At NShine ERP, we value your privacy and are committed to protecting your personal information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you use our software. By using NShine ERP, you consent to the data practices described in this policy.
| Company / Data Controller | NShine Technologies Pvt Ltd |
| Registered Office | Hyderabad, Telangana, India |
| Platform | NShine ERP – https://nshineerp.com/ https://app.nshineerp.com |
| Governing Law | Digital Personal Data Protection Act, 2023 (India); Information Technology Act, 2000 |
| Privacy Officer Email | [email protected] [email protected] |
| Helpline | +91 800-891-4488 (24 × 7) |
| +91 799-5094-455 | |
| Grievance Redressal | Grievance Officer – NShine Technologies Pvt Ltd, Hyderabad (details in Section 19) |
NShine Technologies Pvt Ltd (“NShine”, “Company”, “we”, “us”, or “our”) operates the NShineERP platform – a cloud-based Transport Management Software (“Platform”) accessible via https://nshineerp.com and https://app.nshineerp.com. We are committed to protecting the privacy and security of all personal data that is entrusted to us.
This Privacy Policy (“Policy”) describes, in clear and transparent terms:
This Policy applies to all individuals whose data is processed by NShine, including:
BY ACCESSING THE PLATFORM, REGISTERING AN ACCOUNT, BOOKINGADEMO, OR SUBMITTING ANY FORM ON NSHINEERP.COM, YOU ACKNOWLEDGETHATYOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY ANDCONSENTTOTHE DATA PRACTICES DESCRIBED HEREIN. IF YOU DO NOT AGREE, PLEASEDISCONTINUE USE OF THE PLATFORM AND WEBSITE IMMEDIATELY.
For the purpose of this Policy, the following terms shall have the meanings set out below:
NShine collects the following categories of data, depending on the nature of your interaction with us:
When Subscribers use the Platform to manage their transport operations, the following data categories may be stored:
Note: NShine processes this operational data as a Data Processor on behalf of the Subscriber(who is the Data Fiduciary for their own drivers, customers, and staff). Subscribers are responsible for ensuring a lawful basis for entering third-party personal data into the Platform.
NShine uses the following tracking technologies on its website (detailed further in Section 9):
NShine collects personal data through the following methods:
NShine collects personal data through the following methods:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation & management | Name, email, phone, business info | Contract / Consent |
| Service delivery & platform operation | All account & operational data | Contract |
| Billing & invoicing (GST compliance) | GSTIN, PAN, bank details, invoices | Legal Obligation |
| Customer support & helpdesk | Name, contact, usage data | Contract / Legitimate Interest |
| Product improvement & analytics | Usage data, error logs (anonymised) | Legitimate Interest |
| Marketing & promotional communications | Email, phone (opt-in only) | Consent |
| Security monitoring & fraud prevention | IP, device ID, login records | Legitimate Interest |
| Demo scheduling & pre-sales | Name, phone, email, business type | Consent / Contract |
| Refer and Earn programme | Referrer & referee contact data | Consent / Contract |
| Legal compliance & regulatory reporting | All relevant data | Legal Obligation |
| Dispute resolution & enforcement | Relevant account & usage data | Legitimate Interest |
| Anonymised research & benchmarking | Aggregated, de-identified data | Legitimate Interest |
NShine will not use your personal data for any purpose other than those specified above or subsequently communicated to you, without obtaining fresh consent (where required).
NShine processes personal data on one or more of the following legal grounds:
Where you have given clear, informed, and specific consent – for example, by subscribing to marketing emails, agreeing to receive WhatsApp notifications, or submitting a demo request form. You may withdraw consent at any time (see Section 15), but withdrawal will not affect the lawfulness of processing carried out before withdrawal.
Where processing is necessary for the performance of a contract with you -specifically, to create and manage your NShine ERP account, deliver the Platform services you have subscribed to, and process payments.
Where processing is required to comply with applicable Indian law – including GST filings, tax record-keeping requirements under the Income Tax Act, 1961, regulatory reporting under the DPDPA 2023, and court orders or directions from competent authorities.
Where processing is necessary for NShine’s legitimate business interests, provided these interests are not overridden by the rights and interests of the Data Principal, including: fraud prevention, cybersecurity monitoring, product quality improvement, business analytics, and protection of NShine’s intellectual property and legal rights.
In rare circumstances, NShine may process data to protect the vital interests of a Data Principal
or another person – for example, in the case of a reported safety emergency involving a driver.
NShine does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may, however, share data in the following limited circumstances:
NShine engages third-party vendors and service providers who process data strictly on NShine’s instructions under written data processing agreements. These include:
NShine may share data with its parent company, subsidiaries, or affiliated entities within the NShine group (including NShine Technologies) strictly for the purpose of providing and improving the Platform, subject to the same data protection standards set out in this Policy.
NShine may disclose personal data to government bodies, law enforcement agencies, courts, or regulatory authorities where required by law, court order, or enforceable legal process – including requests under the DPDPA 2023, IT Act 2000, or any other applicable statute. NShinewill, where legally permissible, notify the affected Subscriber of such requests.
In the event of a merger, acquisition, restructuring, sale of assets, or similar corporate transaction involving NShine, personal data held by NShine may be transferred to the acquiring or successor entity. Affected Subscribers and Users will be notified via registered email prior to data transfer, and the successor entity will be required to honour this Policy.
NShine may disclose data to the extent necessary to: (a) enforce these Terms and Conditions or this Policy; (b) investigate and prevent fraud, security breaches, or illegal activities; (c) protect the safety, property, or rights of NShine, its employees, Subscribers, or the public.
NShine may share data with third parties not described above where you have given explicit, informed prior consent for such sharing.
NShine’s primary servers and operations are based in India. However, given that NShine serves customers in the UAE and may use cloud infrastructure or third-party services with data centres in other countries, your personal data may be transferred outside India.
For transfers of personal data outside India, NShine takes the following safeguards:
By using the Platform, you acknowledge that your data may be processed in jurisdictions outside India where data protection laws may differ from those in India.
Cookies are small text files placed on your browser or device when you visit a website. They allow the website to remember your preferences, maintain your login session, and gather analytics on how the site is used. Similar technologies include web beacons, tracking pixels, and local storage objects.
| Cookie / Tracker | Type | Provider | Purpose |
|---|---|---|---|
| Session Cookie | Strictly Necessary | NShine | Maintains your logged-in session on app.nshineerp.com |
| CSRF Token | Strictly Necessary | NShine | Security: prevents cross-site request forgery |
| Preference Cookie | Functional | NShine | Stores language, display, and UI preferences |
| Facebook Pixel | Marketing / Analytics | Meta (Facebook) | Tracks website conversions and enables remarketing to website visitors |
| LinkedIn Insight Tag | Marketing / Analytics | Tracks B2B campaign performance and LinkedIn audience analytics | |
| Google Analytics | Analytics | Measures website traffic, user behaviour, and content performance | |
| Google Tag Manager | Analytics | Manages and deploys tracking scripts | |
| Performance Cookies | Analytics | NShine / CDN | Measures page load times, errors, and infrastructure performance |
You can manage or disable cookies through your browser settings. Please note that:
To opt out of Facebook Pixel tracking, visit: https://www.facebook.com/settings/?tab=ads. To opt out of LinkedIn tracking, visit: https://www.linkedin.com/psettings/guest-controls. To opt out of Google Analytics, install the Google Analytics Opt-out Browser Add-on.
NShine takes the security of your personal data seriously. We have implemented the following technical, organisational, and administrative safeguards:
Despite our best efforts, no system can guarantee absolute security. NShine cannot be held responsible for security incidents caused by: (a) the Subscriber’s failure to protect login credentials; (b) malware or vulnerabilities on the Subscriber’s own devices; or (c) sophisticated cyberattacks beyond the scope of industry-standard defences. In the event of a data breach affecting your personal data, NShine will notify you and the relevant authorities in accordance with applicable law.
NShine retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Active Subscriber account data | Duration of subscription | Service delivery |
| Subscriber data post-termination | 90 days after termination / expiry | Data export window |
| Financial / billing / invoicing records | 7 years from date of transaction | GST & Income Tax compliance |
| Demo request and lead data | 1 year or until opt-out | Sales follow-up / consent-based |
| Support and communication logs | 1 year from last interaction | Dispute resolution |
| Website analytics (cookies) | As per third-party provider policy | Analytics improvement |
| Security / access logs | 1 year from creation | Security monitoring |
| Legal / regulatory data (if applicable) | As required by applicable law | Legal obligation |
At the end of the applicable retention period, NShine will securely delete or anonymize personal data. Anonymised or aggregated data (which cannot identify any individual) may be retained indefinitely for product research and analytics.
NShine acts as a Data Processor with respect to personal data that Subscribers enter into the Platform about their drivers, customers, employees, and third parties. In this context, the Subscriber is the Data Fiduciary responsible for compliance with applicable data protection law in relation to that data.
Each Subscriber acknowledges and agrees to:
The NShine ERP Platform is a business-to-business (B2B) service intended exclusively for adults operating legitimate commercial transport businesses. The Platformis NOTdirectedator intended for use by individuals under the age of 18 years.
NShine does not knowingly collect, process, or store personal data from minors. If NShine becomes aware that it has inadvertently collected personal data from a minor, it will promptly delete that data.
If you believe that NShine may have collected personal data from a minor, please contact us immediately at [email protected] or call +91 800-891-4488. Parents or guardians who believe their child’s data has been collected may also contact our Grievance Officer (details in Section 19).
NShine may send you marketing communications – including product updates, new feature announcements, pricing offers, industry insights, and event invitations – via email, SMS, WhatsApp, and phone calls. We rely on your consent for such communications.
You provided consent by:
You may opt out of marketing communications at any time by:
Opting out of marketing communications will not affect transactional or service-related notifications (e.g., invoices, password reset emails, subscription reminders), which are necessary for the operation of your account.
Under the Digital Personal Data Protection Act, 2023, and other applicable law, you(as a Data Principal) have the following rights in relation to your personal data held by NShine:
You have the right to request confirmation of whether NShine processes your personal data and, if so, to obtain a copy of that data, information about the categories of data held, the purposes of processing, and the third parties with whom it is shared.
You have the right to request that NShine correct any inaccurate, incomplete, or outdated personal data. Subscribers can update most of their own account details directly within the Platform.
You have the right to request the deletion of your personal data in circumstances where: (a) the data is no longer necessary for the purposes for which it was collected; (b) you withdraw consent, and there is no other legal basis for processing; or (c) the data has been unlawfully processed. Note: NShine may retain data where required by law (e.g., GST records) or to protect its legal rights.
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.
You have the right to have any grievance regarding the processing of your personal data addressed by NShine’s Grievance Officer within the timeline prescribed under the DPDPA2023 (currently 48 hours for acknowledgement; 30 days for resolution). Details of our Grievance Officer are in Section 19.
Under the DPDPA 2023, you have the right to nominate another individual who shall, in the event of your death or incapacity, exercise your data protection rights on your behalf.
You may request your personal data in a structured, machine-readable format to the extent this is technically feasible and required under applicable law. Subscribers may export their operational data directly from the Platform.
To exercise any of the above rights, please submit a written request to:
NShine will acknowledge your request within 48 hours and respond within 30 days. In complex cases, the response period may be extended by a further 30 days, of which you will be notified.
NShine reserves the right to verify your identity before processing any data rights request, and to decline requests that are manifestly unfounded, excessive, or contrary to NShine’s legal
obligations.
NShine reserves the right to derive, use, and commercially exploit anonymised and aggregated data derived from usage of the Platform. Such data will:
This right is retained by NShine even after a Subscriber’s account is terminated or deleted. The use of anonymised data for these purposes does not constitute a breach of this Policy or of the Subscriber’s rights.
The NShine website and Platform may contain links to third-party websites, embedded content (such as demo booking calendars via CRM tools), or integrations with external services (e.g., payment gateways, GPS providers, government portals). NShine:
Any data you submit directly to a third-party website or service – including payment gateways – is governed by that party’s own privacy policy, not this Policy.
NShine reserves the right to revise, update, or replace this Privacy Policy at any time to reflect:
When we make material changes to this Policy, we will:
Your continued use of the Platform after the effective date of any revised Policy constitutesyour acceptance of the changes. If you do not agree with the revised Policy, youmustdiscontinue use of the Platform and notify NShine accordingly.
In accordance with the Information Technology Act, 2000, the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023, NShine has designated a Grievance Officer to address data protection concerns, privacy complaints, and data subject rights requests.
| Designation | Grievance Officer — Data Privacy |
| Organisation | NShine Technologies Pvt Ltd |
| Location | Hyderabad, Telangana, India |
| [email protected] | |
| General Support | [email protected] |
| Phone | +91 800-891-4488 (Available 24 × 7) |
| Contact Form | https://nshineerp.com/contact/ |
| Response SLA | Acknowledgement within 48 hours; Resolution within 30 days |
If you are not satisfied with NShine’s response to your grievance, you may escalate your complaint to the Data Protection Board of India (once constituted under the DPDPA2023) or to the appropriate judicial forum having jurisdiction at Hyderabad, Telangana.
This Privacy Policy is governed by and shall be construed in accordance with the laws of the Republic of India, including the Digital Personal Data Protection Act, 2023; the Information Technology Act, 2000, and rules thereunder; the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011; and other applicable data protection and privacy legislation.
Any disputes arising out of or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of competent authority at Hyderabad, Telangana, India, or resolved by arbitration in accordance with NShine’s Terms and Conditions.
For UAE-based Subscribers: NShine additionally endeavours to comply with the UAE Federal
Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) in respect of the processing of data of UAE residents.
International Subscribers: While this Privacy Policy is governed by the laws of India, NShineendeavours to comply with applicable data protection and privacy regulations of the countries in which its services are offered, including GCC Countries, African nations, and other international jurisdictions, where such laws are applicable to the collection, processing, storage, or transfer of personal data.
BY USING THE NSHINE ERP PLATFORM OR WEBSITE, YOU CONFIRM THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO THIS PRIVACY POLICY IN ITS ENTIRETY.