Privacy Policy

Introduction

Nexgenex Labs ("NexGenEx", "we", "our", or "us") is committed to protecting your privacy and maintaining the confidentiality, integrity, and security of personal information entrusted to us. This Privacy Policy explains how we collect, use, store, process, disclose, and protect information when you visit our website, engage with our services, communicate with our team, or otherwise interact with our business.

Information We Collect

Depending on how you interact with us, we may collect:

• Name, email address, phone number, and company details.
• Business requirements and project-related information.
• Billing and contractual information.
• Website usage data, analytics, browser, and device information.
• IP address, operating system, and session data.
• Marketing preferences and communication history.
• Information voluntarily submitted through forms or inquiries.

How We Use Information

We process information solely for legitimate business purposes, including:

• Providing software development and technology services.
• Managing client relationships and communications.
• Preparing proposals, contracts, and invoices.
• Improving website functionality and user experience.
• Responding to inquiries and support requests.
• Maintaining security and preventing fraud.
• Meeting legal, regulatory, and compliance obligations.
• Conducting internal analytics and business operations.

Legal Basis for Processing

Where applicable under privacy laws, we process personal data based on:

• Your consent.
• Contractual necessity.
• Legitimate business interests.
• Legal and regulatory obligations.
• Protection of vital interests and security.

Data Security

Nexgenex Labs implements enterprise-grade security controls and follows industry best practices to safeguard information against unauthorized access, disclosure, alteration, or destruction.

• Encryption in transit using TLS/SSL protocols.
• Encryption of sensitive data at rest where applicable.
• Role-based access control and least-privilege principles.
• Multi-factor authentication for critical systems.
• Continuous monitoring and threat detection.
• Secure development and deployment practices.
• Regular security reviews and infrastructure hardening.
• Vendor and third-party security assessments.

While no method of transmission or storage can guarantee absolute security, we maintain reasonable and appropriate safeguards to protect information under our control.

Cookies & Analytics

We may use cookies, analytics tools, and similar technologies to understand user behavior, improve performance, enhance user experience, and maintain website functionality.

Users may control cookie preferences through browser settings. Disabling certain cookies may impact website functionality.

Third-Party Services

We may utilize trusted third-party providers for hosting, analytics, communications, payments, cloud infrastructure, development tools, and operational support. These providers are contractually required to maintain appropriate security and confidentiality standards.

Data Retention

Personal information is retained only for as long as necessary to fulfill business purposes, comply with legal obligations, resolve disputes, enforce agreements, and maintain legitimate records.

International Data Transfers

As a global technology company, information may be processed or stored in jurisdictions outside your country of residence. We take reasonable steps to ensure appropriate safeguards are implemented for cross-border transfers.

Your Privacy Rights

Subject to applicable laws, individuals may have the right to:

• Access personal information.
• Correct inaccurate information.
• Request deletion of personal data.
• Restrict or object to processing.
• Withdraw consent where applicable.
• Request data portability.
• File complaints with relevant authorities.

Children's Privacy

Our services are not directed toward individuals under the age of 18. We do not knowingly collect personal information from minors.

Compliance Framework

Nexgenex Labs strives to align its privacy and security practices with recognized industry frameworks and regulations, including:

• General Data Protection Regulation (GDPR).
• California Consumer Privacy Act (CCPA).
• India Digital Personal Data Protection Act (DPDP).
• ISO 27001 security principles.
• SOC 2 security and operational controls.
• Privacy-by-Design and Security-by-Default methodologies.

Policy Updates

We may revise this Privacy Policy periodically to reflect legal, regulatory, technological, or operational changes. Updates will be published on this page with a revised effective date.

Contact Us

For questions, privacy requests, or concerns regarding this Privacy Policy, please contact: