Your Data. Our Responsibility.

This Privacy Policy applies to information processed by NEXA Community through websites, mobile applications, enterprise platforms, customer management systems, communication systems, business services and other digital products that reference this Privacy Policy.

Certain products and services may provide additional privacy notices where different information-processing activities, legal requirements or service-specific practices apply.

Depending on your interaction with our services, we may process information that you provide directly, information generated through your use of our systems and information received from authorized organizations, business partners or service providers.

We may collect information when you create an account, sign in, submit a form, contact us, apply for an opportunity, communicate with our organization, upload information, interact with our platforms or use features provided through our digital services.

Information may also be received from organizations, employees, customers, business partners, service providers or other parties authorized to provide information to us.

We may process information for purposes including:

• Providing, operating and maintaining websites, applications and platforms.
• Creating, authenticating and managing accounts.
• Providing authorized role-based access.
• Managing customers, leads, follow-ups and business operations.
• Responding to communications and support requests.
• Maintaining security, reliability and service performance.
• Preventing unauthorized access, misuse, fraud and security incidents.
• Improving products, services and user experiences.
• Producing analytics, reports and operational insights where permitted.
• Meeting legal, contractual, regulatory and compliance obligations.
• Establishing, exercising or defending legal claims.

We process personal information where an appropriate legal basis exists under applicable law. Depending on the circumstances, this may include consent, performance of a contract, compliance with legal obligations, legitimate uses permitted by law, responding to lawful requests or other grounds recognized under applicable law.

Where processing is based on consent, individuals may withdraw consent in accordance with applicable law. Withdrawal does not affect processing that was lawful before the withdrawal.

We may disclose information where reasonably necessary for authorized business operations, provision of services, security, compliance or other lawful purposes.

• Authorized employees, managers, team leaders and administrators.
• Hosting, infrastructure, communications, security and technology providers.
• Business partners where necessary to provide an authorized service.
• Professional advisers, consultants, auditors and insurers.
• Government authorities, regulators, courts or law-enforcement agencies where required by applicable law or valid legal process.
• Parties involved in a merger, restructuring, financing, acquisition or transfer of business assets, subject to appropriate safeguards.

Our websites and platforms may use cookies, session identifiers, browser storage and similar technologies to maintain authentication sessions, remember preferences, provide security features, understand performance and improve functionality.

Users may control certain cookies through browser settings. Disabling cookies required for authentication or security may prevent parts of our services from operating correctly.

We use reasonable administrative, organizational and technical safeguards designed to protect information against unauthorized access, alteration, disclosure, misuse, loss or destruction.

Depending on the service and risks involved, safeguards may include authentication controls, role-based authorization, password hashing, access restrictions, secure communications, logging, database controls, backups, monitoring and security reviews.

We retain information only for as long as reasonably necessary for the purposes for which it was processed, including providing services, maintaining security and business records, resolving disputes, enforcing agreements and satisfying legal, regulatory, accounting or compliance requirements.

Retention periods may vary based on the type of information, service involved, contractual requirements, legal obligations, security requirements and legitimate business needs.

Subject to applicable law and the nature of your relationship with us, you may have rights relating to personal information associated with you.

• Request access to information associated with you.
• Request correction of inaccurate or incomplete information.
• Request erasure where legally available.
• Withdraw consent where processing is based on consent.
• Raise concerns or grievances regarding processing.
• Request information regarding the handling of your data.
• Exercise other rights available under applicable data protection law.

We may need to verify identity before processing certain requests. Some requests may be restricted where processing or retention is required by law or necessary for legitimate legal, security or business purposes.

Our enterprise platforms and business services are generally not intended for children unless a particular service expressly states otherwise and applicable legal requirements have been satisfied.

If we become aware that information relating to a child has been processed in a manner inconsistent with applicable law, we will take appropriate steps to address the situation.

Our services may integrate with or contain links to third-party websites, applications, payment services, communication providers, infrastructure providers or other external services.

Third parties operate under their own terms and privacy practices. Users should review the privacy policies of external services before providing personal information to them.

Information may be processed or stored using infrastructure or service providers located in India or other jurisdictions, depending on the systems and services used by NEXA Community .

Where applicable law requires safeguards, contractual measures or other conditions for transfers of personal information, we seek to implement appropriate measures.

We may update this Privacy Policy to reflect changes in our services, operations, technology, security practices, legal requirements or other relevant factors.

When changes are made, we may update the Last Updated date shown on this page and provide additional notice where required by applicable law.

If you have questions about this Privacy Policy, wish to submit a privacy request or want to raise a grievance regarding the handling of personal information, you may contact us using the details below.