Privacy Policy (draft)

Draft — requires business and legal review. This policy is a working draft prepared for the website and chat assistant. It has not yet been reviewed by DuesNexa's management or legal advisers and must not be relied on as final.

1. Who we are

This website is operated by DuesNexa LLP (trading as DuesNexa), #887/62/6/1, 2nd Cross, Begur Road, Vivekananda Nagar, Bommanahalli, Bengaluru, Karnataka 560068. Contact: admin@duesnexa.com, +91 96666 31696.

2. What we collect

Enquiry form: your name, company, email, phone number, the service you are interested in and your message.
Website chat: the messages you type, the assistant's replies, the time of each message and your preferred language. We link the chat to your browser session, not to your identity, unless you choose to share contact details.
Call-back requests: your name, phone number and enquiry, saved only after you tick or reply to the consent request.
WhatsApp (only when this channel is switched on): your WhatsApp number, profile name, your messages and delivery status information provided by Meta.
Technical data: server logs with redacted personal data, and a session cookie needed for the chat and forms to work securely.

Please do not share passwords, OTPs, card or bank details, or details about any specific loan account in chat.

3. Why we use it

To answer your questions and respond to your enquiry or call-back request.
To let a member of our team take over a conversation when you ask for a person.
To keep the service secure, prevent abuse and measure how well the assistant answers questions (using counts, not your personal details).

We process contact details on the basis of your consent, which you can withdraw at any time. We do not sell personal data or use chat content for advertising.

4. Automated assistant

The website assistant is automated. It answers from a knowledge base maintained by our team. When AI replies are switched on, your recent messages in that conversation are sent to our AI provider (Anthropic) to generate an answer; the provider acts on our instructions and does not receive your contact details from us. You can ask for a person at any time.

5. Who we share it with

Our hosting provider (GoDaddy), which stores the website and database.
Anthropic, PBC, when AI replies are switched on (see section 4).
Meta Platforms (WhatsApp Business Platform), only for conversations you start with us on WhatsApp, when that channel is switched on.
Authorities, where required by law.

Some of these providers may process data outside India. [Business to confirm cross-border transfer position under the DPDP Act, 2023 and its Rules.]

6. How long we keep it

Chat conversations are deleted automatically 180 days after the last message. Enquiries and call-back requests are deleted 365 days after they are received. Demo conversations are deleted within 48 hours. Raw technical records of WhatsApp events are stripped of message content after 7 days.

7. Your rights

Under the Digital Personal Data Protection Act, 2023 you may ask to access, correct or erase your personal data, withdraw consent, and raise a grievance. Use the data deletion request form or email us. On WhatsApp, reply STOP to stop automated messages.

8. Grievance officer

[Name and contact details of the grievance officer — to be provided]

9. Security

We use HTTPS, access-controlled staff accounts with role-based permissions, rate limiting and redacted logs. No system is perfectly secure; tell us at once if you believe your data has been exposed.

10. Children

This website is intended for businesses and adults. We do not knowingly collect data from children.

11. Changes

We will post any changes on this page with a new review date.