Privacy & Data Protection Policy

Nurexify is an AI-powered, cloud-based Enterprise Resource Planning (ERP) platform designed for the real estate, construction, infrastructure, and property development industries in India and across global markets.

The platform includes modules such as:

• Customer Relationship Management (CRM) & Sales Automation
• Lead Management & Marketing Automation
• Project & Construction Management
• Inventory & Unit Management
• Procurement & Vendor Management
• Finance, Accounting & Tally Integration
• Human Resource Management (HRIS) & Payroll
• Customer Portal & Community Platform
• Channel Partner Portal
• Document Management
• AI-powered analytics, agents, and workflow automation
• Integrations with TallyPrime, WhatsApp Business, Google Workspace, and more

Ataraxy Solutions Private Limited is the data controller and service provider for the Nurexify platform.

This policy applies to visitors, trial users, registered customers, employees of customer organisations, administrators, vendors, partners, channel partners, consultants, contractors, mobile application users, and API users.

Personal Information

• Name, email address, phone number
• Company name, job title, business address
• Profile photo and login credentials

Organisation & Real Estate Business Data

Customers may store projects, towers, buildings, floors, units, inventory, pricing, customer bookings, payment schedules, agreements, construction progress, procurement records, vendor contracts, engineering drawings, site reports, and inspection reports. This information belongs to our customers — Nurexify processes it solely to provide contracted services.

Financial Information

• Invoices, receipts, ledger data, journal entries
• Vendor payments, customer collections, cost centres, budgets
• Purchase orders, GST records

AI Processing Data

When customers use AI features (including Ira, Arjun, and other AI agents), the system may process user prompts, natural language queries, uploaded documents, reports, business workflows, and chat interactions. AI-generated outputs should be reviewed before being relied upon for operational, financial, legal, or regulatory decisions.

Automatically Collected Information

• Browser type, device type, operating system, IP address
• Session information, pages visited, referring URLs
• Crash reports, error logs, and performance metrics

We use cookies to keep users signed in, remember preferences, improve performance, analyse traffic, detect fraud, and enhance security. Categories include essential cookies (required for authentication), functional cookies (preferences), analytics cookies (usage), and marketing cookies (campaign effectiveness where applicable). You can manage cookies through your browser settings.

• Provide, authenticate, and manage our services
• Deliver customer support and improve platform performance
• Develop new features and train AI capabilities using anonymised data where applicable
• Detect fraud, prevent abuse, and secure customer accounts
• Process payments and generate reports
• Communicate product updates and respond to enquiries
• Comply with legal obligations

We do not sell personal information.

Nurexify provides AI-assisted capabilities including analytics, document processing, workflow automation, report generation, and conversational assistance through AI agents such as Lead Responder, Collections Followup, Daily Briefing, Budget Guard, and others.

AI outputs may contain inaccuracies, should be reviewed by qualified personnel, and do not replace professional advice or human judgment. Where AI services are provided through third-party providers, only information necessary to perform the requested function is shared, subject to contractual safeguards.

Customers may connect Nurexify with TallyPrime, WhatsApp Business Platform, Google Workspace, Microsoft 365, LinkedIn, payment gateways, SMS providers, email service providers, cloud storage, and electronic signature platforms. Data exchanged with these services is governed by the customer's configuration and the applicable third-party terms and privacy policies.

We may share information with cloud hosting providers, payment processors, communication providers, customer-authorised integration partners, professional advisors, auditors, and regulators or law enforcement where legally required. We do not sell or rent customer data to third parties.

• Encryption of data in transit using industry-standard protocols
• Encryption of sensitive data at rest where appropriate
• Role-based access controls and multi-factor authentication options
• Audit logging and network monitoring
• Secure software development practices
• Regular backups and disaster recovery planning
• Vulnerability management and security monitoring

No system can guarantee absolute security. Customers also play an important role by maintaining strong passwords and controlling user access within their organisations.

We retain information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce agreements. Upon account termination, customer data will be retained only for the period required by applicable law or contractual obligations, after which it will be securely deleted or anonymised where feasible.

Depending on the services used and the location of our infrastructure or subprocessors, information may be processed in countries other than the country where it was collected. Where applicable, we implement appropriate contractual, technical, and organisational safeguards to protect personal information during such transfers.

Depending on applicable law, individuals may have rights to access, correct, delete, restrict processing of, or receive a copy of their personal information. For customer-managed data stored within the Nurexify platform, requests should generally be directed to the customer organisation acting as the data controller. For direct requests to Nurexify, contact [email protected].

Nurexify is intended for use by businesses and professionals. Our services are not directed to children, and we do not knowingly collect personal information from individuals below the age required under applicable law to provide valid consent.

• Ensuring lawful authority to upload and process personal information within the platform
• Configuring user permissions appropriately and managing account credentials securely
• Complying with applicable privacy and data protection laws in their jurisdiction
• Informing their own employees, customers, vendors, and end users about how their information is processed through Nurexify

If we become aware of a confirmed security incident affecting customer data, we will investigate promptly, take appropriate mitigation measures, and notify affected customers as required by applicable law and contractual obligations.

Nurexify is designed with privacy and security considerations aligned with:

• India's Digital Personal Data Protection (DPDP) Act
• General Data Protection Regulation (GDPR), where applicable
• Other applicable privacy regulations based on the jurisdictions in which we operate

Where required, we may enter into additional contractual arrangements, such as Data Processing Agreements, with enterprise customers.

We may update this Privacy & Data Protection Policy from time to time. Material changes will be indicated by updating the "Last Updated" date. Continued use of the services after such updates constitutes acceptance of the revised policy.