How we protect your data
Last updated 14 August 2026 · Draft — under legal review. Questions? support@nexusite.in
Short version: encrypted in transit, passwords properly hashed, payments handled by Razorpay, backups every night. The specifics:
In transit
Everything runs over HTTPS with modern TLS — the site, the app, and every API call. Plain HTTP is redirected, and browsers are told to always use HTTPS (HSTS).
Your password
Stored only as a bcrypt hash — an industry-standard one-way function. We cannot read your password, and it never appears in logs. New accounts confirm their email with a single-use, expiring code.
Payments
Payments are processed by Razorpay (PCI-DSS compliant). Your card or UPI details go to Razorpay directly — we never see or store them. Payment confirmations from Razorpay are signature-verified before we act on them.
Our servers
Your data lives on our own server in the EU (Germany) — not scattered across third-party tools. Access is restricted to key-based SSH; password logins are disabled; a firewall blocks everything except web traffic; the database is not reachable from the internet. Uploaded bills are private — every file is checked against the owner before it's served.
Backups
The database is backed up automatically every night and kept for 30 days, and we test that backups actually restore. Uploads are archived weekly.
Found a vulnerability?
Tell us at support@nexusite.in — we read every report and act fast. Please give us a reasonable window to fix before public disclosure.