Privacy Policy

1. Introduction

CodeNXT Lab is a software engineering and applied AI consultancy registered and operating from the state of Maharashtra, India. For the purposes of India's Digital Personal Data Protection (DPDP) Act, 2023, CodeNXT Lab acts as a Data Fiduciary — meaning we determine the purpose and means of processing the personal data you share with us.

This Privacy Policy explains what information we collect, how we use it, who we share it with, how long we retain it, and how you can exercise your rights as a Data Principal under applicable Indian law. By engaging with our Site and WhatsApp channels, you consent to the practices described in this policy.

2. Information We Collect

CodeNXT Lab operates with a minimal data footprint. We do not deploy invasive tracking cookies, fingerprinting scripts, or third-party analytics suites. However, when you initiate contact through our WhatsApp Business API integration, the following categories of personal data may be collected:

• WhatsApp Phone Number — Mobile number as registered with WhatsApp.
• WhatsApp Profile Name — Display name associated with your WhatsApp account.
• Chat Metadata — Timestamps, delivery/read receipts, and thread identifiers.
• Message Content — Project requirements or information you voluntarily share within the chat.

We do not collect biometric data, financial information, or sensitive personal data as defined under the DPDP Act unless voluntarily provided.

3. How We Use Your Data

Personal data collected through our WhatsApp channel is used strictly for:

• Routing Architectural System Estimates — Processing requirements from the simulator to generate proposals.
• Customer Support — Responding to inquiries and providing project guidance.
• Commercial Project Discussions — Scoping, quoting, and executing software development SOWs.

We do not use your data for unsolicited marketing, automated profiling, or sale to third parties.

4. Third-Party Data Processing

Our client communication channel operates through the WhatsApp Business API, owned by Meta Platforms, Inc.

When you send a message, your data is processed through Meta's infrastructure and is subject to Meta's data processing policies. We recommend reviewing the WhatsApp and Meta Privacy Policies. CodeNXT Lab does not control and is not liable for Meta's independent processing.

5. Data Retention & Deletion

Chat data is retained only for the duration of the engagement, plus a maximum of 180 days following project completion or last interaction.

As a Data Principal under the DPDP Act, you have the right to request erasure of your data at any time. Send requests to [email protected]. We will process requests within 30 days.

6. Security Measures

All messages exchanged through WhatsApp are protected by native end-to-end encryption (Signal Protocol). Plaintext content is only accessible to the sender and recipient. Within our systems, we use encrypted storage and access controls to secure data.

7. Your Rights Under the DPDP Act

As a Data Principal, you have the right to access, correct, erase, nominate representation, and seek redressal for your data. Contact us at [email protected] to exercise these rights.

8. Grievance Officer

The designated Grievance Officer for CodeNXT Lab can be reached at [email protected]. Grievances will be acknowledged within 24 hours and resolved within 15 days.