Home → Privacy Policy

Privacy Policy

Effective Date: August 27, 2026 | Entity: AppNexa Technologies

1. Introduction & Who We Are

AppNexa Technologies ("AppNexa", "we", "our", or "us"), a business operating in Surat, Gujarat, under the laws of India, is committed to protecting your privacy in full compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian data protection regulations.

This Privacy Policy explains how we collect, process, store, and safeguard data when business owners, employees, and customers interact with our website (appnexa.co.in), our QR/NFC customer review pages, and our business management portal.

2. Personal Data We Collect

We collect only the minimum necessary data to provide and improve our service:

  • Business & Account Information: Business legal name, trade name, branch location, Google Place ID, owner/manager name, email address, and WhatsApp/phone number.
  • Payment & Billing Data: Online subscription and setup transactions are processed directly by our authorized payment gateway partner, Razorpay. AppNexa does not collect or store sensitive credit/debit card numbers, CVVs, or net-banking credentials on our servers. Razorpay processes and retains payment data according to PCI-DSS standards.
  • Customer Interaction Data: When end-customers scan an AppNexa standee, we collect anonymous scan timestamps, selected star ratings, and review routing direction (redirect to Google Maps or private WhatsApp feedback). We do not require end-customers to create an account or provide personal identities to submit a review.
  • Contact Inquiries & Leads: Name, phone number, city, and message submitted through our website contact and demo request forms.

3. Purpose and Legal Basis of Processing

We process personal data solely for legitimate operational and business purposes, including:

  • Provisioning and activating your custom QR/NFC counter standees and digital review landing pages.
  • Routing happy customer reviews (4–5 stars) to Google Maps and private feedback (1–3 stars) to business owners via WhatsApp.
  • Processing setup fees and annual subscription renewals.
  • Providing administrative access, password resets, and customer support.
  • Complying with statutory tax and accounting requirements in India.

4. Data Sharing & Third Parties

We never sell, rent, or trade your business or personal data to third parties for advertising or marketing. Data is shared strictly with trusted operational processors:

  • Razorpay Software Private Limited: For payment processing and transaction settlement.
  • Google Ireland / Google LLC: To direct customers to official Google Business Profile review listing URLs.
  • Cloud Infrastructure Providers (Firebase / Google Cloud Asia-South1): For secure database hosting, authentication, and cloud functions situated in compliance with Indian data residency norms.
  • Legal & Law Enforcement Authorities: Only when strictly mandated by applicable Indian law, court order, or governmental authority.

5. Data Retention & Security

Operational scan records and customer routing logs are retained as long as your business subscription is active. If your account is cancelled or terminated, operational data is removed or anonymized within 90 days, except financial invoices and payment proofs which are retained for 8 years as required under Indian taxation statutes (GST & Income Tax Act).

We implement industry-standard technical measures, including HTTPS encryption in transit, Firebase Authentication role-based security rules (RBAC), and strict database access controls.

6. Your Rights under India's DPDP Act

As a Data Principal under the DPDP Act 2023, you have the right to:

  • Access & Summary: Request a copy of your personal business data held by us.
  • Correction & Erasure: Request correction of inaccurate information or deletion of your account upon subscription cancellation.
  • Grievance Redressal: Raise inquiries or complaints regarding our data handling practices.

To exercise any of these rights, email our Data Grievance Officer at support@appnexa.co.in.

7. Cookies & Tracking

Our website uses minimal, essential session cookies for authentication, theme preference (light/dark mode), and interface security. We do not employ third-party tracking cookies or behavioral advertising trackers.

8. Contact & Grievance Redressal

For privacy inquiries, data requests, or complaints, please reach out to our office:

AppNexa Technologies
Attn: Data Protection Officer
Location: Surat, Gujarat, India
Email: support@appnexa.co.in
Phone / WhatsApp: +91 9265500479