Privacy Policy

Ravelweb ("we", "our", "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, store, and disclose information when you use the Ravelweb Nexus business management platform ("Service"). By using our Service, you agree to the practices described in this Policy.

1. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, phone number, and password (encrypted) when you register.
• Business Information: Shop name, organization name, business address, and related details you provide.
• Transaction Data: Sales, purchases, inventory, customer and supplier records entered into the platform.
• Usage Data: Log data including IP address, browser type, pages visited, and timestamps for security and analytics.
• Support Data: Messages, ticket submissions, and correspondence when you contact us for support.

2. How We Use Your Information

• To provide, operate, and maintain the Ravelweb Nexus platform and your account.
• To process your shop registration and manage your subscription/license.
• To send service-related communications (account approval, license alerts, support replies).
• To improve our Service, fix bugs, and develop new features.
• To comply with legal obligations and enforce our Terms of Service.
• To detect, prevent, and respond to fraud, abuse, or security incidents.

3. Data Storage and Security

Each registered shop receives an isolated, dedicated database. Your business data is not shared with or accessible by other tenants. We implement industry-standard security measures including:

• Encrypted password storage using bcrypt hashing.
• HTTPS encryption for all data in transit.
• Session management with secure, time-limited tokens.
• Optional two-factor authentication (2FA) for admin accounts.
• Regular server security updates and access control policies.

4. Data Sharing and Disclosure

We do not sell, rent, or share your personal information with third parties for their marketing purposes. We may disclose your information only in the following circumstances:

• Legal Requirement: If required by law, court order, or governmental authority.
• Service Providers: Trusted service providers (hosting, email delivery) under strict confidentiality agreements.
• Business Transfer: In the event of a merger, acquisition, or sale of assets, with prior notice to users.
• Safety: To prevent harm, fraud, or illegal activity.

5. Data Retention

We retain your account and business data for as long as your account is active or as needed to provide the Service. If you close your account or your license expires and is not renewed, your data may be retained for up to 90 days before permanent deletion, unless a longer retention is required by law.

6. Your Rights

You have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your account and associated data.
• Export your business data in a standard format upon request.
• Withdraw consent where processing is based on consent.

To exercise these rights, contact us at +8801735415115 (WhatsApp) or via our Help page.

7. Cookies and Tracking

Ravelweb Nexus uses session cookies strictly necessary for authentication and platform functionality. We do not use advertising cookies, third-party trackers, or analytics cookies that identify you across other websites. You may disable cookies in your browser, but this will prevent login.

8. Children's Privacy

Our Service is intended for business users aged 18 and above. We do not knowingly collect personal information from children under 18. If we learn that we have collected such data, we will delete it promptly.

9. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately.

10. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or an in-app notice. Your continued use of the Service after such changes constitutes acceptance of the updated Policy.