Privacy Policy
1. Who we are
VueNexa Enterprise, established in Surat, Gujarat, India, operates the website vuenexa.com and supplies software services and industrial products. For personal data we collect through this website and in the course of our own business, we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023. You can reach us at tech@vuenexa.com.
2. Data we collect
We do not ask you for financial account details, government identifiers or health information through this website. Please do not send them to us.
3. Why we use it
We use personal data to reply to enquiries and prepare proposals, to deliver and support the services and products a client has engaged us for, to raise invoices and meet tax and accounting obligations, to keep the website secure and working, to consider job applications, and to comply with the law. We do not sell personal data and we do not use it for automated decision-making or profiling.
4. Consent and notice
When you submit an enquiry you consent to us using the details you provide to respond to it. That consent covers only the purposes described in this policy, and you may withdraw it at any time by writing to us, which will not affect processing already carried out. Where the Act permits, we may also process data for certain legitimate uses, such as complying with a legal obligation or responding to a request you have voluntarily made.
5. Cookies
This website uses only cookies and similar storage that are necessary for it to function and to remember your preferences. If we add analytics or marketing cookies in future, we will ask for your consent first and list them here. You can block or delete cookies in your browser settings; parts of the site may then not work as intended.
6. Sharing and processors
We share personal data only with service providers who process it on our instructions under written contracts, such as email and hosting providers, and with our accountants and legal advisers. We also disclose data where required by law, by a court, or by a lawful request from a government agency. We do not otherwise disclose your data to third parties.
7. Client data inside our products
Our monitoring products record machine and production data, and may include the names of client employees who operate them or use the dashboard. For that data our client is the Data Fiduciary and we act as a Data Processor: we process it only on the client's instructions and under the terms of the engagement, and we do not use it for our own purposes. Requests about such data should be directed to the client, and we will assist them in responding.
8. Transfers outside India
Some of the tools we use to run our business store data on servers outside India. Where that happens we transfer personal data only to countries not restricted by the Central Government under the Digital Personal Data Protection Act, 2023, and we require contractual safeguards from the provider. Where a client requires data to remain within India, we can deploy on servers inside the country, including on the client's own premises.
9. How long we keep it
Enquiries that do not lead to an engagement are deleted within twenty-four months. Engagement records, invoices and tax documents are kept for eight years as required by Indian tax and company law. Server logs are kept for one hundred and eighty days. Job applications are kept for twelve months unless you ask us to remove them sooner. We erase personal data once its purpose is served and no legal obligation requires us to keep it.
10. Security
We apply reasonable security safeguards, including encryption in transit, access control on a need-to-know basis, credential management, logging, and confidentiality obligations for our personnel and contractors. No system is completely secure, and we ask you not to send sensitive information to us by email.
11. Your rights
As a Data Principal under the Digital Personal Data Protection Act, 2023 you may ask us for a summary of the personal data we hold about you and how we process it, ask us to correct or complete inaccurate data, ask us to erase data we no longer need, withdraw your consent, nominate another person to exercise your rights in the event of death or incapacity, and use the grievance process in section 14.
Write to tech@vuenexa.com to exercise any of these. We respond within thirty days and may ask you to verify your identity first. The Act also requires you to provide accurate information and not to raise false or frivolous complaints.
12. Children
Our website and products are meant for businesses and are not directed at children. We do not knowingly collect the personal data of anyone under eighteen. If we learn that we hold such data without verifiable parental consent, we will delete it. We do not carry out tracking, behavioural advertising or profiling directed at children.
13. Breach reporting
If a personal data breach occurs, we will notify each affected Data Principal and the Data Protection Board of India in the manner and within the timelines prescribed under the Act and its rules, and will describe what happened, what data was involved and what we are doing about it. Incidents that qualify as cyber security incidents are also reported to CERT-In as required.
14. Grievance redressal
Our Grievance Officer handles complaints about how we process personal data. Write to tech@vuenexa.com with "Privacy grievance" in the subject line, or by post to VueNexa Enterprise, Surat, Gujarat, India. We acknowledge complaints within twenty-four hours and aim to resolve them within fifteen days. If you are not satisfied with our response, you may approach the Data Protection Board of India.
15. Changes to this policy
We may update this policy as our services or the law change. The date at the top of the page shows when it was last revised. Where a change materially affects how we use your data, we will tell you before it takes effect. See also our Terms of Service.