Privacy Policy

Nexapp Technologies Pvt Ltd ("Nexapp", "we", "us") is a company incorporated in India with its registered office at 403/605 Suyog Center, Gultekadi, Pune 411037, Maharashtra (CIN:). For the personal data described here, Nexapp is the data fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025 ("DPDP Rules").

This policy explains how we handle personal data collected through www.nexapp.co.in, its forms, newsletter, live chat and related email, phone and WhatsApp conversations.

It does not cover data that passes through Nexapp products and services (for example the Nexapp Controller, Instaroute SDWAN Lite 2.0, Nexapp SSE or NaaS operations). For those, Nexapp usually acts as a data processor for its customer, and processing is governed by the customer contract and data processing agreement.

Data you give us

• Demo, contact and partner forms: full name, work email, mobile number, company, job title, area of interest, number of sites or devices, and anything you write in the message field.
• Newsletter: your email address.
• Conversations: what you share with us by email, phone, WhatsApp or live chat, including your name and contact details.

Data collected automatically

• Technical data: IP address, browser and device type, the page you submitted a form from, date and time of the request. We use this to operate the site, prevent abuse (for example spam and automated form submissions) and keep it secure.
• Analytics data (only with your consent): pages visited, approximate location derived from your IP address, referring site and interactions, collected by Google Analytics 4. See our Cookie Notice.
• Preferences: your light or dark theme choice and your cookie choice, stored in your own browser.

We do not ask for sensitive information such as financial account details, government identifiers or health data through this website, and we ask you not to include it in free-text fields.

We use your data only for the purpose for which you gave it. If we want to use it for a new purpose, we will ask you first.

Every form on this site has an unticked consent checkbox that refers to this policy. You give consent by ticking it and submitting the form. Consent for marketing is separate from consent to handle your enquiry.

You can withdraw consent at any time, as easily as you gave it:

• click "unsubscribe" in any marketing email;
• change your choice through Cookie settings in the site footer or on the Cookie Notice;
• write to the grievance officer at privacy@nexapp.co.in.

Withdrawal does not affect processing done before you withdrew. After withdrawal we stop processing for that purpose and delete the data unless the law requires us to keep it. If you withdraw consent while an enquiry is open, we may not be able to complete it.

We do not sell personal data. We share it only with the following, and only to the extent needed:

• Service providers (data processors) that run our systems on our behalf:
  • ERPNext (customer relationship and lead management): stores form submissions and newsletter sign-ups.
  • Email delivery (SMTP) provider: sends our replies and the confirmation email you receive after a form.
  • Nexapp Blogging (our self-hosted blog platform): publishes our blog and may send the newsletter.
  • Chatwoot (live chat, self-hosted by Nexapp): stores chat conversations, only if you allow chat.
  • Google Analytics 4 (Google LLC): website analytics, only after you accept analytics cookies. Data may be processed outside India.
• Authorised Nexapp partners: if your enquiry is best served by a partner in your region, we may pass your contact details to that partner, and we will tell you when we do.
• Authorities: where required by law, court order or a lawful request from a government agency.
• A successor business: if Nexapp is involved in a merger, acquisition or sale of assets, subject to the same protections.

Each processor acts only on our instructions under a contract that requires it to protect the data and delete it when the work is done.

Most of the data we hold is stored in India. Some processors, such as Google Analytics, may process data in other countries. The DPDP Act permits such transfers except to countries the Central Government restricts by notification, and we will not transfer data to any restricted country.

We keep personal data only as long as the purpose needs it, then delete it or make it anonymous:

• Enquiries and demo requests: up to 3 years from our last interaction with you, unless you become a customer, in which case the customer contract applies.
• Partner applications: for the duration of the partnership, or up to 2 years if the application does not proceed.
• Newsletter: until you unsubscribe.
• Live chat conversations: up to 1 year.
• Security and access logs: at least 1 year, as the DPDP Rules will require for certain logs from May 2027, and longer where other law requires.
• Records of consent and withdrawal: as long as needed to show that we acted lawfully.

We apply reasonable security safeguards appropriate to the data, including encryption in transit, access limited to staff who need it, logging and monitoring of access, and backups. Nexapp's information security management system is certified to ISO/IEC 27001:2022. No system is completely secure, so please do not send sensitive information through the website.

If a personal data breach affects you, we will inform you without delay, describing what happened, the likely impact and the steps we are taking. We will also inform the Data Protection Board of India without delay and send it a detailed report within 72 hours of becoming aware of the breach, or any longer period the Board allows, as the DPDP Rules will require from May 2027.

Under the DPDP Act you have the right to:

• Access: get a summary of the personal data we hold about you and how we use it, and the identities of those we have shared it with.
• Correction, completion and updating: fix inaccurate or incomplete data.
• Erasure: ask us to delete data we no longer need or that you no longer consent to us holding, unless the law requires us to keep it.
• Withdraw consent at any time, as described above.
• Grievance redressal: complain to our grievance officer and get a response.
• Nomination: nominate another person to exercise your rights if you die or become unable to do so.

To exercise a right, write to the grievance officer. We may ask you to verify your identity. We will respond within the period set by the DPDP Rules, which is at most 90 days for a grievance.

If you are not satisfied with our response, you may complain to the Data Protection Board of India once you have used our grievance process.

• Address: Nexapp Technologies Pvt Ltd, 403/605 Suyog Center, Gultekadi, Pune 411037, Maharashtra, India
• Email: privacy@nexapp.co.in
• Phone: +91-20-67629999

For general questions about this policy, you can also write to connect@nexapp.co.in.

This website is intended for business users. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact the grievance officer and we will delete it.

We use essential browser storage to run the site, and analytics and live chat only if you allow them. Our Cookie Notice lists each cookie and storage item and explains how to change your choice.

Where they apply, we also follow the Information Technology Act, 2000 and its rules, including the Reasonable Security Practices and Procedures and Sensitive Personal Data or Information Rules, 2011 until they are superseded, and the CERT-In Directions of April 2022 for logs of our ICT systems.

We may update this policy when our practices or the law change. We will post the new version on this page with a new "Last updated" date and version number and, where the change is significant, tell you by email or a notice on the site.