TexaCoreERP

Privacy Policy

Version 2026-10-27 · Effective 27 October 2026

This policy explains how Next Revolution for Software Development, Dublin, Ireland ("Next Revolution", "we", "us") handles personal data in connection with TexaCore: our website texacore.ai, the TexaCore cloud service, the TexaCore desktop edition, and our support, sales and phone channels. TexaCore is the name of our product. English is the governing text; translations are provided for convenience.

1. Who we are and what role we play

1.1 Controller. For the personal data described in section 2 we decide why and how the data is used, so we are the controller. You can reach us about privacy at [email protected], or write to Next Revolution for Software Development, Dublin, Ireland. Our company registration number and registered address are available on request at the same email address.

1.2 Processor. TexaCore customers are businesses. The business data they put into TexaCore (for example their customers, suppliers, employees, documents and accounts) is processed by us on their behalf and on their instructions, so for that data our customer is the controller and we are the processor. Section 3 and our Data Processing Agreement cover it. If your data is in a customer's TexaCore and you want to use your rights, please contact that customer; we help them respond.

1.3 Where these two roles apply: we are a controller for website visitors, people who contact us, account holders and administrators of our customers, the licence and device information of the desktop edition, and prospects. We are a processor for everything our customers store in TexaCore, including the cloud backup copies of desktop company files.

2. Personal data we use as controller

2.1 Visitors to texacore.ai. We receive your IP address, browser and device type, the pages you request, the referring page and the time of each request. Our hosting provider (Cloudflare) and we use this to deliver and secure the site. Legal basis: legitimate interests in running a secure website. With your consent only, we also use analytics (Google Analytics and Microsoft Clarity, including session recordings and heatmaps), advertising measurement (Google Ads and the Meta Pixel), campaign attribution (the campaign, advertisement or search that brought you) and a live-visitor view for our team (the page you are on and your approximate city). Legal basis: your consent, which you can withdraw at any time. Details are in the Cookie Policy.

2.2 Contact forms, demo and trial requests, and leads. Name, email, phone number, company, your message, your language and, if you consented to analytics, the campaign that brought you. We use them to answer you, send a quote or demo, and set up your trial. We may notify our team by email and by an internal Telegram channel. Legal basis: steps at your request before a contract, and legitimate interests in answering enquiries.

2.3 Website chat and calls. If you use the chat on texacore.ai, the messages and images you send are processed by our AI sales assistant, which uses an AI provider (see the AI Features Notice). Please do not send sensitive personal data in the chat. If you call us through the website call button or by phone, the call connects through our telephony provider; calls may be recorded and transcribed so that we can follow up and keep a record, and if a call is recorded we tell you at the start of the call. Legal basis: legitimate interests in handling enquiries, and your consent where the law requires it.

2.4 Customer accounts and subscriptions. Name, email, phone, company and role of account holders and administrators; sign-in and security data; billing contacts, invoices and payment records; the plan, limits and usage of the subscription; support requests and our replies; and the activity and audit logs the service keeps. Legal basis: performing our contract with the customer, legal obligations (accounting and tax), and legitimate interests in security, fraud prevention and keeping the service working.

2.5 Desktop edition. The licence and device information the program sends, described in detail in the Desktop Edition End-User Licence Agreement (section 7): the licence key, a device identifier, the computer name, operating system, local IP address, the public IP address and approximate location that our servers work out from the connection, usage counts and plan information, and technical error reports. We use them to run licences, apply plans, provide support, secure the service and prevent abuse. Legal basis: performing the licence, and legitimate interests in licensing, security and support.

2.6 Emails and newsletters. We send service messages that you need (for example security notices, invoices and changes to terms). We send marketing messages to business contacts only where the law allows it or you have agreed, and every marketing message has an unsubscribe link. Legal basis: contract for service messages; consent or, for business contacts, legitimate interests and the rules on direct marketing for the rest.

2.7 Business contacts from public sources. If we contact a business about TexaCore using contact details that the business has published in public business sources, we hold the business name, the public contact details and a note of the source. We tell you where we found them when we first contact you, and you can object at any time. Legal basis: legitimate interests in business-to-business promotion.

2.8 Messaging channels. If you contact us through Telegram or WhatsApp, we process the messages you send and your account identifier on that service.

2.9 Security, error reports and legal obligations. Security logs, error reports (scrubbed of access tokens, email addresses and long numbers), and records we must keep or use to defend legal claims. Legal basis: legitimate interests and legal obligations.

2.10 We collect data from you directly, from the program or service you use, and from the tools described above. We do not collect special-category data on purpose; please do not send it to us.

3. Business data we process for customers (as processor)

3.1 We process the data that customers enter into TexaCore, import into it, attach to documents or share through it, and the backup copies of it. That data can include personal data about the customer's own customers, suppliers, employees and contacts, including payroll and human-resources records if the customer uses those modules.

3.2 We process this data only to provide the service to the customer (hosting, backup, support and security), only on the customer's documented instructions, and under the terms of the Data Processing Agreement. We use the companies listed on the Subprocessors page.

3.3 We do not sell this data, we do not use it for advertising, and we do not use it to train AI models of our own. AI features that send data to an AI provider are optional and are explained in the AI Features Notice.

3.4 The customer decides what to enter, who may see it and how long to keep it. When a customer ends its subscription we follow the export and deletion steps in the Terms of Service.

4. Cookies and similar technologies

4.1 We use essential browser storage to make the website work. Analytics and marketing tags start only if you agree. You can change your choice at any time with "Cookie settings" in the footer of every page. The Cookie Policy lists every cookie, tag and storage item.

5. Who receives personal data

5.1 Service providers. Companies that help us run TexaCore, under contracts that limit their use of the data: hosting and database (Supabase on Amazon Web Services), delivery and security (Cloudflare), email (Resend), AI providers, voice and messaging providers, and the analytics and advertising tools you agree to. The Subprocessors page names them and says what each does.

5.2 Advisers and authorities. Professional advisers, auditors and insurers bound by confidentiality; and authorities, courts or other parties where the law requires or allows us to disclose.

5.3 Business changes. If our business is sold or reorganised, personal data may transfer to the new owner, who must respect this policy. We tell customers beforehand.

5.4 We do not sell personal data. We do not give personal data to advertisers, except what the advertising tags you agreed to collect themselves.

6. International transfers

6.1 Our cloud service is hosted on Supabase on Amazon Web Services in London, United Kingdom, and delivered through Cloudflare. The European Commission recognises the United Kingdom as providing an adequate level of protection for personal data, so data can flow between Ireland and the United Kingdom.

6.2 Some of our providers process data outside the United Kingdom and the European Economic Area, for example in the United States. In these cases we rely on an adequacy decision (such as the EU–US Data Privacy Framework, where the provider is certified) or on Standard Contractual Clauses with the UK addendum or the UK International Data Transfer Agreement, as set out in the provider's data processing terms. You can ask us for a copy of the safeguards at [email protected].

6.3 Our customers choose where they work from. Data entered into the desktop edition stays on the customer's computer, apart from the cloud backup copies and the information described in section 2.5, which are held in London.

7. How long we keep personal data

7.1 We keep personal data only as long as we need it for the purpose it was collected for, or as the law requires. Our usual periods are:

  • Contact requests and leads: up to 24 months after the last contact.
  • Call recordings and transcripts: up to 24 months.
  • Account and subscription data: for as long as the account exists.
  • Invoices and payment records: 6 years after the end of the financial year, as Irish tax and company law requires.
  • Support requests: up to 3 years after they are closed.
  • Records of your acceptance of our legal documents (which document and version, when, and the browser or device used): for as long as the account exists and 3 years after it is deleted, then erased. You accept each document once; we do not ask again when we publish a later version.
  • Desktop licence and device records: for as long as the licence exists and up to 24 months after it ends.
  • Website analytics and advertising data: for the period configured in each tool, then deleted by the provider.
  • Your cookie choice: 12 months in your browser, then we ask again.
  • Error reports: until the error is fixed.
  • Customer business data we process as processor: for the life of the subscription and the 30-day export period that follows, then deleted from live systems within 30 days. Copies in backups are overwritten in the normal backup cycle.

8. Your rights

8.1 Under data protection law (including the GDPR and the UK GDPR) you have the right to: be informed; access your personal data; have it corrected; have it erased; restrict its use; receive it in a portable format; object to processing based on legitimate interests or direct marketing; and withdraw your consent at any time, without affecting what happened before.

8.2 To use a right, write to [email protected]. We may ask you to confirm who you are. We answer within one month; if your request is complex we may extend this by up to two further months and tell you why. We do not charge a fee unless a request is clearly unfounded or excessive.

8.3 For data we process as processor, we pass your request to the customer concerned and help them answer it.

8.4 You have the right to complain to a supervisory authority. In Ireland this is the Data Protection Commission (https://www.dataprotection.ie). In the United Kingdom it is the Information Commissioner's Office (https://ico.org.uk). You can also complain to the authority in the country where you live or work. We would appreciate the chance to put things right first.

9. Security

9.1 We protect personal data with the measures described on the Security page: connections protected with TLS, encryption at rest by our hosting provider, role and company permissions, an audit trail and backups. No system is perfectly secure. If a personal data breach affects you, we will notify you and the authorities as the law requires.

10. Automated decisions and AI

10.1 We do not take decisions about individuals that have legal or similarly significant effects by solely automated means. The AI features described in the AI Features Notice help users to work; people review their output.

11. Children

11.1 Our website and services are for businesses and are not directed at children. We do not knowingly collect personal data from anyone under 16.

12. Other countries

12.1 If you live in a country with its own data protection law, for example the United Kingdom, Ukraine or Saudi Arabia, you may have additional rights. Write to us and we will tell you how to use them.

13. Changes to this policy

13.1 We may update this policy. For a material change we tell customers by email or in the service. The version number and effective date are at the top, and the current version is always at https://texacore.ai/legal/privacy/.

14. Contact

Privacy questions and requests, and general questions: [email protected]. Next Revolution for Software Development, Dublin, Ireland.