Privacy Policy

1. Commitment to Privacy

At Nextrasys, we are deeply committed to protecting your privacy and ensuring the security of your Personal Information and Sensitive Personal Data or Information ("SPDI"). This Privacy Policy describes how we collect, use, and process your data in compliance with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2. Data We Collect

We may collect the following types of information strictly for providing our SaaS solutions (NextraPulse & NextraHR):

• Personal Information: Name, Email, Phone Number, Professional Designation, Organization Name.
• Patient/Employee Data (SPDI): While using our platform, you remain the Data Fiduciary/Controller of any patient health records or employee financial data you upload. Nextrasys acts strictly as a Data Processor. We encrypt and store this data securely on your behalf.
• Technical Data: IP Address, Browser Type, Login timestamps for audit trails.

3. How We Use Your Data

Your data is used solely for:

• Providing, maintaining, and improving our Services.
• Processing transactions and sending related information like invoices.
• Compliance with legal obligations under Indian Law.

We do not sell, trade, or rent your personal identification information to others.

4. Data Localization & Security

All Nextrasys data is hosted on secure cloud servers located within India (meity-empaneled data centers), ensuring low latency and compliance with data localization norms where applicable.

We implement "Reasonable Security Practices" as mandated by Rule 8 of the SPDI Rules, 2011, including AES-256 encryption for data at rest and TLS 1.3 for data in transit.

5. Grievance Redressal

In accordance with the Information Technology Act, 2000 and rules made thereunder, the name and contact details of the Grievance Officer are provided below: