Privacy Policy

1. Who We Are

Nexara Cloud Labs Private Limited
Bangalore, Karnataka, India
Email:

We are an AI-first technology consultancy providing engineering services, corporate AI training, and technology solutions to businesses globally.

2. What Data We Collect

We only collect data that you voluntarily provide to us. We do not use tracking cookies or analytics tools that collect personal data without your knowledge.

Contact Form

• Name — to address you correctly
• Email address — to respond to your enquiry
• Message — the content of your enquiry

Job Applications

• Full name
• Email address
• Phone number (optional)
• Years of experience per skill — based on job requirements
• LinkedIn profile URL (optional)
• Resume — uploaded directly and stored securely on Supabase Storage

Website Usage

We do not currently use cookies, Google Analytics, or any third-party tracking tools on our website. Your visit to our website is not tracked or profiled.

3. How We Use Your Data

• To respond to enquiries — we use your contact form data solely to reply to your message
• To process job applications — we use application data to evaluate your suitability for open roles
• To communicate about services — only if you have expressed interest in our services

We do not use your data for marketing without your explicit consent. We do not sell, rent, or trade your personal data to any third party.

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Legitimate interest — responding to your enquiries and processing job applications
• Consent — where you have voluntarily submitted information to us
• Contractual necessity — where processing is necessary to fulfil a service agreement

5. Third-Party Services We Use

To operate our website and process your data, we use the following third-party services:

• Vercel — website hosting (USA). Privacy Policy
• Supabase — database and file storage for job applications and resumes (USA). Privacy Policy
• Resend — transactional email delivery (USA). Privacy Policy
• EmailJS — contact form email delivery (USA). Privacy Policy
• GitHub — source code and deployment (USA). Privacy Policy

All third-party providers are bound by their own privacy policies and data processing agreements. We have selected providers that comply with GDPR where applicable.

6. How Long We Keep Your Data

• Contact form submissions — retained for up to 12 months, then deleted
• Job applications — retained for up to 6 months after the role is filled, then deleted
• Client communications — retained for the duration of the business relationship plus 2 years

You can request deletion of your data at any time by emailing us at support@nexaracloudlabs.com.

7. Your Rights

Under GDPR and applicable data protection laws, you have the following rights:

• Right to access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your personal data
• Right to restrict processing — request that we limit how we use your data
• Right to data portability — request your data in a portable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — withdraw consent at any time where processing is based on consent

To exercise any of these rights, email us at support@nexaracloudlabs.com. We will respond within 30 days.

8. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website is served over HTTPS, all form submissions are encrypted in transit, and resumes are stored securely in Supabase Storage with restricted access policies.

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. International Data Transfers

Nexara Cloud Labs is based in India. Some of the third-party services we use (listed in Section 5) are based in the United States. When your data is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses where required by GDPR.

10. Children's Privacy

Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

If you are based in the EU and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.