Privacy Policy

Last updated: October 18, 2026

This Privacy Policy explains how Nextosis Technologies (“Nextosis,” “we,” “us,” or “our”) processes your personal data when you use this website (nextosis.com, the “Site”) or contact us. It is our notice under the Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and the rules made under it. For the personal data described here, Nextosis Technologies is the Data Fiduciary.

1. Scope

This policy covers personal data collected through the Site and through enquiries you send us by the contact form, email, phone or WhatsApp.

It does not cover personal data processed inside Nextosis Platform by our clients (for example, a clinic’s patient records or an organization’s staff attendance). For that data, our client is the Data Fiduciary and Nextosis acts as a Data Processor on the client’s instructions under a written agreement. Please contact that organization about its privacy practices.

2. Personal Data We Collect and Why

We collect only what is needed for the purposes below:

• Demo and enquiry requests (contact form): your name, work email, and optionally your organization, phone number, the products you are interested in, your deployment preference, and your message. Purpose: to respond to your enquiry, arrange a demonstration, send the product brochure you request, and discuss our products with you.
• Email, phone and WhatsApp: the details you choose to share, such as your name, number or email address and the content of your messages. Purpose: to respond to you.
• Technical data: when you visit the Site, our hosting and network providers automatically process your IP address and basic browser information to deliver the pages and protect the Site. Purpose: to operate and secure the Site.

The Site does not use analytics tools, advertising trackers or cookies of its own, and we do not use your personal data for automated decision-making or profiling.

3. Legal Basis for Processing

We process the personal data you send us on the basis of your consent, and for the specified purpose for which you voluntarily provided it, as permitted under Sections 6 and 7(a) of the DPDP Act. By submitting the contact form or contacting us, you consent to us processing your data for the purposes in Section 2. Providing your data is voluntary, but we cannot respond to an enquiry without the details needed to contact you.

4. Withdrawing Consent

You can withdraw your consent at any time, as easily as you gave it, by emailing info@nextosis.com with the subject “Withdraw consent”. We will then stop processing your personal data and erase it, unless the law requires us to keep it. Withdrawal does not affect processing carried out before you withdrew.

5. Service Providers (Data Processors)

We use the following service providers, who process personal data on our behalf only to provide their service:

• GitHub (Site hosting) and Cloudflare (network delivery and security): process IP addresses and request information when you visit the Site.
• Google Fonts: delivers the “Inter” typeface; your browser’s request may include your IP address and browser information.
• FormSubmit (formsubmit.co): delivers contact form submissions to our email inbox.
• Our email provider: stores the enquiries and emails we receive.
• WhatsApp (Meta): handles conversations if you choose to message us on WhatsApp.

We do not sell or rent your personal data, and we do not share it with anyone else except where required by law.

6. Transfers Outside India

Some of these providers process data on servers outside India. Any such transfer is made only as permitted under Section 16 of the DPDP Act, and not to any country or territory restricted by the Government of India.

7. How Long We Keep Your Data

We keep enquiry and correspondence data only for as long as needed to respond to you and to continue a business discussion you have started, and in any case for no more than three years after our last contact with you, unless a longer period is required by law. We then erase it. If you withdraw consent or ask us to erase your data, we will do so sooner, subject to legal requirements.

8. How We Protect Your Data

We take reasonable security safeguards to prevent personal data breaches, including encrypted connections (HTTPS), access limited to the staff who need it, and secured accounts with our service providers. No method of transmission or storage is completely secure. If a personal data breach occurs, we will inform the Data Protection Board of India and the affected individuals as required by the DPDP Act.

9. Your Rights

Under the DPDP Act, you have the right to:

• Access: obtain a summary of the personal data we hold about you and the processing we carry out, and the identities of those we have shared it with;
• Correction and erasure: have inaccurate or incomplete data corrected, completed or updated, and have data erased when it is no longer needed for the purpose or you withdraw consent;
• Grievance redressal: raise a grievance with us about how we handle your personal data; and
• Nomination: nominate another person to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any right, email info@nextosis.com with the subject “Data protection request”. We may ask you to confirm your identity before acting on the request, and we will respond within the period prescribed under the DPDP Act and its rules.

10. Grievance Redressal

If you have a concern or complaint about how we process your personal data, please contact our Grievance Officer:

Grievance Officer, Nextosis Technologies
Email: info@nextosis.com (subject “Privacy grievance”)
Phone: +91 97438 76871
Karnataka, India

If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India after first using our grievance redressal process, as provided under the DPDP Act.

11. Your Duties

When you share personal data with us, please make sure it is accurate, do not impersonate anyone, and do not share another person’s personal data without their authority, in line with Section 15 of the DPDP Act.

12. Children

The Site is intended for business and organizational audiences. It is not directed at children (anyone under 18), and we do not knowingly collect their personal data. If you believe a child has sent us personal data, contact us and we will erase it.

13. Changes to This Policy

We may update this Privacy Policy from time to time, for example to reflect changes in the law or in how we work. The “Last updated” date at the top shows the latest version. Where the law requires, we will ask for your consent again.

14. Contact Us

For any question about this policy, contact Nextosis Technologies at info@nextosis.com or +91 97438 76871.