Privacy Policy

1. Introduction

CodeNXT Lab is a software engineering and applied AI consultancy registered and operating from the state of Maharashtra, India. For the purposes of India's Digital Personal Data Protection (DPDP) Act, 2023, CodeNXT Lab acts as a Data Fiduciary — meaning we determine the purpose and means of processing the personal data you share with us.

This Privacy Policy explains what information we collect, how we use it, who we share it with, how long we retain it, and how you can exercise your rights as a Data Principal under applicable Indian law. By engaging with our services — including our website, WhatsApp-based communication channels, and architecture simulator — you consent to the practices described in this policy.

2. Information We Collect

CodeNXT Lab operates with a minimal data footprint. We do not deploy invasive tracking cookies, fingerprinting scripts, or third-party analytics suites on our website. However, when you initiate contact through our WhatsApp Business API integration (e.g., via the "Execute This Architecture" or direct contact buttons), the following categories of personal data may be collected:

• WhatsApp Phone Number — Your mobile number as registered with WhatsApp, transmitted when you initiate a conversation.
• WhatsApp Profile Name — The display name associated with your WhatsApp account.
• Chat Metadata — Timestamps, message delivery/read receipts, and conversation thread identifiers generated during our interaction.
• Message Content — The text, media, or documents you voluntarily share within the chat to describe your project requirements.

We do not collect biometric data, financial information, or sensitive personal data as defined under the DPDP Act unless explicitly and voluntarily provided by you in the course of a project engagement.

3. How We Use Your Data

Personal data collected through our WhatsApp channel is used strictly for the following lawful purposes:

• Routing Architectural System Estimates — Processing the business type, priority, and requirements you provide through our architecture simulator to deliver a tailored technical proposal.
• Customer Support — Responding to your inquiries, clarifying project scope, and providing technical guidance related to our engineering services.
• Commercial Project Discussions — Establishing and managing a professional relationship, including scoping, quoting, and executing software development engagements.

We do not use your data for unsolicited marketing, automated profiling, or sale to third parties under any circumstances.

4. Third-Party Data Processing

Our primary client communication channel operates through the WhatsApp Business API, a product of WhatsApp LLC, a subsidiary of Meta Platforms, Inc. (1 Hacker Way, Menlo Park, California, USA).

When you send a message via WhatsApp, your data — including phone number, profile information, and message content — is transmitted through Meta's infrastructure. This transmission is subject to Meta's own data processing policies, which are independent of CodeNXT Lab's control. We strongly recommend reviewing the following:

• WhatsApp Privacy Policy
• Meta Platforms Privacy Policy

CodeNXT Lab does not control, and is not liable for, the data processing, storage, or retention practices of Meta Platforms, Inc. or any of its subsidiaries.

5. Data Retention & Deletion

Chat data and personal information collected through WhatsApp are retained by CodeNXT Lab only for as long as necessary to fulfill the purpose for which they were collected — typically for the duration of an active project engagement plus a maximum retention period of 180 days following project completion or last interaction, whichever is later.

After this period, all personally identifiable data is permanently deleted from our internal records. Anonymised, aggregated data that cannot be used to identify you may be retained indefinitely for internal analytics and service improvement.

As a Data Principal under the DPDP Act, you have the right to request the erasure of your personal data at any time, regardless of the retention schedule. To exercise this right, send a written request to [email protected]. We will process your erasure request within 30 days of receipt and confirm deletion via email.

6. Security Measures

All messages exchanged through WhatsApp are protected by WhatsApp's native end-to-end encryption protocol (Signal Protocol), ensuring that message content is encrypted in transit and can only be read by the sender and recipient. Neither Meta nor any intermediary can access the plaintext content of these messages.

Within our internal systems, we implement reasonable technical and organisational safeguards — including access controls, encrypted storage, and regular security audits — to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights Under the DPDP Act

As a Data Principal under India's Digital Personal Data Protection Act, 2023, you are entitled to the following rights:

• Right to Access — Request confirmation of whether we process your personal data and obtain a summary of the data held.
• Right to Correction — Request the correction of inaccurate or incomplete personal data.
• Right to Erasure — Request the permanent deletion of your personal data from our records.
• Right to Grievance Redressal — Lodge a complaint if you believe your data has been processed in violation of applicable law.
• Right to Nominate — Nominate another individual to exercise your data rights on your behalf in case of death or incapacity.

To exercise any of these rights, contact us at [email protected].

8. Grievance Officer

In accordance with the Information Technology Act, 2000, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the DPDP Act, 2023, the designated Grievance Officer for CodeNXT Lab can be reached at [email protected]. All grievances will be acknowledged within 24 hours and resolved within 15 days of receipt.

9. Changes to This Policy

CodeNXT Lab reserves the right to update this Privacy Policy at any time. Material changes will be reflected by updating the "Last Updated" date at the top of this page. Continued use of our services after such changes constitutes your acceptance of the revised policy. We encourage you to review this page periodically.