Privacy Policy

01 Introduction & Scope

Nerotix Technologies Private Limited provides technology, software, communication, identity verification, eKYC, fintech and related digital services to businesses, developers and enterprises.

This Privacy Policy applies to visitors of Nerotix websites, customers, account holders, API subscribers, developers, business users and other individuals whose information is processed through our services.

Depending on the service being used, Nerotix may act as a service provider, data processor or, where applicable, a data controller. Where our customer submits information to us for processing on its behalf, that customer remains responsible for establishing the appropriate purpose and lawful basis for such processing and for obtaining required notices and consents from its users.

02 Information We Collect

Depending on the service and your interaction with us, we may collect:

• Account information: name, email address, phone number, company name, business details and login-related information.
• Billing information: subscription, transaction and payment-related information required for billing and account administration.
• Technical information: IP address, browser type, device information, operating system, application information, logs and similar technical identifiers.
• Usage information: pages visited, features used, API usage, session information, service interactions and related analytics.
• Communication information: information you provide when contacting us, submitting enquiries, requesting support or communicating with our team.
• Business and service information: information relating to products, services, workflows or integrations you request or use.
• Verification information: where applicable, identity, KYC, business, banking, vehicle or other verification inputs submitted through our verification services.
• Messaging information: where applicable, incoming/outgoing communication or message-related data processed through communication services and integrations.

03 How We Collect Information

We may collect information when you create an account, use our websites or applications, subscribe to a service, submit an API request, contact us, make a payment, interact with our support team, or otherwise use our services.

We may also receive information from customers, authorized service providers, verification partners, payment providers, infrastructure providers and other third parties where permitted by applicable law.

04 How We Use Information

We may use information for purposes including:

• Providing, operating and maintaining our websites, platforms, APIs and services.
• Creating and administering customer accounts.
• Authenticating users and securing accounts and systems.
• Processing transactions, subscriptions and billing.
• Providing identity verification, eKYC, communication and other requested technology services.
• Processing API requests and maintaining API usage records.
• Providing customer support and responding to enquiries.
• Improving service quality, performance, reliability and user experience.
• Analytics, troubleshooting and product development.
• Detecting, preventing and investigating fraud, abuse, unauthorized access and security incidents.
• Complying with applicable legal, regulatory and contractual obligations.
• Resolving disputes and enforcing our agreements, terms and policies.
• Sending service-related communications and, where permitted, information about products, services or offers.

05 Verification & eKYC Data

Some Nerotix services process identity and verification information through APIs or dashboards, including information relating to PAN, GSTIN, banking verification, vehicle data and other verification services offered through our platform.

For customer-submitted verification requests, Nerotix generally acts as a processor or service provider on behalf of the customer. The customer is responsible for obtaining appropriate consent, notices and permissions from the relevant individual where required by applicable law.

Verification information is processed primarily to complete the requested verification and to meet applicable operational, security or legal requirements. We do not claim ownership of customer verification data merely because we process it.

06 Communication & WhatsApp Services

Certain Nerotix services provide messaging and communication functionality, including integrations with WhatsApp Business services and Meta's WhatsApp Cloud API infrastructure.

Where WhatsApp Cloud API infrastructure is used, WhatsApp messaging data may be processed and stored on Meta's cloud infrastructure. Data localization within India is not offered by the WhatsApp Cloud API for such messaging data. Users should also review the applicable privacy terms of Meta and WhatsApp for services provided directly by those platforms.

07 Data Sharing & Disclosure

We do not sell personal information as a standalone commercial product. We may disclose or provide access to information when reasonably necessary to operate our services or comply with legal obligations.

This may include sharing with:

• Our affiliates and group entities where necessary for service delivery or administration.
• Authorized technology, hosting, cloud, analytics, payment and infrastructure providers.
• Verification partners, regulated data providers and other service providers required to provide requested services.
• Communication and platform partners, including Meta/WhatsApp where applicable.
• Professional advisers, auditors or legal service providers where reasonably required.
• Government, regulatory or law-enforcement authorities when required or permitted by law.
• Other parties with your authorization or where otherwise permitted by applicable law.

08 Cookies & Similar Technologies

Our websites and services may use cookies and similar technologies to maintain sessions, improve functionality, understand usage patterns, enhance user experience and support security.

Depending on your browser or device settings, you may be able to control or disable certain cookies. Disabling necessary cookies may affect the availability or functionality of some parts of our services.

09 Location Information

Certain services may use location-related information or technical signals such as Wi-Fi or Bluetooth information where required for functionality, security or service improvement. Where consent is required, we will seek the applicable permission before collecting such information.

10 Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Policy, including providing services, maintaining business and transaction records, preventing fraud, resolving disputes, enforcing agreements and meeting legal, regulatory and security requirements.

Where information is no longer required, we may securely delete, anonymize or otherwise dispose of it, subject to applicable retention obligations.

11 Data Security

We use reasonable technical and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, misuse or destruction. Depending on the service, these measures may include encryption, access controls, monitoring, logging, secure infrastructure and security reviews.

No method of transmission, storage or electronic system can guarantee absolute security. Accordingly, while we work to protect information, we cannot guarantee that security risks will never occur.

12 Third-Party Services & Links

Our websites and services may contain links to or integrations with third-party services. Such third parties operate under their own privacy policies and terms. We are not responsible for the privacy practices, content, security or availability of third-party services outside our control.

13 Legal Basis for Processing

Depending on the circumstances and applicable law, we may process information based on contractual necessity, compliance with legal or regulatory obligations, legitimate business interests, consent or other lawful grounds available under applicable data protection laws.

Our privacy practices are intended to comply with applicable laws and regulations of India, including the Information Technology Act, 2000 and applicable data protection requirements, including the Digital Personal Data Protection Act, 2023, to the extent applicable to the relevant processing.

14 Your Rights & Choices

Subject to applicable law, you may have rights relating to your personal information, which may include:

• Requesting access to personal information held about you.
• Requesting correction or updating of inaccurate information.
• Requesting deletion where legally permissible.
• Withdrawing consent where processing is based on consent.
• Raising a privacy-related complaint or grievance.

Some requests may be limited or declined where retention or processing is required by law, necessary for security, required to provide a service, or otherwise permitted under applicable law.

15 Marketing Communications

We may send service-related communications that are necessary to operate your account or provide requested services. Where permitted by law, we may also send information about our products, services or business updates.

You may opt out of non-essential marketing communications using the available unsubscribe mechanism or by contacting us.

16 Verification Accuracy Disclaimer

Where verification results are obtained from third-party databases, public records, regulated providers or external data sources, results depend on the accuracy and availability of those sources. Nerotix does not guarantee that every verification result will be complete, current or error-free.

Customers should independently evaluate verification results and remain responsible for decisions made using such results, subject to applicable law and contractual terms.

17 Children's Privacy

Our services are primarily intended for businesses, developers and enterprise users. We do not knowingly seek to collect personal information from children except where permitted by applicable law and with the required involvement or authorization of a parent or legal guardian.

18 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, business practices, legal requirements or regulatory developments. The updated version will be published on this page with a revised effective date.

We encourage you to review this page periodically. Your continued use of our services after an updated policy becomes effective will be subject to the revised Policy, to the extent permitted by applicable law.

19 Limitation Relating to Third-Party Services

To the extent permitted by applicable law, Nerotix is not responsible for indirect, incidental, special or consequential losses arising from the privacy practices, security failures, content or availability of third-party services that are outside Nerotix's reasonable control.

20 Contact & Privacy Complaints

If you have questions, requests or concerns regarding this Privacy Policy or the handling of your personal information, please contact Nerotix using the details below.