Privacy Policy

Last updated: 26 July 2026

This Privacy Policy explains how Krishna Prajapati, proprietor of Nexxora, a sole proprietorship having its principal place of business at Chembur, Mumbai, Maharashtra, India ("Nexxora", "we", "us", "our") collects, uses, discloses, and protects personal data of users of the website https://nexxora.co.in and related services (the "Platform"). This Policy is framed in accordance with the Information Technology Act, 2000 (including the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011) and the Digital Personal Data Protection Act, 2023 ("DPDP Act"). By using the Platform, you consent to the data practices described in this Policy.

Scope

The Platform is intended for users who are 18 (eighteen) years of age or older, consistent with our Terms & Conditions. Nexxora does not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will take steps to delete it promptly.

Personal data we collect

We may collect the following categories of personal data ("Personal Data") when you interact with the Platform: (a) identity and contact data, including name, email address, phone number, date of birth, and city/location; (b) academic and professional data, including educational background, field of study, resume or CV, portfolio links, and career interests, where voluntarily submitted for cohort applications or career services; (c) payment data, including billing name, transaction ID, and payment status — full card, UPI, or bank details are collected and processed directly by our payment gateway partner Razorpay and are not stored on Nexxora's own servers; (d) account and usage data, including login credentials (stored in encrypted form), cohort enrolment records, session attendance, assignment submissions, and platform usage/analytics data; (e) technical data, including IP address, browser type, device information, and cookies (see Clause 8); and (f) communications, including messages, feedback, or support queries you send to us.

How we use your information

We use Personal Data for the following purposes, consistent with the DPDP Act's requirement that data be processed only for specified, lawful purposes with your consent: (a) to create and manage your account and process cohort enrolments; (b) to deliver the Services, including live sessions, mentor matching, resume/portfolio review, and career guidance; (c) to process payments and issue receipts, in coordination with our payment gateway partner; (d) to communicate with you regarding your enrolment, cohort schedules, and support queries; (e) to send you updates about new cohorts, offers, or platform changes, where you have opted in to receive such communications — you may withdraw this consent at any time (see Clause 6); (f) to improve the Platform, monitor usage patterns, and maintain security and fraud prevention; and (g) to comply with applicable legal, tax, and regulatory obligations.

Legal basis and consent

We process your Personal Data on the basis of the consent you provide at the time of account creation, cohort enrolment, or when you otherwise submit information to us, and, where applicable, to perform our contractual obligations to you under our Terms & Conditions, or to comply with a legal obligation.

Sharing of information

We do not sell your Personal Data. We may share Personal Data in the following circumstances: (a) with mentors, solely to the extent necessary to enable them to deliver cohort sessions, review submitted work, and provide guidance (e.g., name, academic background, and submitted assignments); (b) with third-party service providers who support our operations, including payment processing (Razorpay), website hosting (Vercel), analytics (Google Search Console / Analytics), and email/communication tools — these providers are contractually or technically restricted from using your data for any purpose other than providing services to Nexxora; (c) where required by law, regulation, court order, or governmental request; and (d) in connection with a merger, acquisition, or sale of business assets, subject to equivalent privacy protections for the transferred data.

Your rights

Under the DPDP Act, you have the following rights as a Data Principal, which you may exercise by writing to us at contact@nexxora.co.in: (a) right to access — to obtain a summary of the Personal Data we hold about you and the processing activities undertaken; (b) right to correction and updating — to request correction of inaccurate or incomplete Personal Data; (c) right to erasure — to request deletion of your Personal Data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations under Clause 7; (d) right to withdraw consent — to withdraw consent for optional processing (e.g., marketing communications) at any time, without affecting the lawfulness of processing carried out before withdrawal; and (e) right to grievance redressal — to raise a complaint regarding the handling of your Personal Data, as set out in Clause 10. We will respond to verified requests within a reasonable timeframe, and in any event as required under applicable law.

Data retention

We retain Personal Data only for as long as necessary to fulfil the purposes described in this Policy, or as required to comply with legal, tax, or regulatory obligations (for example, financial records may be retained for the period mandated under Indian tax law). Upon a valid erasure request or account closure, we will delete or anonymise Personal Data, except where retention is legally required.

Cookies and tracking

The Platform uses cookies and similar technologies to operate core functionality (e.g., keeping you logged in) and to understand usage patterns through analytics tools such as Google Analytics/Search Console. You may disable cookies through your browser settings; however, this may affect the functionality of the Platform. We do not use cookies for behavioural advertising targeted at children, consistent with the DPDP Act's restrictions on tracking of minors — noting that the Platform is in any case restricted to users 18 and above.

Data security

We implement reasonable security practices and procedures, including encryption of sensitive data in transit, restricted access controls, and secure hosting infrastructure, to protect Personal Data against unauthorised access, alteration, disclosure, or destruction, in line with the IT (Reasonable Security Practices) Rules, 2011. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Grievance redressal

If you have any concerns about how your Personal Data is handled, please contact our designated Grievance/Privacy Contact — Name: Krishna Prajapati; Email: contact@nexxora.co.in; Address: Chembur, Mumbai, Maharashtra, India, pincode 400074. We will acknowledge and address grievances within a reasonable period, and in accordance with applicable timelines under Indian law.

Third-party links

The Platform may contain links to third-party websites or services (e.g., mentor LinkedIn profiles, payment gateway pages). This Policy does not apply to such third-party sites, and we encourage you to review their respective privacy policies.

Policy updates

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Material changes will be notified via the Platform or by email, and the "Last Updated" date above will be revised accordingly.

Governing law

This Policy is governed by the laws of India. Any disputes shall be subject to the dispute resolution and jurisdiction provisions set out in our Terms & Conditions.

Contact

For any questions about this Privacy Policy or our data practices, please contact us at contact@nexxora.co.in or write to us at Chembur, Mumbai, Maharashtra, India, pincode 400074.