Legal
Privacy Policy
This Privacy Policy explains how Nexgale Dynamics Pvt Ltd (“Nexgale”, “we”, “us”, or “our”) collects, uses, stores, shares, and protects personal data when you use our website, project inquiry forms, AI systems, and related services.
We have written this policy to align with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 of India. If you do not agree with this policy, please stop using our services.
Who we are and the scope of this policy
Nexgale Dynamics Pvt Ltd is a company incorporated in India (CIN U72100GJ2025PTC171254), based in Vadodara, Gujarat, India. We build AI and automation solutions for businesses.
This policy covers personal data we handle in two different roles:
- As a Data Fiduciary — when you visit our website, submit an inquiry, or otherwise interact with us directly, we decide why and how your data is processed.
- As a Data Processor— when we deliver AI automation solutions to a business client, that client decides the purposes of processing the data within their systems and is the Data Fiduciary. In those engagements we process data only on the client's instructions and under our agreement with them, and the client is responsible for providing notices and obtaining the necessary consents from the individuals whose data is involved.
Key terms
- Data Principal — the individual to whom personal data relates (you).
- Data Fiduciary — the entity that decides the purpose and means of processing.
- Data Processor — an entity that processes data on behalf of a Data Fiduciary.
- Child — any individual who has not completed 18 years of age, as defined under Indian law.
- Personal data — any data about an individual who is identifiable by or in relation to such data.
What data we collect
We collect only the data needed to operate, secure, and improve our services. Depending on how you interact with us, this may include:
- Contact and identity data — such as name, email, phone number, company name, and the contents of inquiries you send us.
- Operational and usage data — such as page URL, timestamps, and basic analytics context about how our website is used.
- Device and network metadata — such as IP address and user-agent, used for security and abuse prevention.
- Content you submit — documents, files, or other information you provide through our forms or while we deliver a solution to you.
How we collect data
- Directly from you, through forms, uploads, and communication channels.
- Automatically, through analytics and server logs when you use our website.
- From integrated third-party services required for hosting, communication, and infrastructure.
How we use data
We use personal data for specific, itemised purposes:
- To respond to inquiries, deliver the services you request, and manage client communication.
- To operate, monitor, secure, and improve the performance and reliability of our services.
- To protect our systems against abuse, fraud, unauthorised access, and operational risk.
- To comply with legal obligations and enforce our agreements.
We do not use personal data for purposes incompatible with those stated above without seeking fresh consent.
Legal basis and consent
Where required, we process personal data on the basis of your consent, which is free, specific, informed, unambiguous, and given through a clear affirmative action. We may also process data where permitted by law, including for legitimate uses and to meet legal obligations.
Where we rely on consent, we provide a clear, standalone notice at the point of collection describing the data and the purpose, and you may withdraw your consent at any time (see Section 11). Withdrawing consent is as easy as giving it. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Data retention
We retain personal data only for as long as necessary for service delivery, compliance, dispute resolution, or legitimate operational requirements, after which it is deleted or anonymised.
Content you submit is processed and stored only for operational handling and is deleted once the purpose is fulfilled or consent is withdrawn. You are responsible for ensuring that content you submit is lawful and authorised for submission.
Where we are required to erase data, we will, where feasible, notify you in advance before deletion so you have an opportunity to preserve it if you wish.
Security measures
We apply reasonable technical and organisational safeguards, including:
- Access controls and environment separation where applicable.
- Encryption or protection of stored data where appropriate.
- Input validation, rate limiting, and logging for abuse prevention.
No system can guarantee absolute security, but we work to protect data against unauthorised access, loss, or misuse.
Your rights
Subject to applicable law, you have the right to:
- Access — request a summary of the personal data we process about you and our processing activities.
- Correction and erasure — request that we correct inaccurate or outdated data, or erase data that is no longer required.
- Grievance redressal — raise a concern or complaint about how we handle your data (see Section 11).
- Nominate — nominate another person to exercise your rights in the event of your death or incapacity.
- Withdraw consent — withdraw consent for processing at any time (see Section 11).
How to exercise your rights, withdraw consent, or complain
To exercise any right, withdraw consent, or raise a complaint about how we handle your personal data, email us at [email protected].
We will acknowledge complaints promptly and respond within the timelines required by law (within 90 days of receiving a complaint). If you are not satisfied with our response, you may escalate to the Data Protection Board of India in accordance with the Digital Personal Data Protection Act, 2023.
AI data handling and disclaimers
- Our solutions use AI systems whose outputs are generated automatically and may contain inaccuracies.
- Users must independently verify AI-generated outputs before making any critical decision.
- Nexgale is not liable for legal, business, financial, medical, or operational decisions made solely on the basis of AI-generated output.
- We do not use your personal data to train third-party foundation models without a lawful basis, and we configure our processing to limit data sharing to what is necessary for the service.
Children's data
Our website and services are intended for businesses and are not directed at children (individuals under 18 years of age).
- We do not knowingly collect or process the personal data of a child without verifiable parental or lawful-guardian consent.
- We do not carry out tracking, behavioural monitoring, profiling, or targeted advertising directed at children.
- If we learn that a child's data has been processed without proper authorisation, we will delete it within a reasonable timeframe.
International transfers
Data may be processed in jurisdictions outside your location depending on our infrastructure providers and service operations. Where data is transferred across borders, we apply reasonable safeguards and comply with applicable legal restrictions on such transfers.
Data breach notification
If a personal data breach occurs, we will take prompt steps to contain it, notify the Data Protection Board of India, and inform affected individuals as required by law, including a plain-language description of the breach, the data involved, protective steps you can take, and our contact details.
Limitation of responsibility
To the maximum extent permitted by law, Nexgale is not liable for indirect, incidental, consequential, special, or business-interruption losses, profit loss, or data-loss damages resulting from service use beyond our reasonable control. Nothing in this policy limits any liability that cannot be limited under applicable law.
Changes to this policy
We may update this policy from time to time. Updates become effective when published with a revised effective date. Where required, we will seek fresh consent for material changes.
Governing law and jurisdiction
This policy is governed by the laws of India. Courts in Vadodara, Gujarat, India will have jurisdiction over disputes related to this policy, subject to applicable law.
Contact
Nexgale Dynamics Pvt Ltd
Email: [email protected]
Location: Vadodara, Gujarat, India