Privacy Policy

Effective date: November 7, 2026

This Privacy Policy explains how BeezNxt (BeezNxt, we, us, or our) collects, uses, discloses, stores, and protects personal data when you use the BeezNxt website, applications, cloud services, support channels, and related services (collectively, the Service).

This Policy is intended to provide the information required by the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission (NPC). It is a privacy notice, not a consent form. Where consent is the appropriate legal basis, we will request it separately and allow withdrawal as required by law.

1. Scope and our role

Internal business use and tax documents

BeezNxt is intended solely for internal business management and recordkeeping. It is not currently a BIR-accredited sales or invoicing system. Documents generated by the Service, including receipts, sales records, documents labelled as invoices, reports, printouts, PDFs, images, and exports, are not official receipts, sales invoices, or other BIR-authorized tax documents. Processing transaction data through BeezNxt does not make those documents valid for statutory invoicing or tax compliance.

Business customers must continue issuing duly authorized invoices and, where required, official receipts and other supporting documents in accordance with law. Each customer remains solely responsible for compliance with all tax regulations and other laws applicable to its business, including statutory recordkeeping and lawful processing of personal data. This does not limit BeezNxt's own obligations under applicable privacy or other laws.

BeezNxt is currently offered for business use in the Philippines.

The current free tier permits one user per business account. Separate staff or employee login accounts are not currently available. These accounts are planned for a future premium plan, subject to implementation. References to employee records in this Policy describe business data that may be stored or processed; they do not mean employees can currently sign in through separate accounts.

BeezNxt is generally a personal information controller for information used to create and administer accounts, secure and operate the Service, communicate with users, provide support, manage advertising choices, and comply with law.

Businesses also use BeezNxt to enter or import information about their employees, customers, suppliers, vendors, and other contacts (Customer Data). For that data, the business customer normally determines why and how the information is processed and acts as the personal information controller. BeezNxt acts as its personal information processor and handles the data on the customer's instructions, subject to our contract and the law.

If your information was entered into BeezNxt by a business with which you deal, please direct your request to that business first. We will assist the business as appropriate. We may still act as controller for security logs, support communications, or other information we process for our own legitimate purposes.

This Policy applies to the BeezNxt Service. It does not govern a customer's own privacy practices, third-party websites, app stores, advertisements, hardware, or services that apply their own privacy policies.

2. Personal data we process

The data processed depends on the features you use and the information you or your business chooses to provide.

Offline transaction entry is limited to customer creation, sales checkout, and sales creation using data already available on the device. Customer and sale records created through these workflows are stored locally and uploaded when connectivity is available and synchronization completes. Other features require an internet connection. Local storage of synchronized data does not mean all features can operate offline.

A. Account, identity, and business profile data

We may process:

• first, middle, and last name, suffix, alias, and optional date of birth, gender, civil status, and profile details;
• business/company name, business address, country, and default currency;
• email address, mobile number, username, and account role;
• password hash, passcode-related security data, verification status, and

authentication/session records; and

• profile or company photos and account preferences.

We do not store your account password in readable form.

B. Business records and Customer Data

At the customer's direction, the Service may process:

• employee and user details, roles, permissions, jobs, locations, contact

details, employment dates, pay rates and salary-related records, profile photos, and attachments;

• customer, supplier, and vendor names, addresses, phone numbers, email

addresses, account settings, credit terms, and transaction histories;

• products, barcodes, prices, costs, stock levels, inventory movements, and

product images or files;

• sales, purchases, returns, discounts, taxes, charges, receipts, invoices,

payments, payment methods, receivables, payables, credits, expenses, income, and related notes or attachments;

• reports, exported files, background-job status, audit/activity logs, and

stored operation-response records used to prevent duplicate transactions; and

• other information a customer chooses to enter in free-text fields or upload

through supported attachment features.

BeezNxt records bookkeeping information such as payment type, amount, date, receipt or reference information, and comments. The current Service is not a card payment processor and is not designed to collect full card numbers, CVVs, or online-banking credentials. Please do not enter those details.

C. Contacts imported from your device

If you choose the contact-import feature and grant permission, the app reads contact names, phone numbers, and email addresses from your device to display eligible contacts for selection. This reading and selection occurs in the app. Only the contacts you select for import are sent to the BeezNxt service and saved as customers, suppliers, or vendors. You are responsible for having a lawful basis to import and use another person's details.

D. Camera, photos, files, and scanner data

If you use these features and grant permission, the app may access the camera or photos/files you select to scan barcodes or attach images and documents to products, profiles, company settings, expenses, income, employees, or transactions. We process only the content you capture or select through the feature. A photo or attachment may contain personal data that is visible in the file or its available metadata.

E. Device, network, and usage data

We may process:

• device identifiers generated for login or sales-checkout assignment, device

name/model, operating system, app version, language, and time zone;

• IP address, request date and time, requested endpoint, response status,

correlation/error identifiers, authentication and security events, and similar server logs;

• network availability and synchronization status;
• app interaction, feature, performance, crash, and diagnostic information;

and

• advertising identifiers, consent status, ad impressions, clicks, reward

events, and related device/network signals collected by advertising partners.

The app may use Bluetooth, USB, or the local network to discover and connect to receipt printers. Older Android versions may label Bluetooth discovery as a location permission. BeezNxt uses that permission for printer discovery and does not intentionally collect or store precise geographic location through that feature.

Audit and session records may include user identifiers, IP addresses, user agents, action details, login and activity dates, and expiry or revocation status. Business audit records can contain historical details of changed records.

F. Communications and support data

We process messages you send to support, complaint details, troubleshooting information, attachments, survey or feedback responses, and records of notices or transactional emails sent to you. Please do not send passwords or other credentials in a support message.

G. Website and anti-abuse data

The public BeezNxt website is a static informational website. It does not use analytics, advertising trackers, account login, newsletter signup, or a contact form. It does not intentionally set first-party cookies or store information in your browser. The hosting and security providers may process technical request data such as IP address, browser type, requested page, time, and security signals to deliver the site, prevent abuse, and maintain service reliability.

This website behavior is separate from advertising technologies within the BeezNxt applications. If we introduce analytics, advertising, forms, accounts, or other tracking on the website, we will update this notice and obtain consent where required.

3. How we collect personal data

We collect data:

• directly from you when you register, configure a business, enter a record,

upload a file, contact support, or exercise a privacy choice;

• from the business account holder who enters business contacts, employee

records, and transactions;

• from your device when you grant permission and use a device feature;
• automatically from the app, website, servers, security controls, and

connected services when you use the Service; and

• from service providers such as app stores, advertising partners, email

providers, diagnostics providers, and anti-abuse services when needed to operate the Service.

4. Purposes and legal bases

We process personal data only for specified and legitimate purposes and to the extent reasonably necessary. Depending on the context, we rely on performance of a contract, compliance with a legal obligation, your consent, protection of lawful rights and interests, or our legitimate interests or those of a third party where those interests are not overridden by your rights.

Sensitive personal information, including age-related and civil-status data, requires a lawful condition applicable to that category under Philippine law. A general service contract or legitimate interest alone does not automatically justify its processing. We obtain specific consent where required; business customers must establish the appropriate legal condition for data they submit.

Where processing is based on consent, you may withdraw consent at any time, without affecting processing already lawfully performed. Denying or withdrawing optional permission may disable the related feature. Some data is necessary to create an account or deliver the Service; if it is not provided, we may be unable to provide that part of the Service.

We use account and contact information for verification, password recovery, account deletion and reactivation, security, support, and service messages. We do not currently send promotional email, SMS, or push notifications. If we introduce promotional messaging, we will provide the required notice, obtain consent where required, and provide an appropriate opt-out method.

5. Advertising and privacy choices

BeezNxt may use AppLovin MAX and Google advertising services to provide native, banner, and rewarded ads. These providers and participating ad networks may process advertising identifiers, IP address, device and app information, approximate location derived from IP, consent signals, ad interactions, and fraud-prevention data under their own privacy terms.

The app is configured to initialize advertising with a do-not-sell preference and non-personalized advertising by default, while presenting a consent flow where required. Actual data use can depend on your region, device settings, consent choice, provider configuration, and the ad network serving an ad. Where available, you can review choices through Profile > Manage Privacy Choices and through your device's advertising/privacy settings. You can decline a rewarded ad; the ad-based report action will then be unavailable, but you may use another available report-credit or plan option.

Relevant provider notices include:

• AppLovin Privacy Policy
• Google Privacy Policy

6. When we disclose personal data

We do not sell Customer Data. We disclose personal data only as described in this Policy, on a customer's instruction, or when the law permits or requires it. Recipients may include:

• Cloud and infrastructure providers: DigitalOcean and providers of

data hosting, networking, delivery, security, and backups used to host and operate BeezNxt;

• File storage and abuse prevention: Cloudflare R2 for private stored files

and Cloudflare Turnstile for abuse prevention;

• Email delivery: Zoho ZeptoMail for verification, password, account,

security, support, and other transactional email;

• Diagnostics and observability: Sentry for sanitized mobile error reports

and Grafana Cloud/OpenTelemetry tooling for service performance, logs, metrics, and traces;

• Advertising: AppLovin, Google advertising and consent services, and ad

networks made available through those platforms;

• App stores and platform providers: Apple and Google for distribution,

updates, reviews, platform services, and any store-managed purchase;

• Professional advisers: auditors, accountants, insurers, lawyers, and

consultants bound by confidentiality where reasonably necessary;

• Authorities and legal recipients: courts, regulators, law enforcement,

or other persons when required by law or reasonably necessary to protect rights, safety, and the integrity of the Service; and

• Business transaction recipients: a prospective or actual buyer,

investor, lender, or successor in a merger, financing, reorganization, or sale, subject to appropriate confidentiality and continued legal protection.

Providers may process data only for the services they supply to us, except where they act as independent controllers under their own terms. We use contracts and other reasonable measures to require appropriate confidentiality, security, and data-protection safeguards.

7. International transfers

Our primary production hosting is located in Singapore. Uploaded files, backups, email delivery, diagnostics, advertising, and provider support may involve processing in other countries according to the provider's service locations and operational arrangements. Primary hosting in Singapore does not mean every copy or service-provider activity is limited to Singapore. Contact privacy@beeznxt.com for information about relevant recipients and safeguards.

Where personal data is transferred internationally, we remain accountable as required by Philippine law and use contractual or other reasonable means to require a comparable level of protection. Privacy and government-access rules in another country may differ from those in the Philippines.

8. Retention and deletion

We keep personal data only as long as necessary for the stated purpose, contractual and business needs, security, dispute resolution, and applicable legal obligations.

• Active accounts and Customer Data: retained while the account is active

and as needed to provide the Service.

• Account deletion: only the company owner can initiate deletion in the

app. Access is disabled and user sessions are revoked immediately. The production service schedules permanent purge of the account's tenant database records and stored files after a 30-day reactivation period. Before that deadline, the owner may request reactivation by emailing support@beeznxt.com from the registered email address. We verify ownership before processing the request. A timely verified reactivation cancels the scheduled deletion. After permanent deletion, the account cannot be restored.

• Unverified registrations: configured for deletion after 30 days if email

verification is not completed.

• Verification and password-reset records: temporary codes and tokens have

short validity periods. Expiry prevents use but does not necessarily erase related session or audit history immediately.

• Local device copies: encrypted records and files may remain after ordinary

logout, which clears authentication credentials. Secure your devices and remove local app data before transferring them. Cloud deletion does not guarantee immediate erasure of offline devices or exported copies.

• Backups: retained on a rolling basis according to the backup service and

recovery configuration. Deleted data may remain in protected backups until those copies expire or are overwritten. Backups are used for recovery rather than ordinary access; applicable deletion requests must be reapplied following restoration. Contact privacy@beeznxt.com for retention information relevant to your data.

• Operational and security logs: routine local logs rotate according to

storage limits and may be removed sooner than 90 days. Separately retained security logs follow a 90-day retention policy. Business audit logs, session history, and duplicate-operation records remain with account data while necessary for integrity, security, and service delivery.

• Sentry error events: standard retention under the current Free Developer

plan is 30 days.

• Grafana Cloud telemetry: standard retention under the current Free plan

is 14 days for logs, metrics, traces, and profiles.

• Support and complaints: two years after the matter is closed, unless

needed longer for a legal obligation or unresolved dispute.

• Transactional email delivery records: up to 90 days for delivery

monitoring. Support correspondence follows the support retention period.

• Legal, billing, and tax records: for the period required by applicable

Philippine law.

The Sentry and Grafana periods refer to event and telemetry data. Provider account, administrative, billing, and security records may follow separate retention rules. We will update this Policy if retention changes materially.

We may retain a narrowly limited record beyond account deletion when required by law or necessary for security, fraud prevention, proof of compliance, or the establishment, exercise, or defense of legal claims. We will restrict that data to the applicable purpose and delete or anonymize it when the reason ends.

Deleting a record from BeezNxt does not delete copies independently retained by a customer, recipient, device export, printer, app store, advertising provider, or other independent third party.

9. Security

We use reasonable and appropriate organizational, physical, and technical measures based on the nature of the data and risk. Measures reflected in the Service include:

• encrypted local app storage using SQLCipher, with the database key held in

the platform keychain or keystore;

• HTTPS and secure WebSocket connections for production traffic;
• password hashing, short-lived authentication mechanisms, session revocation,

rate limiting, and abuse-prevention controls;

• role and privilege controls and separation of each company's tenant data;
• private object storage with controlled download links;
• file-size, file-type, and image-processing limits;
• audit logs, monitoring, backups, and account-deletion workflows; and
• sanitized error reporting with default collection of personally identifiable

information disabled in the mobile error reporter.

No system is completely secure. Protect your credentials and devices, install updates, assign only necessary permissions, and notify support@beeznxt.com promptly if you suspect unauthorized access. If a personal data breach requires notification, we will notify affected persons and the NPC as required by law.

10. Your privacy rights

Subject to the conditions and exceptions in applicable law, you may have the right to:

• be informed about processing of your personal data;
• access personal data and information about its processing;
• object to processing, including certain processing based on consent or

legitimate interest;

• correct inaccurate or incomplete personal data;
• request erasure, blocking, or suspension of processing in appropriate cases;
• withdraw consent where consent is the legal basis;
• obtain a portable copy of qualifying electronically processed personal data;
• claim damages where legally available; and
• file a complaint with the National Privacy Commission.

To exercise a right, email privacy@beeznxt.com with the subject “Privacy Request.” Describe the request, the account or business involved, and how we can contact you. We will use reasonable measures to verify identity and authority before releasing or changing data. An authorized representative may be required to provide specific authorization and supporting documents. We will respond within the period required by law and explain any lawful limitation or denial.

If a BeezNxt customer entered your data, contact that business first because it normally controls the record. You may also contact us, and we will route or assist with the request where appropriate.

You may learn more or file a complaint with the Philippine National Privacy Commission through the NPC website. You are not required to waive any right or remedy by contacting us first, although we welcome the opportunity to address your concern.

11. Children's privacy

BeezNxt is designed for business use by adults and is not directed to children. Account owners and authorized users must be at least 18 years old. We do not knowingly invite a child to create an account. A business customer must not enter a child's data unless it has a lawful and necessary business purpose, appropriate authority, and any notice or consent required by law. If you believe a child has created an account or data was processed unlawfully, contact privacy@beeznxt.com.

12. Automated decision-making

BeezNxt uses automated rules for functions such as validation, calculations, reporting, synchronization, security, rate limiting, fraud/abuse prevention, and advertising selection by third-party providers. BeezNxt does not currently make solely automated decisions that produce legal or similarly significant effects about account users.

13. Changes to this Policy

We may update this Policy to reflect changes in the Service, providers, or law. We will post the updated version and revise the effective date. For a material change, we will provide reasonable additional notice through the Service, email, or another appropriate channel. Where the law requires consent for a new purpose, we will request it rather than treating continued use as consent.

14. Contact us

For questions about this Policy or the Service, email support@beeznxt.com. For privacy requests or concerns involving personal data, email privacy@beeznxt.com.