Privacy Policy

We collect information you provide directly to us when you register for an account, subscribe to our services, or communicate with us. This includes:

• Personal Details: Name, business name, email address, phone number, and account credentials.
• Payment & Billing Details: Billing address, transaction IDs, subscription details. Payment card details and net banking credentials are handled securely by our payment gateway partners.
• Messaging Data: Content, contacts, metadata, and configuration of messaging campaigns run through the WhatsApp Business API integration on NexChat.

We process your personal information for the following business purposes:

• To set up, manage, and secure your NexChat account and services.
• To process payments and transactions for your subscription.
• To provide, analyze, improve, and optimize our WhatsApp AI Chatbot features.
• To send customer support notifications, system updates, and security alerts.
• To comply with regulatory, legal, or banking compliance obligations.

All online transaction processing is completed using secure, encrypted third-party payment gateways. NexChat does not store or access your credit/debit card numbers, CVVs, or internet banking credentials on our servers. The transaction details, billing address, and payment status are shared only with the respective payment service providers and our partner banks to verify the transaction.

We use cookies and similar tracking tools to recognize your active sessions, verify login status, understand user preferences, and analyze website traffic. You can adjust your browser settings to reject cookies, though some features of our service dashboard might not function correctly as a result.

Our services integrate with third-party APIs (including Meta / WhatsApp Business API) and hosting infrastructure. Your data will only be shared with these services as necessary to facilitate the service delivery (such as sending messages through Meta's WhatsApp servers). We do not sell or rent your personal information to third parties for marketing purposes.

We employ industry-standard encryption protocol (SSL/TLS) for data transmission, access control measures, and secure cloud environments to safeguard your data. While we take every measure to protect your data, no method of transmission over the internet or storage is completely secure, and we cannot guarantee absolute security.

Under the Digital Personal Data Protection (DPDP) Act, we retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or to comply with statutory and legal obligations. Once your account is terminated or you request deletion, we will delete or anonymize your personal data within a reasonable period, not exceeding 180 days, unless longer retention is required by applicable law.

If you are a resident of India, the DPDP Act grants you specific rights regarding your personal data:

• Right to Access: You can request a summary of the personal data we process, along with the identities of third parties we share it with.
• Right to Correction & Erasure: You have the right to correct, complete, or request erasure of your personal data when it is no longer necessary for the purpose.
• Right to Withdraw Consent: You can withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
• Right to Grievance Redressal: You have the right to register a grievance with our Grievance Officer or escalate to the Data Protection Board of India (DPBI) if your concerns are not resolved within statutory timelines.

To exercise these rights, please fill out our Data Rights Request Form.

If you have any questions about this privacy notice, your data protection rights, or if you wish to file a grievance, please contact our designated Grievance Officer: