About this draft
This is a working draft written for the preview version of the Nexstarc website. It has not been through a legal review, and it will change when the production website is built and the tools behind it are chosen. Text in [square brackets] marks a fact we still need to confirm, so please do not rely on those parts.
Who is responsible for your information
The business responsible for the personal information described here is:
- Business
- NEXSTARC TECHNOLOGIES, a registered partnership firm, trading as Nexstarc
- Address
- Thiruvananthapuram, Kerala, India
- hello@nexstarc.com
- Phone
- +91 9061430404
- Privacy enquiries
- Handled internally through hello@nexstarc.com. No dedicated privacy officer or representative has been appointed. [whether any appointment is required is for final legal review]
More business details are on the Company Details page.
Information we receive
Enquiries
When you write to us by email, WhatsApp or through the contact form, we receive what you give us: usually your name, email address, the kind of project you have in mind, an optional budget range and whatever you write in your message.
Meeting requests
If you ask to arrange an online meeting, we receive the same details plus anything you tell us about timing. Meetings are held in English. We plan to use Calendly for scheduling, which is not yet set up on this site. [what Calendly records and where it processes it]
Free website and AI visibility reviews
For a free review we receive your name, email address, website address, the focus you choose and an optional message. We review selected public pages of your site and email you three priority recommendations. The review is carried out by our AI team under the oversight of our CTO. See AI-assisted audits and reviews below.
Client relationships
If you become a client, we also hold project briefs, content and files you send us, access details you give us so we can do the work, invoices and payment records, and our communications with you.
Website and technical data
Like most websites, this one may record technical information such as your browser, device and the pages you visit. [what is actually collected, once hosting and analytics are chosen] See the Cookie Policy for cookies and similar technologies.
Messages through WhatsApp
If you contact us through WhatsApp, we see your number and your message. WhatsApp processes the conversation under its own terms and privacy policy.
The preview forms and the planned production site
Today. The contact form and the free review form on this preview site do not send submissions. When you press the button, the page shows a message that this is a preview, nothing leaves your browser, and nothing is stored by us. To reach us now, email hello@nexstarc.com.
Planned. When the production website goes live, the forms are intended to send submissions to hello@nexstarc.com through a server-side form endpoint or a form service. Which one, and where it processes information, has not been chosen, and nothing is connected on this preview site. [how submissions are delivered and stored, and where] This policy will be updated before real submissions are switched on.
Why we use your information, and the legal basis
The legal basis for using personal information depends on where you are. Where EU or UK data protection law applies, we need a recognised basis such as a contract, legitimate interests, a legal obligation or consent. Where India's Digital Personal Data Protection Act, 2023 applies, personal data is generally used on the basis of consent or a defined legitimate use. [legal review to confirm which laws apply to us and the correct basis for each purpose]
| Purpose | What it covers | Legal basis |
|---|---|---|
| Replying to enquiries and meeting requests | Reading your message, replying, arranging a meeting | Steps you ask us to take before a contract; legitimate interests in running our business [confirm] |
| Free website and AI visibility review | Reviewing selected public pages and sending recommendations | Your request; legitimate interests [confirm, and whether consent is needed to contact you again] |
| Providing services to clients | Doing the work, supporting it and invoicing it | Performing our contract with you |
| Accounting, tax and legal duties | Invoices and financial records | Legal obligation |
| Running and securing the website | Technical logs, spam protection, fixing faults | Legitimate interests [confirm] |
| Analytics | Google Analytics is planned for the production website and is not installed yet | Consent where required [confirm] |
| Protecting our rights | Handling disputes and legal claims | Legitimate interests; legal claims [confirm] |
AI-assisted audits and reviews
We use AI tools inside our own process, and our team stays responsible for the decisions and checks. The tools we use include Claude Code, ChatGPT, Codex and Astra. For website audits, we work like this:
- We obtain your permission before using AI tools for an audit. For a free review, you start the request yourself by sending us your website address. [how permission is recorded]
- We give the tool the public website address (URL). We do not upload your private files, credentials or source code for that audit.
- Code-level audits are performed manually by our team.
A URL-based audit can involve the tool accessing publicly available content on your website. We do not claim that no information reaches an AI provider. [how each tool and its provider handles the information it receives is still to be documented]
Who we share it with
These are the providers we plan to use for the production website. They are planned only: none of them is installed or configured on this preview site, and hosting, email and the form service are not final.
- Website hosting: probably BigRock (not final). [hosting location]
- Email: likely BigRock's email service (not final).
- Forms: a server-side form endpoint or a hosted form service (not chosen yet).
- Analytics: Google Analytics.
- Meeting scheduling: Calendly.
- Payments: made off-site by invoice, through the methods in our Terms of Service. This website has no online checkout or payment integration.
[where each provider processes information, and the safeguards that apply]
We may also disclose information where the law requires it or to protect our rights. [confirm any other recipients, for example accountants or subcontractors]
International processing
Nexstarc is based in India and works with clients in India and Europe. Personal information may therefore be handled in India, in the European Economic Area and in other countries where our providers operate. [countries involved and the transfer safeguards used, for example standard contractual clauses, to be confirmed in legal review]
How long we keep it
Different kinds of information are kept for different reasons, so we treat them separately.
Project materials. These are the files, designs, content and access details you give us so we can do the work. We intend to remove them when the agreed project engagement ends. We have not set a deletion date yet, because it has to be reconciled with the two months of included post-launch support and with any continuing care agreement. [the exact timing, to be settled before launch]
Invoices, correspondence and backups. These are handled separately from project materials, and some of this information can remain after the project materials are removed, for example where records must be kept for accounting or legal reasons. A copy may also remain in a backup for a limited time. We do not delete every record immediately. Retention settings and backup arrangements are launch tasks for the production website. [exact periods, backup arrangements and required accounting retention are still to be established]
| Information | Period or criteria |
|---|---|
| Enquiries that do not become projects | [period] |
| Free review requests | [period] |
| Client project materials | We intend to remove them when the agreed engagement ends. [timing, reconciled with post-launch support and any continuing care] |
| Correspondence | Kept during the client relationship. [period afterwards] |
| Invoices and accounting records | [period required by the applicable tax and accounting law] |
| Website and technical logs | [period] |
| Backups | [arrangements and how long deleted data may remain in them] |
How we protect it
[security measures to be described accurately once hosting, tools and access controls are confirmed]
Your rights
Depending on where you live, you may have rights over your personal information. These can include the right to know what we hold about you, to have it corrected or deleted, to restrict or object to some uses, to receive a copy in a portable form, and to withdraw consent you have given. Under India's Digital Personal Data Protection Act, 2023 you may have comparable rights, including the right to grievance redressal. [legal review to confirm the rights that apply and any limits]
To use a right, email hello@nexstarc.com with the subject "Personal data request". We may need to confirm who you are before acting on a request.
Complaints
Please contact us first at hello@nexstarc.com so we can try to put things right. You may also be able to complain to a data protection authority: [the supervisory authority in your country, and the Data Protection Board of India where applicable].
Changes to this policy
We will update this page when our practices change, and will change the date below. [date of the final version] This draft was prepared on 8 October 2026.
Contact us about personal data
Email hello@nexstarc.com. Business details are on the Company Details page.