PRIVACY POLICY

1. Who we are

Company Name: Nextherrion Technologies Private Limited

Nextherrion is a technology and professional services company that may provide services including:

• AI and Intelligent Systems
• Generative AI
• AI Agents and AI Copilots
• Retrieval-Augmented Generation (RAG) and Enterprise Knowledge Systems
• AI Automation and AI Integration
• Predictive Analytics
• Computer Vision
• Natural Language Processing and Conversational AI
• AI Strategy, AI Readiness and AI Governance
• Custom Software Engineering
• Web, Mobile and Enterprise Application Development
• SaaS and Platform Development
• Product Engineering and MVP Development
• Application and Legacy Modernization
• Cloud-Native Transformation
• API Development and Third-Party Integrations
• Enterprise Automation and Business Process Transformation
• Workflow and Case Management Solutions
• CRM, ERP and Internal Business Systems
• Salesforce-related Services
• Pega-related Services
• Technology Consulting
• Managed, Maintenance and Support Services
• Other related technology and professional services.

For the purposes of this Privacy Policy, Nextherrion may act in different roles depending on the nature of the relationship and the applicable service. In certain circumstances, we may process personal information on behalf of a client and in accordance with the client's instructions and the applicable contractual arrangements.

2. Scope of this Privacy Policy

This Privacy Policy applies to personal information that we collect or process in connection with:

• our website;
• website contact forms and enquiry forms;
• requests for consultations, demonstrations, proposals, quotations, or information;
• business communications with us;
• newsletters or marketing communications, where applicable;
• recruitment-related communications, where applicable;
• other interactions directly with Nextherrion.

This Privacy Policy does not automatically govern personal information processed by Nextherrion on behalf of a client under a separate client engagement.

Where Nextherrion provides services to a client and processes personal information on the client's behalf, the applicable client agreement, data processing agreement, instructions, and relevant law may govern that processing.

3. Personal information we may collect

Depending on how you interact with us, we may collect the following categories of personal information.

3.1 Information you provide directly

You may provide information such as:

• Name
• Business or organization name
• Job title or professional role
• Email address
• Telephone or mobile number
• Business address
• Country or location
• Information submitted through contact or enquiry forms
• Details about your business requirements
• Project or service requirements
• Information contained in communications with us
• Information provided during consultations or business discussions
• Other information you voluntarily choose to provide.

3.2 Website and technical information

When you access our website, we or our technology providers may collect certain technical information, which may include:

• Internet Protocol (IP) address
• Browser type and version
• Device information
• Operating system
• Website pages visited
• Date and time of access
• Referring website or source
• Approximate location derived from technical information
• Website usage and interaction information
• Cookies and similar technologies, where used.

3.3 Business and professional information

Where relevant to a business enquiry or relationship, we may collect professional information such as:

• Organization name
• Industry
• Company size
• Professional role
• Business contact details
• Business requirements
• Technology environment or requirements
• Information relating to a potential project or engagement.

3.4 Information from other sources

Where permitted by applicable law, we may receive information from other sources, such as:

• publicly available sources;
• business partners;
• referral sources;
• event registrations;
• professional networking platforms;
• service providers;
• clients or prospective clients.

4. How we use personal information

We may use personal information for purposes including:

4.1 Responding to enquiries

To:

• respond to your messages;
• contact you regarding your enquiry;
• arrange consultations or meetings;
• understand your service requirements;
• provide requested information.

4.2 Business development and client engagement

To:

• evaluate potential business opportunities;
• prepare proposals or quotations;
• communicate regarding potential services;
• manage business relationships;
• negotiate and administer client engagements.

4.3 Providing and improving services

Where applicable, to:

• provide technology and professional services;
• manage service delivery;
• communicate with clients and authorized contacts;
• provide support;
• maintain and improve our operations, services, processes, and technology.

4.4 Website operation and improvement

To:

• operate and maintain the website;
• understand website usage;
• improve website functionality and content;
• identify technical problems;
• maintain security;
• prevent misuse and fraudulent activity.

4.5 Marketing and communications

Where permitted by applicable law, we may use appropriate contact information to:

• provide information about Nextherrion;
• share relevant service information;
• send business or marketing communications;
• inform you about events, updates, capabilities, or offerings.

You may have the right to opt out of certain marketing communications.

4.6 Legal, security and compliance purposes

To:

• comply with applicable legal obligations;
• protect our rights and interests;
• protect the security of our website, systems, personnel, clients, and users;
• investigate suspected fraud, misuse, or security incidents;
• establish, exercise, or defend legal claims.

5. Our legal basis for processing

We process personal information only where we have an appropriate basis to do so under applicable law.

Depending on the circumstances, this may include:

• your consent, where consent is required;
• taking steps requested by you before entering into a contract;
• performing a contract or providing requested services;
• complying with legal obligations;
• protecting legitimate business interests where permitted by applicable law;
• another lawful basis available under applicable law.

The precise legal basis may vary depending on your location, the nature of the information, and the purpose for which it is processed.

6. How we share personal information

We may share personal information where reasonably necessary and permitted by applicable law. This may include sharing with:

6.1 Service providers

Third-party providers that support our operations, such as providers of:

• website hosting;
• cloud infrastructure;
• email and communications;
• analytics;
• cybersecurity;
• customer relationship management;
• business productivity tools;
• technology platforms;
• professional services.

Such providers may process information on our behalf or provide services to us subject to applicable arrangements.

6.2 Clients and business partners

Where necessary in connection with a business relationship, service engagement, project, referral, partnership, or authorized business activity.

6.3 Third-party technology providers

Where a service involves third-party software, cloud infrastructure, APIs, AI models, enterprise platforms, or other technology providers, information may be processed through or shared with the relevant provider as necessary for the agreed purpose and subject to applicable arrangements.

6.4 Legal and regulatory authorities

Where required or permitted by law, regulation, legal process, court order, governmental request, or other applicable legal requirement.

6.5 Corporate transactions

If permitted by applicable law, personal information may be disclosed in connection with a merger, acquisition, restructuring, financing, sale of assets, or other corporate transaction.

We do not sell personal information in a manner prohibited by applicable law.

7. AI and automated technologies

Nextherrion may use, develop, implement, integrate, or provide services involving artificial intelligence and related technologies.

Depending on the applicable service or technology, information may be processed using:

• Generative AI
• AI models
• Machine learning systems
• AI agents
• AI copilots
• Natural language processing
• Predictive analytics
• Automation technologies
• Other intelligent systems.

The specific processing arrangements for a client project may be governed by a separate contract, Statement of Work, Data Processing Agreement, security documentation, or other applicable agreement.

We do not intend to use personal information submitted through the website to train an AI model unless such use is appropriately authorized and permitted under applicable law and the relevant arrangements.

Where AI or automated systems are used, Nextherrion may implement appropriate technical, organizational, contractual, and operational measures based on the nature of the service and applicable requirements.

8. Client data processing

In certain client engagements, Nextherrion may process personal information or other data on behalf of a client.

In such circumstances, the client may determine the purpose and means of processing, while Nextherrion may process information according to:

• the client's documented instructions;
• the applicable service agreement;
• a Data Processing Agreement, where applicable;
• agreed technical and organizational measures;
• applicable law.

The client remains responsible for ensuring that it has the necessary authority, permissions, notices, and legal basis for the information it provides for processing, unless otherwise expressly agreed in writing.

9. Cookies and similar technologies

Our website may use cookies, pixels, analytics technologies, or similar technologies.

These technologies may be used to:

• enable website functionality;
• remember preferences;
• understand website usage;
• improve performance;
• maintain security;
• analyze traffic and interactions.

The specific cookies and technologies used on our website may change over time.

Where required by applicable law, we will seek appropriate consent before placing non-essential cookies or similar technologies.

You may also be able to manage certain cookies through your browser or device settings. Disabling cookies may affect certain website functionality.

10. International data transfers

Nextherrion may operate with clients, service providers, technology platforms, and infrastructure located in different countries.

Accordingly, personal information may be transferred to, stored in, or processed in countries other than the country in which you originally provided the information, subject to applicable law.

Where required, we may implement appropriate safeguards or contractual arrangements for applicable international data transfers.

11. Data retention

We retain personal information for no longer than reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law.

The retention period may depend on factors including:

• the nature of the information;
• the purpose for which it was collected;
• the duration of a business or client relationship;
• contractual requirements;
• legal, regulatory, tax, accounting, or record-keeping requirements;
• dispute resolution requirements;
• security and fraud prevention needs.

When information is no longer required, we may delete, anonymize, securely dispose of, or otherwise handle it in accordance with applicable requirements.

12. Data security

We aim to implement reasonable and appropriate technical, organizational, and administrative measures designed to protect personal information against unauthorized access, accidental loss, misuse, alteration, disclosure, or destruction.

However, no website, network, information system, or method of electronic transmission or storage can be guaranteed to be completely secure.

Accordingly, while we take reasonable steps to protect information, we cannot guarantee absolute security. You should also take appropriate precautions when transmitting information electronically.

13. Your privacy rights

Depending on applicable law and your location, you may have certain rights regarding your personal information. These rights may include the right to:

• request access to personal information;
• request correction or updating of inaccurate information;
• request deletion of personal information, subject to applicable limitations;
• withdraw consent where processing is based on consent;
• object to or restrict certain processing;
• request information regarding how your personal information is processed;
• opt out of certain marketing communications;
• exercise other rights available under applicable law.

The availability and scope of these rights may depend on applicable law and the circumstances of the processing.

To make a privacy-related request, please contact us using the information in the "Contact us" section below. We may need to verify your identity or authority before responding to certain requests.

14. Marketing communications

Where permitted by applicable law, Nextherrion may send you business, service-related, or marketing communications.

You may opt out of receiving certain marketing communications by:

• following the unsubscribe instructions contained in the communication, where available; or
• contacting us using the details below.

Even if you opt out of marketing communications, we may still send you communications necessary for:

• responding to an existing enquiry;
• providing requested information;
• administering a business or client relationship;
• performing contractual obligations;
• legal or security purposes.

15. Third-party websites and services

Our website may contain links to third-party websites, platforms, tools, or services.

This Privacy Policy does not apply to information collected directly by independent third parties through their own websites or services.

We encourage you to review the privacy policies of third parties before providing them with personal information.

Nextherrion is not responsible for the privacy practices, content, security, or policies of independent third-party websites or services.

16. Children's privacy

Our website and services are generally intended for business, professional, and organizational users.

We do not knowingly collect personal information from children in violation of applicable law.

If you believe that a child has provided personal information to us in circumstances where such collection is not permitted, please contact us, and we will take appropriate steps in accordance with applicable law.

17. Do not provide unnecessary sensitive information

Unless specifically requested and appropriate for the relevant purpose, please do not submit unnecessary sensitive personal information through general website contact forms or enquiries.

If a particular client engagement requires the processing of sensitive, confidential, regulated, or special-category information, the relevant processing requirements should be addressed through appropriate contractual, security, privacy, and compliance arrangements.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• our business;
• our services;
• our website;
• technology;
• legal or regulatory requirements;
• privacy practices.

When we make changes, we will update the "Last updated" date at the beginning of this Privacy Policy.

Where required by applicable law, we may provide additional notice or obtain consent in connection with material changes. We encourage you to review this Privacy Policy periodically.

19. Contact us

If you have questions, concerns, complaints, or requests relating to this Privacy Policy or our handling of personal information, please contact us using the details below.

20. Privacy complaints

If you have a concern regarding our handling of your personal information, you may contact us using the details above.

Please provide sufficient information about your concern so that we can review and respond appropriately.

Where applicable, you may also have the right to raise a complaint with a competent data protection, regulatory, or other authority in accordance with applicable law.

21. Governing law

This Privacy Policy shall be interpreted in accordance with applicable data protection and privacy laws and, where relevant, the laws specified in Nextherrion's applicable Terms of Service or other governing agreement.

Nothing in this Privacy Policy is intended to limit rights that cannot lawfully be limited under applicable law.