Privacy Policy
NexAvinya AI Private Limited
Effective Date: 1 August 2026 | Version 1.0
1. Introduction
NexAvinya AI Private Limited ("NexAvinya", "we", "our", or "us"), registered in Hyderabad, Telangana, India, builds AI-enabled, industry-specific business systems. We are committed to protecting the privacy and personal data of everyone who interacts with our website (nexavinya.ai), our platform (app.nexavinya.ai), and our communication channels.
This Privacy Policy is prepared in compliance with:
- Digital Personal Data Protection Act, 2023 (DPDP Act) and DPDP Rules, 2025 (India)
- General Data Protection Regulation (GDPR) (EU/UK, where applicable)
- Information Technology Act, 2000 and IT (Amendment) Act, 2008 (India)
2. Data We Collect
Identity & Contact Data: Full name, phone number, email address, company name — collected when you book a demo, submit an enquiry, or subscribe to updates
Business Context Data: Industry, team size, and the goals you describe in your enquiry — used to prepare a relevant demo
Technical Data: IP address, browser type, device information, session logs
Communication Data: Email correspondence, WhatsApp message history, call notes
Platform Account Data: Login credentials (hashed), role, and usage logs for customers of the platform
Business records your company manages inside the platform (leads, projects, invoices, employee records and similar) are processed by us on your behalf as a Data Processor — see our Data Processing Agreement.
3. Lawful Basis for Processing
| Data Category | Lawful Basis |
|---|---|
| Demo & enquiry data | Consent (given via website form / WhatsApp opt-in) |
| Subscription & billing data | Contractual necessity |
| Communication records | Legitimate interest (sales & support follow-up) |
| Security & audit logs | Legal obligation |
| Marketing communications | Explicit consent |
4. How We Use Your Data
- To respond to enquiries and schedule product demos
- To send product updates, pricing information, and launch-offer notifications (with consent)
- To provision, operate, and support your platform subscription
- To improve our website, platform, and AI features
- To meet legal, regulatory, and audit requirements
5. Data Sharing & Third Parties
We do not sell your personal data. We share data only with:
| Recipient | Purpose | Safeguard |
|---|---|---|
| Cloud & database hosting providers | Website & platform infrastructure | Data Processing Agreements / SCC |
| Transactional email providers | Enquiry notifications & product email | Consent-based, DPA in place |
| Meta (WhatsApp Business) | WhatsApp communication | Consent-based, Meta Business API |
| Government authorities | Regulatory compliance | Legal obligation |
6. Your Rights Under DPDP Act 2023
As a Data Principal, you have the right to:
- Access — Request a copy of all personal data we hold about you
- Correction — Request correction of inaccurate or incomplete data
- Erasure — Request deletion of your personal data (subject to legal retention obligations)
- Grievance Redressal — Raise a complaint with our Data Protection Officer
- Nominate — Nominate another person to exercise rights on your behalf
To exercise any right: Email privacy@nexavinya.ai with subject "Data Rights Request". We will respond within 7 working days as mandated by DPDP Rules 2025.
7. Data Retention
| Data Type | Retention Period |
|---|---|
| Demo & enquiry data | 2 years from last interaction |
| Subscription & billing records | 7 years (Income Tax compliance) |
| Communication records | 1 year |
| Audit logs | 7 years |
| Consent records | Duration of relationship + 3 years |
| Security logs | 2 years |
8. Data Security
We implement the following technical and organisational security measures:
- Encryption at rest and in transit (AES-256 / TLS 1.3)
- Role-based access control (RBAC) — staff access only what they need
- Multi-factor authentication for internal system access
- Regular access reviews and audit log monitoring
- Infrastructure hosted in India-region data centres where available
9. Cookies
Our website uses essential cookies for functionality and optional analytics cookies (with consent). See our Cookie Policy for full details.
10. Children's Data
We do not knowingly collect personal data from individuals under 18 years of age. If you believe we have inadvertently collected such data, please contact us immediately at privacy@nexavinya.ai.
11. Data Breach Response
In the event of a personal data breach, we will:
- Contain the breach within 24 hours of discovery
- Notify the Data Protection Board of India within 72 hours (as required by DPDP Act)
- Notify affected individuals without undue delay
- Document the breach, its impact, and remediation steps
12. Grievance Officer / Data Protection Officer
Designation: Data Protection Officer
Organisation: NexAvinya AI Private Limited
Email: privacy@nexavinya.ai
Address: Registered Office, Hyderabad, Telangana, India
Response time: Within 7 working days
13. Updates to This Policy
We may update this Privacy Policy periodically. The latest version will always be available at nexavinya.ai/legal/privacy-policy. Material changes will be communicated via email or platform notification.
Last updated: 1 August 2026 | Version 1.0