Privacy policy

1. Who we are and how to contact us

This policy is issued by Nexgsoft (“Nexgsoft”, “we”, “us”, “our”), based in Gurugram, Haryana, India. We do not have a separate registered data protection officer; all privacy questions, requests, and complaints go to the same contact below and are handled by our team directly.

Email: support@nexgsoft.com
Phone: +91 79036 67660
Website: https://nexgsoft.com

2. What information we collect

We collect information in the following ways.

• Contact form submissions. When you use the contact form we collect your name, email address, phone number, company, service interest, budget range, and the message you write.
• Direct messages. If you email us or message us on WhatsApp instead of using the form, we hold the contents of that conversation and your contact details in the same way.
• Booking details. If you book a call through our Calendly link, Calendly collects your name, email, and the time you selected, and shares those booking details with us so we can prepare for the call.
• Technical and usage data. When analytics cookies are active, we (through Google Analytics) collect your IP address, device and browser information, pages viewed, approximate location derived from your IP address, and the site or search engine that referred you to us.
• Advertising and conversion data. When advertising cookies are active, Google Ads and the LinkedIn Insight Tag record that an ad click led to a visit or a form submission, so we can measure whether our advertising is working.

3. How we use it and the legal basis

We use the information above to:

• Respond to your enquiry and prepare a quote or proposal.
• Deliver, manage, and support any project you engage us for.
• Send you information you have asked for, such as a follow-up to a call.
• Understand how visitors use this website and improve it, where analytics cookies are active.
• Measure and improve our advertising, where advertising cookies are active.
• Meet our legal, tax, and accounting obligations.
• Detect and prevent spam and abuse of the contact form.

For visitors in India, we process personal data under the Digital Personal Data Protection Act, 2023 (DPDP Act), on the basis of your consent (for example, submitting the contact form, or accepting cookies) or for the performance of a contract you have asked us to prepare.

For visitors in the European Union or United Kingdom, our legal bases under the GDPR and UK GDPR are: your consent (analytics and advertising cookies), contract or steps taken before entering into a contract (responding to your enquiry and preparing a proposal), our legitimate interests (keeping the website secure, preventing fraud, and understanding aggregate usage), and legal obligations (accounting and tax records).

4. Cookies and similar technologies

The cookie banner shown on this site lets you accept all cookies or reject non-essential ones. Strictly necessary cookies are always active because the site cannot function properly without them; analytics and advertising cookies only load after you accept them.

To change your choice, clear this site’s cookies and local storage in your browser settings and reload the page - the banner will appear again.

5. Who we share information with

We do not sell personal information. We share it only with the following categories of recipients, and only as needed:

• Service providers who help us run this website or deliver a project, such as our hosting provider, our email provider, Google (Analytics and Ads), LinkedIn (Insight Tag), Calendly (call booking), and WhatsApp/Meta (chat messages you choose to send us).
• Professional advisers such as our accountant or lawyer, where needed for our own legal or financial obligations.
• Legal or regulatory bodies, where we are required to disclose information by law or to protect our rights.

If you accept advertising cookies, sharing data with Google and LinkedIn for advertising purposes may be treated as a “sale” or “sharing” of personal information under some US state privacy laws (such as California’s). You can decline this by choosing “Reject non-essential” in the cookie banner.

6. International transfers

We are based in India. Some of the service providers listed above process data on servers outside India, including in the United States. Where we transfer personal data internationally, we rely on the safeguards those providers offer (such as standard contractual clauses or equivalent mechanisms) to protect it to a comparable standard.

7. How long we keep information

• Contact form and other enquiries: up to 24 months from your last contact with us, unless you become a client.
• Client records: for the period needed to deliver the engagement, plus 6 years afterward, to meet our accounting and legal obligations.
• Analytics data: as configured in Google Analytics, up to 14 months.

8. Security measures

We take reasonable technical and organizational measures to protect the personal information we hold, including access controls, encrypted connections (HTTPS), and limiting access to the people who need it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security of information you send us.

9. Your rights

Depending on where you are located, you may have the right to access the personal information we hold about you, correct it, delete it, withdraw consent you previously gave, object to or restrict certain processing, receive a copy in a portable format, or (under the DPDP Act) nominate another individual to exercise your rights on your behalf if you become unable to.

If you are a California resident, you have similar rights under California privacy law, including the right to know what personal information we hold, to request its deletion, and to opt out of the sharing described above by rejecting advertising cookies.

To exercise any of these rights, email us at support@nexgsoft.com. We will respond within 30 days.

10. Client data and credentials

For AWS cloud and Microsoft 365 engagements, we access client systems only as explicitly authorized for the engagement, using least-privilege, scoped access wherever the platform allows it. We do not keep client credentials for longer than the engagement requires, and access is revoked or handed back at the end of the engagement. Any client data we see in the course of this work is handled under the engagement agreement or NDA in place with that client, not under this website policy.

11. Children

Our services are provided to businesses and are not directed to, or intended for use by, anyone under 18. We do not knowingly collect personal information from children.

12. Links to other websites

This site links to third-party services such as WhatsApp, Calendly, and LinkedIn. Once you leave our site, their own privacy policies apply, and we are not responsible for their content or practices.

13. Changes to this policy

We may update this policy from time to time, for example if we start using a new tool or change how we handle data. The “last updated” date at the top of this page reflects the most recent revision. Material changes will be reflected here before they take effect.

14. Complaints

If you have a concern about how we handle your personal information, please contact us first at support@nexgsoft.com so we can try to resolve it directly. You also have the right to lodge a complaint with your local data protection authority - for example, the relevant authority under the DPDP Act in India, your national supervisory authority under the GDPR in the EU, or the Information Commissioner’s Office (ICO) in the UK.