Privacy Policy

This Privacy Policy describes how Nexvo Tech Pte. Ltd.("Nexvo", "we", "us", or "our") collects, uses, stores, and protects personal and business information when you access or use Nexvo Commerce ("Nexvo Commerce", "the Platform"), including our website, web application, APIs, integrations, and related services (collectively, the "Services").

Nexvo Commerce is an AI-powered commerce operations platform designed for merchants, brands, and trading companies that sell across online marketplaces. The Platform helps teams connect authorized stores, synchronize catalog and inventory data, process orders, monitor operational performance, and receive AI-assisted business insights. Because our Services involve sensitive commercial data, we treat privacy and data protection as core operational requirements—not optional features.

By registering for an account, connecting a marketplace store, or otherwise using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Services. This Policy applies to merchants and authorized users who access Nexvo Commerce on behalf of a business entity.

We collect information necessary to operate a multi-channel commerce platform, secure marketplace integrations, and deliver the features you enable. The categories of information we may collect include:

• Merchant account information, including your name, business name, email address, phone number, billing details, team member profiles, and authentication credentials
• Store authorization data, including OAuth tokens, refresh tokens, authorization scopes, connection timestamps, and marketplace seller identifiers required to maintain integrations
• Product data, including listings, SKUs, titles, descriptions, attributes, pricing, categories, images, and catalog change history synchronized from connected stores or entered by you
• Order data, including order identifiers, buyer-facing order details permitted by marketplace APIs, fulfillment status, shipping information, payment references, and transaction records
• Inventory data, including stock levels, warehouse locations, allocation rules, replenishment signals, and synchronization logs across channels
• Analytics and operational data, including sales metrics, conversion indicators, channel performance summaries, exception reports, and dashboard configurations
• Operational and technical logs, including API request metadata, integration events, error reports, audit trails, and system activity necessary for reliability and security
• Device and usage information, including IP address, browser type, operating system, device identifiers, session duration, and pages or features accessed within the Platform
• Cookies and similar technologies used to maintain sessions, remember preferences, measure product usage, and protect against fraudulent access (see Section 2.1 below)

2.1 Cookies. We use cookies and comparable technologies to keep you signed in, enforce security controls, and understand how the Platform is used. You may adjust browser settings to limit cookies, but disabling essential cookies may prevent certain features from functioning correctly.

We use collected information to provide, maintain, and improve Nexvo Commerce. Specific purposes include:

• Providing Platform services, including account creation, workspace configuration, and feature access based on your subscription or trial status
• Store synchronization, including connecting marketplace accounts and keeping authorized data current across channels
• Inventory management, including stock reconciliation, low-stock alerts, and multi-location visibility
• Order processing support, including order ingestion, status tracking, exception handling, and operational workflows you configure
• AI business insights, including trend analysis, performance summaries, and recommendations derived from authorized merchant data
• Operational alerts, including notifications for sync failures, policy exceptions, inventory thresholds, and integration health issues
• Customer support, including responding to inquiries, troubleshooting integrations, and resolving service incidents
• Security and fraud prevention, including detecting unauthorized access, enforcing authentication, and investigating suspicious activity
• Legal and compliance obligations, including recordkeeping, responding to lawful requests, and enforcing our Terms of Service

We process data based on contractual necessity (to deliver the Services you request), legitimate business interests (such as securing the Platform and improving reliability), and your consent where required—for example, when you authorize a marketplace connection through OAuth.

Nexvo Commerce integrates with third-party marketplaces and commerce platforms through official APIs and authorized connection flows. We access merchant marketplace data only after you have completed explicit OAuth authorization or an equivalent marketplace-approved consent mechanism. We do not request marketplace passwords, and we do not access store data without a valid authorization granted by the account holder or an authorized team member on your Nexvo workspace.

Supported and commonly integrated platforms include Shopee, TikTok Shop, Lazada, and other authorized marketplaces as made available within the Platform. The scope of data retrieved depends on the permissions you grant during authorization and the APIs provided by each marketplace. You may revoke authorization at any time through the marketplace's developer or seller settings and by disconnecting the store within Nexvo Commerce.

Each marketplace maintains its own terms, developer policies, and data handling rules. Your use of marketplace integrations remains subject to those third-party policies in addition to this Privacy Policy and our Terms of Service.

We respect the confidentiality of merchant data. We do not sell merchant data, and we do not provide merchant data to unauthorized third parties for their independent marketing or commercial exploitation.

We may share information only in the following limited circumstances:

• Service providers and subprocessors that help us operate the Platform (such as cloud hosting, monitoring, email delivery, or customer support tools), bound by contractual confidentiality and data protection obligations
• Marketplace platforms, strictly as required to maintain authorized integrations you have enabled
• Professional advisers, auditors, or insurers where reasonably necessary and subject to confidentiality duties
• Law enforcement, regulators, or other parties when required by applicable law, court order, or to protect the rights, property, or safety of Nexvo, our users, or the public
• Business transfers, such as a merger, acquisition, or asset sale, in which case we will require the recipient to honor commitments consistent with this Policy

We may share aggregated or de-identified information that cannot reasonably be used to identify a specific merchant for analytics, benchmarking, or product improvement purposes.

We implement administrative, technical, and organizational measures designed to protect information against unauthorized access, alteration, disclosure, or destruction. These measures include, among others:

• Encryption of data in transit using HTTPS/TLS for web and API communications
• Encryption and secure storage for sensitive credentials and authorization tokens
• Role-based access control limiting employee and system access to merchant data on a need-to-know basis
• Least-privilege principles for internal systems, integration credentials, and production environments
• Internal audit logs and operational monitoring to detect anomalous activity and support incident investigation
• Secure software development practices, vulnerability management, and periodic review of security controls

No method of transmission or storage is completely secure. While we work continuously to protect your information, we cannot guarantee absolute security. For details on our security program, visit our Security page.

We retain information for as long as necessary to provide the Services, fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on data type, your account status, and applicable law.

When you disconnect a marketplace integration, we stop synchronizing new data from that source and delete or anonymize associated authorization tokens according to our credential management procedures. When you close your account or submit a verified deletion request, we will delete or anonymize personal and merchant data within a reasonable period, except where retention is required for legal, security, or backup integrity purposes.

Depending on your jurisdiction, you may have rights regarding your personal and business information, including the right to:

• Access information we hold about you or your organization, subject to verification of authority
• Request correction of inaccurate or incomplete account or contact information
• Request deletion of data where permitted by law and not overridden by legitimate retention needs
• Withdraw marketplace authorization and disconnect integrations at any time
• Object to or restrict certain processing activities where applicable law provides such rights
• Receive a copy of certain data in a portable format where technically feasible

To exercise these rights, contact us at privacy@nexvo.sg. We may request information to verify your identity and authority to act on behalf of a merchant account. We will respond within timeframes required by applicable law.

Nexvo is headquartered in Singapore. Your information may be processed in Singapore and in other countries where we or our service providers operate. These locations may have data protection laws that differ from those in your country of residence.

When we transfer personal data internationally, we implement appropriate safeguards consistent with applicable law, such as contractual data protection clauses with subprocessors and access controls limiting who may view merchant data. By using the Services, you acknowledge that your information may be transferred to and processed in jurisdictions outside your own.

If you have questions about this Privacy Policy, our data practices, or wish to submit a privacy-related request, please contact:

Nexvo Tech Pte. Ltd.
Email: privacy@nexvo.sg
Address: 7030 Ang Mo Kio Avenue 5, #09-90, Northstar @ AMK, Singapore 569880

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top and bottom of this page. Continued use of the Services after an update constitutes acceptance of the revised Policy, to the extent permitted by law.