Privacy Policy

Nexval collects personal data in one or more of the following ways.

Identifiers & profile data

• Name, email, mobile or work phone, employee ID, designation or job role
• Gender, date of birth, address and site location
• Profile image, official ID or profile documents
• GPS location, face-recognition data and attendance data

Other sources

Contact information submitted on our website, internet and network activity, career application data, email engagement, and information from vendors or service providers.

Where required, we request consent and provide a way to withdraw it. We use personal data to:

• Provide and operate services under an agreement with you
• Authenticate users and grant access to services
• Understand and improve our products, services, and customer experience
• Develop new products and support events, contests, and promotions
• Meet legal, regulatory, fraud-prevention, and IT-security obligations

In India, we follow the Digital Personal Data Protection Act, 2023. You can unsubscribe from marketing by contacting info@nexval.ai.

We implement industry-standard measures to keep your data secure and confidential, including:

• Access restricted to employees with a business need to know
• Physical, electronic, administrative, and technical safeguards
• Prompt disciplinary action against misuse of personal data

Please also protect your passwords and sign out when using shared computers.

• Stored in databases used by service providers who cannot use it for unrelated purposes
• Shared with payroll, cloud, or administration providers for business purposes
• Provided to regulators or government authorities where required or permitted by law
• Transferred during a merger, acquisition, reorganization, or asset sale with continued safeguards

Service providers act as data processors or sub-processors depending on Nexval's role.

Nexval has affiliates across countries, including India, and may transfer personal data globally between affiliates and data centers for the purposes described in this policy.

Transfers outside the European Union use an adequacy decision or safeguards such as standard contractual clauses. Where POPIA applies, transfers follow its permitted mechanisms.

We retain personal data only as long as reasonably necessary for the stated business purpose or legal, accounting, and reporting obligations.

• The volume, nature, and sensitivity of the data
• The potential risk from unauthorized use or disclosure
• The purposes for processing and whether they can be achieved another way
• Applicable legal requirements

We use automated profiling in a limited way for email or targeted campaigns, including tracking whether content is received, opened, clicked, or shared so we can provide relevant information.

Depending on your jurisdiction, you may have rights over your personal data.

Residents of California (CCPA)

Rights may include access, correction, deletion, portability, information about disclosures, and non-discrimination. Nexval does not sell personal information as defined by the CCPA.

Residents of Europe (GDPR)

Rights may include access, erasure, rectification, restriction, objection, portability, withdrawal of consent, and protection from solely automated decisions.

Residents of Australia

Rights may include information about collection practices, correction, de-identification, destruction, and opting out of direct marketing.

Contact us with privacy concerns at info@nexval.ai. Where applicable, you may also lodge a complaint with the relevant supervisory authority.

This policy was last updated on 17 March 2025. We may notify you of material changes where required and recommend reviewing this page periodically.

This policy applies broadly across Nexval products, but collection and storage practices can vary.

NexAEI

A mobile attendance system for hybrid workforces. Relevant employee and attendance data is stored on Google Cloud in the Mumbai region.

Colab

A collaboration application that may collect contact, business, location, and biometric information according to the service agreement.

DocuChief

An AI-enabled document-processing product that collects limited user-account data. Relevant data is hosted on AWS in Singapore.

Inscript

A platform for writers and readers that may collect profile, interest, contact, payment, and identity-verification details.

ARC (Audit, Risk & Compliance)

A role-based workflow product. Nexval does not store or access client data; client-controlled data is hosted in the United States.