Privacy Policy

We collect information you provide directly to us and information collected automatically through your use of our services.

Information You Provide:

Contact details (name, email address, phone number, company name)

Information submitted through forms (contact forms, consultation booking, project intake forms)

Communications you send us (emails, chat messages, support requests)

Business information required to deliver contracted services

Information Collected Automatically:

Browser type, operating system, device type, and screen resolution

IP address and approximate geographic location

Pages visited, time spent on pages, and navigation patterns

Referring URLs and exit pages

Cookies and similar tracking technologies (see our Cookie Policy for details)

Information From Third Parties:

We may receive information about you from business partners, analytics providers, and social media platforms when you interact with our content on those platforms.

We use the information we collect to:

- Deliver, operate, and improve our services

Respond to your inquiries and provide customer support

Send transactional communications (service updates, invoices, project updates)

Send marketing communications with your consent (you may opt out at any time)

Analyze website usage to improve user experience

Detect, prevent, and respond to fraud, security incidents, and abuse

Comply with legal obligations and enforce our agreements

Process payments and manage billing

We do not sell your personal data to third parties under any circumstances.

Where applicable under the General Data Protection Regulation (GDPR) or India's Digital Personal Data Protection Act 2023 (DPDP Act), we process your personal data on the following legal bases:

- Contractual necessity: To perform services you have engaged us to deliver

Legitimate interests: To improve our services, prevent fraud, and communicate with existing clients

Consent: For marketing communications and non-essential cookies

Legal obligation: Where processing is required by applicable law

You have the right to withdraw consent at any time for consent-based processing.

We share your information only in the following circumstances:

- Service providers: Trusted third-party vendors who assist us in delivering our services (cloud hosting, payment processing, email delivery, analytics). These vendors are bound by data processing agreements.

Business transfers: In connection with a merger, acquisition, or sale of assets, with appropriate confidentiality obligations.

Legal compliance: When required by law, regulation, court order, or to protect the rights and safety of Nexora, our clients, or the public.

With your consent: For any other purpose with your explicit consent.

We do not share your data with advertisers or data brokers.

We retain your personal data for as long as necessary to provide our services and comply with our legal obligations:

- Client project data: Retained for the duration of the engagement plus 7 years (for tax and legal compliance)

Contact form submissions: 2 years unless a business relationship is established

Marketing consent records: Retained until consent is withdrawn plus 3 years

Website analytics data: 26 months in aggregate, anonymized form

Payment records: As required by Indian tax law (minimum 8 years)

You may request deletion of your personal data subject to our legal retention obligations.

Subject to applicable law, you have the following rights regarding your personal data:

- Access: Request a copy of the personal data we hold about you

Correction: Request correction of inaccurate or incomplete data

Deletion: Request deletion of your data (subject to legal retention requirements)

Portability: Receive your data in a structured, machine-readable format

Objection: Object to processing based on legitimate interests

Restriction: Request restriction of processing in certain circumstances

Withdrawal of Consent: Withdraw consent for consent-based processing at any time

To exercise any of these rights, contact us at privacy@nexora.in. We will respond within 30 days.

We implement industry-standard technical and organizational security measures to protect your data, including:

- TLS/SSL encryption for all data in transit

AES-256 encryption for sensitive data at rest

Role-based access controls limiting data access to authorized personnel

Regular security audits and vulnerability assessments

Multi-factor authentication for internal systems

Secure development practices including code review and dependency scanning

No security system is impenetrable. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant authorities as required by law.

Our primary data infrastructure is located in India. Where we use service providers that process data outside India (such as cloud services with global infrastructure), we ensure appropriate safeguards are in place including standard contractual clauses or adequacy decisions as applicable.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected data from a minor, we will promptly delete it. If you believe we have collected data from a child, please contact us immediately at privacy@nexora.in.

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. We will notify you of material changes by posting a notice on our website and, where appropriate, by email. The "Last Updated" date at the top of this Policy indicates when it was last revised. Continued use of our services after changes constitutes acceptance of the updated Policy.

For questions, concerns, or requests relating to this Privacy Policy or your personal data, contact our Data Protection Officer:

Email: privacy@nexora.in
Address: Nexora Technologies Private Limited, 123 Tech Park, Sector 18, Gurugram, Haryana 122015, India
Phone: +91 98765 43210

You also have the right to lodge a complaint with the Data Protection Board of India under the DPDP Act 2023.