Privacy Policy

01Who we are and what this policy covers

Nexzem Technologies ("Nexzem", "we", "us") is an IT services and SaaS products company based at First Floor, Prabhu Darshan Tower, Harrawala, Haridwar Road, Dehradun, Uttarakhand 248005, India.

This policy explains how we handle personal data when you visit nexzem.com, contact us, hire us for a project, or use our products: NexEats, NexChat, NexEduHub and NexCall. It is written to align with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 and its rules. If you are in the European Union, we also describe your rights under the GDPR.

02Data we collect

We only collect what we need to run our website, deliver our services and operate our products.

• Contact and enquiry data: your name, email, phone number, company and message when you fill a form, email us or call us.
• Website assistant chats: what you type to the "Ask Nexzem" assistant and its replies, plus the page you were on. The conversation is processed by Google's Gemini API to generate answers and is emailed to our team so a person can follow up. Please do not share sensitive personal data in the chat.
• Website analytics: pages visited, referring site, device and browser type, approximate location and similar usage data. Analytics that use cookies only run if you agree to them; see "Cookies and analytics" below.
• Product account data: login details, business profile, billing details and usage data when you sign up for any Nexzem product.
• NexCall call data: NexCall places and receives calls using AI agents. Calls may be recorded and transcribed, and we store the recordings, transcripts, phone numbers and call metadata so our customers can review and improve their calls.
• NexChat message data: when a business uses NexChat, we process WhatsApp messages, contact names and phone numbers on that business's behalf. For this data the business is the data fiduciary (controller) and Nexzem acts as a data processor following the business's instructions.
• NexEats and NexEduHub data: orders, table and menu details for restaurants, and student, teacher and course records for education customers, processed on behalf of the business or institution that uses the product.

03Why we use your data and our legal basis

We use personal data to reply to enquiries, deliver projects, provide and support our products, process payments, send service notices, improve our website and products, prevent fraud and abuse, and meet legal obligations.

Under the DPDP Act we process personal data based on your consent, or for legitimate uses allowed by law, such as performing a contract you asked for or complying with legal requirements. Where we rely on consent, you can withdraw it at any time by emailing support@nexzem.com. Withdrawal does not affect processing already done.

For EU visitors, our legal bases under the GDPR are consent, performance of a contract, compliance with legal obligations, and our legitimate interests in running and securing our business.

Businesses that use NexCall or NexChat are responsible for getting the consent their customers need, including telling callers that calls may be recorded and getting opt-in before sending WhatsApp messages.

04Who we share data with

We do not sell personal data. We share it only with trusted service providers who help us operate, and only as much as they need:

• Cloud hosting and infrastructure providers that store and run our systems.
• Payment processors and payment gateways that handle billing. We do not store full card details.
• Meta Platforms, for messages sent and received through the WhatsApp Business API in NexChat.
• Telephony, speech and AI service providers that help NexCall place calls and produce transcripts.
• Email, analytics and support tools we use to communicate with you and improve our services, including Resend for sending emails and Google's Gemini API for the website assistant.
• Government or law enforcement authorities, when required by law or to protect our rights and users.

05Cookies and analytics

nexzem.com uses no advertising or social media tracking cookies. We use the analytics tools below to understand which pages are useful and what to fix. Tools that set cookies or similar identifiers stay switched off until you choose "Accept all" or turn them on under "Preferences" in the cookie banner. "Reject all" is as easy as accepting, and the site works the same either way.

Your choice is saved in your browser's local storage (not a cookie, and never sent to us) for up to 12 months, after which we ask again. You can change or withdraw it at any time with the "Cookie settings" link in the footer of every page. When you withdraw consent we delete the analytics cookies on our domain and stop loading the tools.

• Google Analytics 4 (Google LLC), only with your consent: counts visits, pages viewed, how you arrived (for example a search engine or a link), device and browser type and approximate location derived from your IP address. It sets first-party cookies named _ga and _ga_<ID> that last up to 2 years. We use Google Consent Mode with all advertising signals set to denied, and we do not use Google Analytics data for advertising.
• Microsoft Clarity (Microsoft Corporation), only with your consent: heatmaps and session replays showing how pages are scrolled and clicked, so we can find confusing layouts. Clarity is configured to mask the text on pages and anything you type into forms. It sets first-party cookies named _clck (up to 1 year) and _clsk (1 day), and Microsoft may set its own cookies, such as MUID, on Microsoft domains.
• Plausible Analytics (Plausible Insights OÜ, EU), always on: privacy-friendly visit counts with no cookies and no persistent identifiers. It does not store IP addresses or build profiles of individual visitors, so it does not need consent.
• Conversion events: when you send our contact form or tap a WhatsApp, phone or email link, the tools you allowed record that event (for example "contact form sent"). The content of your message is never sent to any analytics tool.
• You can also block or delete cookies in your browser settings, or use a browser extension that blocks analytics. Google offers an opt-out add-on at tools.google.com/dlpage/gaoptout.

06International transfers

Some of our service providers, including cloud hosts and Meta, may store or process data outside India. We transfer data only to countries not restricted by the Government of India under the DPDP Act, and we use contractual safeguards with our providers. For EU visitors, we rely on appropriate safeguards such as standard contractual clauses where required.

07How long we keep data

We keep personal data only as long as needed for the purpose it was collected, or as required by law (for example tax and accounting records). Enquiry data is generally deleted when no longer needed for follow up. Product data is kept while the account is active and deleted or anonymised within a reasonable period after the account closes, unless the customer asks us to delete it sooner or the law requires us to keep it.

For NexCall recordings and transcripts and NexChat message data, retention follows the settings and instructions of the business customer that controls that data.

08How we protect data

We use reasonable security practices as required under the IT Act and the DPDP Act, including encryption in transit, access controls, restricted staff access, logging and regular backups. No system is fully secure, so we cannot guarantee absolute security. If a personal data breach occurs, we will notify affected users and the Data Protection Board of India as required by law.

09Your rights

Depending on where you live, you have the right to:

• Access a summary of the personal data we hold about you and how it is used.
• Correct, complete or update inaccurate data.
• Erase data that is no longer needed, or withdraw consent.
• Nominate another person to exercise your rights in case of death or incapacity (under the DPDP Act).
• Raise a grievance with us, and if unresolved, with the Data Protection Board of India.
• For EU visitors: object to or restrict processing, data portability, and complain to your local supervisory authority.

10Children, grievance officer and changes

Our website and products are not meant for children to use on their own. We do not knowingly collect personal data of anyone under 18 without verifiable consent from a parent or guardian. Where NexEduHub is used by schools, the institution is responsible for getting that consent.

To exercise your rights or raise a complaint, contact our Grievance Officer at support@nexzem.com, phone +91-7302622997, or by post at First Floor, Prabhu Darshan Tower, Harrawala, Haridwar Road, Dehradun, Uttarakhand 248005, India. We aim to respond within the time required by law. If your data was collected by one of our business customers (for example through NexChat or NexCall), we may forward your request to them.

We may update this policy from time to time. The "Last updated" date at the top shows when it last changed. For significant changes we will give notice on our website or by email.