Draft for legal review. Not yet in force.
Privacy Notice
1. Who we are
Nexovia is operated by Nexovia Technologies Private Limited (CIN U62020MH2025PTC464221), a company registered in India with its registered office at Vasai East, Maharashtra 401208 (“Nexovia”, “we”). For the personal data described in this notice we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023. For personal data that our customers store in apps they run on Nexovia, the customer decides why and how it is processed and we process it only on their instructions (see section 4).
2. What we collect
- Website visits: IP address, browser type, page requested and time, recorded by our web servers for security. This site sets no cookies and loads no analytics, advertising or third-party scripts.
- Early-access, Quick Connect and contact requests: name, phone number, email, company, what you are interested in and your message, and a record of the consent you gave (the wording you agreed to, the purposes and the time).
- Account and billing: name, work email, phone, organisation, GSTIN, billing address, and payment status from our payment provider. We never see or store full card numbers.
- Verification: identity and address details of the account holder and the organisation, as Indian cybersecurity directions require of cloud providers.
- Security and usage records: sign-ins, IP addresses, actions taken in the console and API, and service usage, kept as an audit trail.
- Support: what you send us and our replies.
3. Why we use it
- To answer requests, open and run your account, and provide the service you signed up for.
- To verify customers, prevent fraud and abuse, and keep the platform secure.
- To bill you and meet tax, accounting and other legal duties.
- To tell you about changes to the service, security notices and, only if you agree, product news.
We rely on your consent or on a legitimate use allowed by section 7 of the Act, such as information you give us voluntarily for a stated purpose, or processing needed to comply with law. We do not sell personal data and do not use it for advertising.
4. Data inside customer apps
Our customers build apps and store their own users' data on Nexovia. For that data the customer is the Data Fiduciary and is responsible for giving its users notice, obtaining consent and handling their requests. We process it under our Data Processing Addendum: only to run the customer's apps, kept separate from every other customer, protected as described below, and deleted when the customer asks or the contract ends. If you use a customer's app, please contact that business first.
5. Where data is kept
Our servers, databases, file storage and backups are in data centres in India. Public traffic to Nexovia is encrypted and passes through a network-protection service that filters attacks; that service may process encrypted traffic in transit at locations outside India. Any transfer outside India follows section 16 of the Act and never goes to a country the Government of India has restricted.
6. Who we share it with
- Service providers that help us run Nexovia: data-centre hosting in India, network protection, email delivery and payment processing. Each is bound by contract to use the data only for us.
- Our sales and customer-relationship system, which runs on Nexovia in India, so that our team can call you back about your request.
- Authorities, when Indian law requires it, for example a court order or a lawful direction under the Information Technology Act, 2000.
- A buyer or successor, if Nexovia's business is transferred, under the same protections.
7. How long we keep it
| Data | Kept for |
|---|---|
| Early-access requests that do not become customers | 12 months |
| Account data | While the account is open, then 30 days for export, then deleted |
| Verification records | 5 years after the account ends, as cybersecurity directions require |
| Billing and tax records | As long as tax law requires |
| Security and access logs | At least one year, kept in India |
| Backups | Expire automatically within 6 months of deletion |
8. How we protect it
Encryption in transit and at rest, private servers that are not reachable from the internet, a separate identity for every app and person, multi-factor sign-in for our staff, least-privilege access, audit logs, and encrypted backups tested by regular restores. If a breach affects your personal data we will tell you and the Data Protection Board of India as the law requires, and report it to CERT-In.
9. Your rights
You can ask us for a summary of your personal data and how we use it; to correct, complete or update it; to erase it where we no longer need it; to withdraw consent at any time; and to nominate someone to act for you if you die or become unable to act. Write to hello@nexovia.co.in. We respond within the time the DPDP Rules allow. If you are not satisfied, you may complain to the Data Protection Board of India after using our grievance process.
10. Children
Nexovia is a service for businesses and is not meant for anyone under 18. We do not knowingly collect children's data for our own purposes.
11. Your browser
No cookies. If you choose light or dark mode, that choice is saved in your own browser's storage and never sent to us.
12. Grievance Officer
The Grievance Officer, Nexovia Technologies Private Limited, Vasai East, Maharashtra 401208, India. Email hello@nexovia.co.in. We acknowledge complaints within 24 hours and resolve them within 15 days.
13. Changes and languages
We will post any change here with its date, and email customers 30 days before a material change takes effect. This notice is available in English; ask us for a copy in Hindi or another language listed in the Eighth Schedule to the Constitution of India.