Privacy Policy

1. Information We Collect

We collect information you provide directly: name, email address, member type, profile details (bio, skills, location, social links), and any content you post. We also collect usage data, device information, and cookies to improve the platform experience.

2. How We Use Your Information

Your information is used to provide and improve NexArc services, including AI-powered matching (Orin™), personalised recommendations, job matching, and community features. We do not sell your personal data to third parties.

3. AI Matching (Orin™)

Our intelligence layer, Orin™, processes your profile data overnight to build your complete picture and prepare specific actions — including compatibility scores for co-founder matching, job matching, investor-startup fit, and mentor matching. Orin™ never acts without your permission. You can delete your profile data at any time.

4. Consent & Your Rights under DPDP Act 2023

NexArc operates in compliance with India's Digital Personal Data Protection (DPDP) Act, 2023. By creating an account and checking the consent box during signup, you provide explicit consent for the processing of your personal data as described in this policy. You have the following rights:

• Right to Access: You can request a copy of all personal data we hold about you via Settings > Download My Data.
• Right to Correction: You can update your profile and personal information at any time through your account settings.
• Right to Erasure: You can deactivate your account, after which your data will be permanently purged within 30 days.
• Right to Data Portability: You can export your data in machine-readable JSON format from your account settings.
• Right to Withdraw Consent: You may withdraw consent at any time by deactivating your account. This will not affect the lawfulness of processing carried out before withdrawal.

5. Data Security

We use industry-standard encryption (TLS 1.3) for data in transit and AES-256 for data at rest. Passwords are hashed using bcrypt. Access to production systems is restricted and audited.

6. Data Retention

We retain your data for as long as your account is active. Upon account deactivation, your personal data will be permanently deleted within 30 days. Anonymised, aggregated analytics data may be retained indefinitely. You may request immediate deletion by contacting us at privacy@nexarc.ai.

7. Third-Party Data Processors

We share the minimum data necessary with the following third-party processors to provide our services:

• Razorpay (Mumbai, India) — Payment processing. Receives name, email, and payment details.
• Resend (US) — Transactional email delivery. Receives email address and name.
• Azure OpenAI (Microsoft, US) — AI matching via Orin™. Receives anonymised profile data for scoring. No profile data is stored by Azure OpenAI.
• Sentry (US) — Error monitoring. May receive anonymised technical telemetry.
• Microsoft Azure (India region) — Cloud hosting and data storage.

Each processor is contractually bound to handle your data securely and only for the purposes specified.

8. Contact Us

For privacy-related questions or to exercise your data rights, contact us at privacy@nexarc.ai.