Privacy Policy
How Nexval Infotech Private Limited and our affiliated companies collect, use, protect, and share personal data. Last updated 17 March 2025.
01. Data collection
Information we collect when you visit our website or use our products/services:
Nexval collects personal data in one or more of the following ways
- Name, email, mobile or work phone, employee ID, designation or job role
- Gender, date of birth, address and site location
- Profile image, official ID or profile documents
- GPS location, face-recognition data and attendance data
Other sources
- Contact information submitted on our website, internet and network activity, career application data, email engagement, and information from vendors or service providers.
02. Processing & lawful basis
Where required, we request consent and provide a way to withdraw it. We use personal data to:
- Provide and operate services under an agreement with you
- Authenticate users and grant access to services
- Understand and improve our products, services, and customer experience
- Develop new products and support events, contests, and promotions
- Meet legal, regulatory, fraud-prevention, and IT-security obligations
India
In India, we follow the Digital Personal Data Protection Act, 2023. You can unsubscribe from marketing by contacting info@nexval.ai.
03. Data security
We implement industry-standard measures to keep your data secure and confidential, including:
- Access restricted to employees with a business need to know
- Physical, electronic, administrative, and technical safeguards
- Prompt disciplinary action against misuse of personal data
Please also protect your passwords and sign out when using shared computers.
04. Sharing your data
- Stored in databases used by service providers who cannot use it for unrelated purposes
- Shared with payroll, cloud, or administration providers for business purposes
- Provided to regulators or government authorities where required or permitted by law
- Transferred during a merger, acquisition, reorganization, or asset sale with continued safeguards
Service providers act as data processors or sub-processors depending on Nexval's role.
05. International transfers
Nexval has affiliates across countries, including India, and may transfer personal data globally between affiliates and data centers for the purposes described in this policy.
Transfers outside the European Union use an adequacy decision or safeguards such as standard contractual clauses. Where POPIA applies, transfers follow its permitted mechanisms.
06. Storage & retention
We retain personal data only as long as reasonably necessary for the stated business purpose or legal, accounting, and reporting obligations.
- The volume, nature, and sensitivity of the data
- The potential risk from unauthorized use or disclosure
- The purposes for processing and whether they can be achieved another way
- Applicable legal requirements
07. Automated profiling
We use automated profiling in a limited way for email or targeted campaigns, including tracking whether content is received, opened, clicked, or shared so we can provide relevant information.
08. Your rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
Residents of California (CCPA)
- Rights may include access, correction, deletion, portability, information about disclosures, and non-discrimination. Nexval does not sell personal information as defined by the CCPA.
Residents of Europe (GDPR)
- Rights may include access, erasure, rectification, restriction, objection, portability, withdrawal of consent, and protection from solely automated decisions.
Residents of Australia
- Rights may include information about collection practices, correction, de-identification, destruction, and opting out of direct marketing.
09. Contact & complaints
Contact us with privacy concerns at info@nexval.ai. Where applicable, you may also lodge a complaint with the relevant supervisory authority.
10. Changes to this policy
This policy was last updated on 17 March 2025. We may notify you of material changes where required and recommend reviewing this page periodically.
11. Product-wise deviations
This policy applies broadly across Nexval products, but collection and storage practices can vary:
| NexAEI | A mobile attendance system for hybrid workforces. Relevant employee and attendance data is stored on Google Cloud in the Mumbai region. |
| Colab | A collaboration application that may collect contact, business, location, and biometric information according to the service agreement. |
| DocuChief | An AI-enabled document-processing product that collects limited user-account data. Relevant data is hosted on AWS in Singapore. |
| Inscript | A platform for writers and readers that may collect profile, interest, contact, payment, and identity-verification details. |
| ARC (Audit, Risk & Compliance) | A role-based workflow product. Nexval does not store or access client data; client-controlled data is hosted in the United States. |