1. Scope
This Privacy Policy explains how NexxFlow may collect, use, disclose, retain and protect personal data when you use this website or contact us about services. It should be read together with the actual technical and vendor configuration used in production.
2. Information we may collect
For enquiries, we may collect the information you choose to provide, including your name, work email, business name, phone number, industry, number of branches, current tools, budget range, timeline and project description. We may also process limited technical information needed to operate and secure the website.
3. Purposes
We may use enquiry information to respond to requests, understand project requirements, prepare proposals, provide agreed services, communicate about an engagement, maintain security, prevent abuse, maintain records and comply with applicable legal obligations.
4. Consent and withdrawal
Where consent is the basis for processing, consent should be specific, informed and given through clear affirmative action. You may request withdrawal of consent using the contact details below. Withdrawal does not invalidate processing that was lawfully completed before withdrawal and may affect our ability to provide a service that depends on the relevant processing.
5. Sharing and processors
We may use service providers for hosting, databases, communications, security, analytics or other business functions. We aim to limit information shared to what is necessary for the relevant function and to use appropriate contractual and technical safeguards.
6. Retention
We retain information for as long as reasonably necessary for the purpose for which it was collected, an ongoing business relationship, legal requirements, accounting, security, dispute resolution or other legitimate operational needs. Specific retention periods should be configured and reviewed against the actual processing performed by NexxFlow.
7. Security
We use reasonable technical and organisational safeguards appropriate to the information and system involved. No internet-connected system can be guaranteed completely secure. Production credentials and service keys should remain server-side and access should be restricted according to role.
8. Your requests
Subject to applicable law and the stage at which relevant provisions are in force, you may have rights concerning access to information, correction, erasure, withdrawal of consent and grievance redressal. Use our Data request / grievance page or email us.
9. Indian data-protection framework
NexxFlow operates with reference to applicable Indian data-protection and information-technology requirements, including the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 as and when their respective provisions apply. The commencement of provisions is phased, so this notice should be reviewed as the legal framework and NexxFlow's processing practices change.
10. Cookies and local storage
This website may use essential browser storage to remember privacy choices. Optional analytics should only be enabled when configured and disclosed for the production deployment. The current website does not represent demo dashboard metrics as real customer data.
11. Contact
Privacy and data requests: dhruvi@nexxflow.online. Replace this address and any legal-entity details with the actual designated contact before launch.