Privacy Policy

nextappAI provides AI consulting, business automation, software development and related professional services.

• Legal entity name: NextappAI
• Registered address: #5, 10th Street, Babusapalya, Bangalore - 560043
• Website: nextappai.com
• Email: hello@nextappai.com
• Phone: +91 80562 19042

For the purposes of the DPDP Act, nextappAI acts as the Data Fiduciary in respect of personal data collected through this website, and you are the Data Principal.

We collect only the data we need to respond to you and deliver our services.

Information you give us

• Contact details — name, email address, phone or WhatsApp number, company name, and any details you include when you message us, book a call, or fill in a form.
• Consultation information — information you share about your business, systems, processes or requirements during discovery calls and project scoping.
• Billing details — billing name, address, GSTIN (if applicable) and other information required to raise valid tax invoices.

Information collected automatically

• Technical data — IP address, browser type and version, device type, operating system, referring URL, pages viewed, and timestamps.
• Usage data — how you navigate and interact with the website.

Information from third parties

• Message content and your profile name when you contact us via WhatsApp.
• Transaction confirmations from our payment gateway.

We do not knowingly collect sensitive personal data such as health records, biometric data, caste, religious beliefs or sexual orientation. Please do not send us such information.

We use your personal data to:

• Respond to enquiries and schedule consultations.
• Prepare proposals and scope projects.
• Deliver contracted services and provide support.
• Raise invoices, process payments and meet tax obligations.
• Operate, secure and troubleshoot our website.
• Improve our website and service offerings using aggregated usage data.
• Send service updates or marketing, only where you have opted in.
• Comply with legal, regulatory and audit obligations.

We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.

We process personal data on the basis of:

• Your consent — given when you contact us, submit a form, book a call, or subscribe to communications. Consent is free, specific, informed, unconditional and unambiguous, and given through a clear affirmative action.
• Performance of a contract — where processing is necessary to deliver services you have engaged us for.
• Legitimate uses and legal obligations — including compliance with applicable law, tax and accounting requirements, and responding to lawful requests from authorities.

You may withdraw your consent at any time by writing to hello@nextappai.com. Withdrawal will not affect the lawfulness of processing carried out before withdrawal, and may mean we can no longer provide certain services to you.

Where you make a payment to us online, payments are processed by Razorpay, an RBI-authorised payment aggregator, or by another authorised payment provider we may engage.

We do not collect, process or store your card number, CVV, PIN, UPI PIN, net-banking credentials or any other payment authentication data. This information is captured directly by the payment gateway on its own secure, PCI DSS-compliant infrastructure.

We receive only transaction confirmation details — such as the transaction reference, amount, date, payment status and the name or masked identifier supplied by the gateway — which we use for order fulfilment, reconciliation, accounting and tax records.

Your use of the payment gateway is also governed by that provider's own terms and privacy policy, which we encourage you to read. We retain invoices and transaction records for the period required under Indian tax and accounting law.

We will never ask you for your full card number, CVV, OTP, PIN or password by email, phone or WhatsApp. If you receive such a request claiming to be from us, do not respond and please report it to us immediately.

We share personal data only where necessary, and only with parties bound to protect it:

• Payment providers — to process transactions and handle refunds or chargebacks.
• Infrastructure and hosting providers — for website hosting, storage and delivery.
• Communication tools — for email and messaging, including WhatsApp.
• Analytics providers — where enabled, in aggregated or pseudonymised form.
• Professional advisers — accountants, auditors and lawyers, under confidentiality obligations.
• Authorities — where disclosure is required by law, court order, or a lawful request from a government agency.

Where we engage a service provider to process personal data on our behalf, we do so under a contract requiring appropriate security measures and restricting use of the data to our instructions.

Our website may use cookies and similar technologies to keep the site working correctly, remember your preferences, and understand how the site is used in aggregate.

• Essential cookies — required for the site to function and for security.
• Analytics cookies — help us understand aggregate traffic patterns and improve the site.
• Third-party cookies — embedded third-party tools may set their own cookies, governed by their own policies.

You can block or delete cookies through your browser settings. Disabling essential cookies may prevent parts of the site from working.

We keep personal data only for as long as it is needed for the purpose it was collected, or as required by law:

• Enquiries that do not become engagements: up to 24 months from last contact.
• Client and project records: duration of engagement, plus up to 3 years.
• Invoices, transaction and tax records: as required under Indian tax and accounting law (currently at least 8 years).
• Marketing subscriptions: until you unsubscribe or withdraw consent.
• Website technical logs: typically up to 12 months.

When data is no longer required and there is no legal obligation to retain it, we erase it or irreversibly anonymise it.

We apply reasonable security safeguards appropriate to the nature of the data we hold, including:

• Encryption of data in transit using HTTPS/TLS across our website.
• Access controls, limiting access to personal data to those who need it.
• Strong authentication, including multi-factor authentication on key accounts.
• Use of reputable, security-certified infrastructure and service providers.
• Periodic review of access rights and security practices.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals as required under the DPDP Act.

As a Data Principal under the DPDP Act, you have the right to:

• Access — obtain a summary of the personal data we hold about you and how it is processed.
• Correction and completion — have inaccurate or incomplete data corrected or completed.
• Erasure — request deletion of your personal data where we are not required to retain it.
• Withdraw consent — at any time, as easily as it was given.
• Grievance redressal — raise a complaint with us about how your data is handled.
• Nominate — nominate another individual to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, email hello@nextappai.com with your request and enough information for us to identify you. We will respond within a reasonable period and in any case as required by law.

If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India.

Our website and services are intended for businesses and adults. We do not knowingly collect personal data of children under the age of 18 without verifiable consent from a parent or lawful guardian, as required under the DPDP Act. We do not carry out tracking, behavioural monitoring or targeted advertising directed at children.

If you believe a child has provided us with personal data, please contact us and we will delete it.

We serve clients worldwide and may use service providers whose systems are located outside India. Where personal data is transferred outside India, we do so only to jurisdictions not restricted by the Government of India, and we require appropriate contractual safeguards from those providers.

Payment-related data is handled by our payment gateway in accordance with applicable RBI data-storage requirements.

When delivering automation, software or consulting services, we may be given access to systems or datasets belonging to our clients, which may contain personal data of their customers or employees. In relation to that data:

• We act as a Data Processor on the client's instructions; the client remains the Data Fiduciary.
• We access only what is necessary to perform the agreed work.
• We treat such data as confidential and do not use it for any purpose other than delivering the engagement.
• On completion or termination of an engagement, we return or securely delete such data on request, subject to any legal retention obligation.
• Specific terms are governed by the relevant service agreement or non-disclosure agreement between us and the client.

Our website may link to third-party websites, tools or resources. We are not responsible for the privacy practices or content of those sites. We encourage you to read their privacy policies before providing them with personal data.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. The revised version will be posted on this page with an updated "Last updated" date. Where changes are significant, we will take reasonable steps to notify you. Please review this page periodically.

In accordance with the Information Technology Act, 2000 and the rules made thereunder, and the DPDP Act, the contact details of our Grievance Officer are:

• Email: hello@nextappai.com
• WhatsApp: +91 80562 19042

We aim to acknowledge complaints within 24 hours and resolve them within 30 days of receipt.

For any question about this Privacy Policy or how we handle your data, write to hello@nextappai.com.