferences
- Understand how you use our platform
- Improve our services
You can control cookies through your browser settings. Disabling cookies may affect some functionality of our platform.
10. International Data Transfers
Your data may be processed and stored in Sri Lanka, UAE, and other countries where our service providers operate. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws.
11. Children's Privacy
ExiusCart is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through a notice on our platform. The "Last updated" date at the top of this page indicates when the policy was last revised.
13. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
NexCodeNova - Data Protection