Privacy
Policy

Nexa AI Solution ("Company," "we," "us," or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website (nexaaisolution.com), use our services, or communicate with us.

This policy applies to all visitors, prospective clients, active clients, and users of our website and services. By accessing our website or engaging our services, you consent to the data practices described in this policy.

This policy is compliant with the Information Technology Act, 2000 (and its amendments), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and is designed in alignment with internationally recognised data protection principles including those of the Digital Personal Data Protection Act, 2023 (DPDPA) of India.

We collect only the information that is necessary to provide our services effectively. This includes:

Information You Provide Directly:

• Name, email address, phone number, and company name (submitted via contact forms, demo requests, or consultations).
• Project requirements, business information, and technical specifications shared during the engagement.
• Payment and billing information (processed securely through authorised third-party payment gateways; we do not store full card details).
• Messages and communications via our website chat, email, or WhatsApp.

Information Collected Automatically:

• Browser type, device type, operating system, and screen resolution.
• IP address, approximate geographic location, and timezone.
• Pages visited, time spent on pages, click patterns, and referral sources.
• Cookies and similar tracking technologies (see Section 6 for details).

Information from Third Parties:

• Business contact details provided via referrals or professional networking platforms (e.g., LinkedIn), solely for the purpose of responding to a business inquiry.

We use your personal information for the following lawful purposes:

• Service Delivery: To provide, maintain, and improve our AI automation, web development, and software services.
• Communication: To respond to inquiries, send project updates, provide support, and keep you informed about your project status.
• Business Operations: To process payments, manage client accounts, issue invoices, and fulfil contractual obligations.
• Analytics & Improvement: To understand how our website is used, identify performance issues, and continually improve the user experience.
• Marketing: To send newsletters, service updates, or promotional materials — only with your explicit prior consent. You may unsubscribe at any time via the unsubscribe link in any such email or by contacting us directly.
• Legal Compliance: To comply with applicable Indian laws, regulations, court orders, and lawful government requests.
• Security: To detect, prevent, and address fraud, security breaches, or technically prohibited activities.

We will not use your data for any purpose that is incompatible with the purposes listed above without your explicit consent.

We do not sell, rent, or trade your personal data to any third parties for commercial purposes. We may share your information only in the following strictly limited circumstances:

• Service Providers: Trusted third-party tools and platforms that help us operate our business (e.g., cloud hosting providers, analytics platforms, payment gateways). These providers operate under strict confidentiality agreements and are prohibited from using your data for any other purpose.
• AI Technology Providers: Our AI-powered services may use APIs from providers including Google (Gemini / Vertex AI) and OpenAI. Data passed to these APIs for processing is governed by their respective enterprise data protection commitments. We use configurations that prevent your data from being used to train third-party general models where such controls are available.
• WhatsApp / Meta: When we build WhatsApp automation solutions, message interactions are processed through the Meta (WhatsApp Business API) platform, subject to Meta's Data Processing Terms and Privacy Policy.
• Legal Requirements: When required by applicable law, subpoena, court order, or government authority, or to protect the rights, property, or safety of Nexa AI Solution, its clients, or the public.
• Business Transfers: In the event of a merger, acquisition, or restructuring, your data may be transferred as part of that transaction, subject to the same privacy protections.

We retain your personal data only for as long as strictly necessary to fulfil the purposes outlined in this policy or as required by applicable law:

• Client project data: Retained for up to 3 years after project completion, for reference, warranty, and support purposes.
• Contact form & inquiry submissions: Retained for up to 12 months from the date of submission.
• AI assistant & chatbot conversations: Session logs retained for up to 90 days for quality assurance and support purposes.
• Financial & billing records: Retained for the period required by applicable Indian tax and accounting laws (typically 7–8 years).
• Marketing preferences: Retained until you withdraw consent or unsubscribe.

After the applicable retention period, personal data is securely and permanently deleted or anonymised such that it can no longer be linked to an individual.

Our website uses cookies and similar technologies to enhance your experience. The types we use include:

• Essential Cookies: Required for the website to function properly (e.g., session management, security tokens). These cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with our website so we can improve it (e.g., Google Analytics). These are only set with your consent where required.
• Preference Cookies: Remember your settings and preferences for an improved experience on return visits.

You can control or disable non-essential cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the website. We do not use cookies for intrusive cross-site tracking or behavioural advertising.

We implement industry-standard technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption (HTTPS) for all data transmitted through our website.
• Secure, access-controlled storage of sensitive information.
• Regular security reviews and updates to our infrastructure and software.
• Restricted data access — only authorised personnel with a business need may access client data.
• Use of reputable, security-certified third-party services for hosting and data processing.

While we take all reasonable precautions, no method of data transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to responding swiftly to any security incident. In the event of a data breach that poses a risk to your rights, we will notify you as required by applicable law.

As a data principal under applicable Indian law (DPDPA 2023) and internationally recognised principles, you have the following rights with respect to your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of any inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data, subject to our legal retention obligations.
• Right to Restrict Processing: Request that we limit how we use your data in certain circumstances.
• Right to Data Portability: Request a structured, machine-readable copy of your data for transfer to another provider.
• Right to Object: Object to the processing of your data for direct marketing at any time, without question.
• Right to Withdraw Consent: Withdraw any previously given consent for data processing at any time, without affecting the lawfulness of prior processing.
• Right to Grievance Redressal: Lodge a complaint with us regarding our data practices. We will respond within 30 days.

To exercise any of these rights, please submit a written request to nexaaisolution@gmail.com with the subject line "Data Rights Request." We will acknowledge your request within 7 days and respond within 30 days.

When Nexa AI Solution builds and deploys AI assistants, chatbots, or automation workflows for a Client, the following data practices apply:

• Data entered by end-users into Client-deployed AI systems (e.g., WhatsApp bots) is processed on behalf of the Client. The Client is the Data Fiduciary responsible for ensuring end-user consent and compliance with applicable data protection laws.
• Nexa AI Solution acts as a Data Processor for Client-deployed systems and processes such data solely as instructed by the Client's configured system.
• Clients are advised to include a clear privacy notice in their own end-user-facing products powered by Nexa AI Solution's technology.
• AI-generated outputs may contain errors or inaccuracies. Clients are responsible for reviewing outputs before using them in critical or public-facing contexts.

Our services are exclusively directed to business professionals and are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected data from an individual under 18 without verified parental or guardian consent, we will take prompt steps to delete such data. If you believe we may have collected data from a minor, please contact us immediately at nexaaisolution@gmail.com.

Some of our third-party service providers (e.g., cloud platforms, AI APIs) may process data outside of India. When such transfers occur, we ensure that appropriate safeguards are in place, consistent with applicable Indian data protection law and the requirements of the DPDPA 2023. By using our services, you consent to such transfers where necessary for service delivery.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, applicable legal requirements, or other factors. The updated policy will be posted on this page with a revised "Last Updated" date. For material changes, we will provide a prominent notice on our website and, where applicable, notify active clients directly via email.

We encourage you to review this policy periodically. The current version is always available at nexaaisolution.com/privacy. Continued use of our services after any changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data handling practices, or if you wish to exercise your data rights, please contact our designated point of contact: