Privacy policy

Who we are

NexLedger is provided by NEW IT BIZ (NITB GROUP), operated under the leadership of Md Najmul Islam. The public service is available at https://www.nexledger.net.

For privacy or data requests, email NexLedger <info@nitbgroup.com> or call +880 1301 508 489.

What we collect

We collect only what is needed to run and support your accounting workspace.

• Account details: name, email, password (stored hashed), phone if you provide it, and login session data.
• Business data you enter: companies, customers, suppliers, products, invoices, purchases, expenses, journals, reports settings, logos, and related files.
• Subscription and billing records: plan selection, payment proofs you upload, credit claims, and renewal status.
• Operational telemetry: basic server logs, support tickets, and audit events (for example team invites or settings changes) so we can secure and support the service.

How we use data

We process data to provide NexLedger features, authenticate users, isolate company workspaces, send transactional email (invites, receipts, reminders), review subscription payments, and respond to support requests.

We do not sell personal data to third parties. We do not use your ledger contents for advertising.

Company workspaces & isolation

NexLedger is multi-tenant: each company (tenant) keeps its own books. Data access is scoped by workspace membership and role (for example owner, accountant, salesperson, or viewer).

Sister concerns and extra companies under one account remain separate ledgers. Team members only see workspaces they are invited to.

Security practices

We apply practical security controls appropriate for a cloud SaaS accounting product. This section describes practices we follow — it is not a claim of a specific third-party audit certification.

• Encryption in transit: the public site and app are served over HTTPS, with HTTP Strict Transport Security enabled.
• Access control: signed-in sessions, role-based permissions inside each company, and password change flows for account recovery hygiene.
• Tenant isolation: application queries and permissions are tied to company (tenant) scope so one workspace cannot read another’s books.
• Audit trail: important administrative and team actions can be recorded for accountability inside the product.
• Browser hardening headers: content-type sniffing protection, referrer policy, and restricted permissions for camera, microphone, and geolocation on app pages.

Privacy principles we follow

Whether you operate mainly in Bangladesh or serve customers elsewhere, we align day-to-day practices with widely recognized privacy principles:

• Purpose limitation — we use data to deliver accounting, billing, and support, not for unrelated profiling.
• Data minimization — we ask for fields needed to run books, invoicing, inventory, and subscriptions.
• Integrity & confidentiality — access controls, HTTPS, and operational safeguards around production systems.
• Accountability — a clear contact channel for questions, corrections, and deletion or export requests where feasible.
• Respect for local expectations — we handle business records carefully and expect customers to use the service lawfully under applicable Bangladesh and international rules that apply to their own operations.

Payments & subscription proofs

Paid plans may be activated after manual review of payment proofs you submit. Those proofs and related billing notes are stored so we can confirm subscription periods and resolve disputes.

Account credits (such as promotional registration credit) are tracked against your account balance inside NexLedger.

Retention & deletion

Accounting data is not auto-deleted while your workspace remains active — books are meant to stay complete. If you close an account or request deletion, contact us and we will work through export and deletion options consistent with legal retention needs (for example billing records).

Backups and logs may persist for a limited operational period after deletion requests while we complete removal from active systems.

Service providers

We use infrastructure and email providers to host the application, store data, and send transactional messages. Those providers process data only to help us operate NexLedger. Absolute URLs and brand references for the product point to https://www.nexledger.net.

Your requests

You may request access to personal account data we hold, corrections to inaccurate account details, or deletion/export of workspace data where technically and legally practical. Workspace owners control most day-to-day edits inside the app (customers, invoices, settings, team membership).

Email info@nitbgroup.com with the subject “Privacy request” and enough detail for us to verify you are authorized for that workspace.

Children

NexLedger is a business accounting product. It is not directed at children, and we do not knowingly create accounts for anyone under 16.

Changes to this policy

We may update this page as the product evolves. The “Last updated” date at the top will change when we do. Material changes may also be noted in-product or by email to account owners when appropriate.