Privacy Policy
This Privacy Policy explains how Techno Infonet Gujarat Pvt. Ltd. ("DevNexa", "we", "us") collects, uses, stores, discloses and protects information when you use the DevNexa platform, our marketing website, or interact with us.
We treat your data as if it were our own — because a copy of it is. DevNexa is the tool we use to run our own delivery floor, so the standards below apply to us first.
1. What we collect
1.1 Information you provide directly
- Account & tenant data — company name, admin name, email, phone, billing address, tax IDs (GSTIN/PAN).
- User data — name, email, role, timezone, profile photo, of every user you invite.
- Customer Data — tickets, work items, sprints, standups, comments, attachments, time logs and any other content you or your users create in the workspace.
- Support communication — messages you send us at support@technoinfonet.com or via the in-app help.
1.2 Information collected automatically
- Usage data — pages visited, features used, IP address, user agent, timezone.
- Cookies & session tokens — first-party cookies for authentication, CSRF protection, and preference storage. We do not use third-party advertising cookies.
- Web push subscriptions — the browser-issued endpoint plus its public keys, so we can deliver notifications you opted into.
1.3 Payment data
Payments are processed by third-party payment gateway providers. Your card number, CVV, and full banking details are collected and stored by the gateway, not by us. We only receive and store a payment reference, the amount, the gateway status, and the billing address needed to generate a compliant tax invoice.
2. Why we collect it — legal basis
| Purpose | Legal basis |
|---|---|
| Deliver and operate the Service | Contract with you |
| Process payments and issue invoices | Contract + legal obligation |
| Respond to support requests | Contract + legitimate interest |
| Send transactional emails, alerts, browser push | Contract + your consent (where required) |
| Prevent fraud and abuse; maintain audit trails | Legitimate interest + legal obligation |
| Improve the Service (aggregate, de-identified usage) | Legitimate interest |
3. How we use it
We use the information above solely to:
- Provide, maintain and secure the Service you registered for;
- Process payments, generate invoices, and comply with tax law;
- Send you service-related notifications (billing, security, product changes);
- Diagnose and fix bugs, monitor system health, prevent abuse;
- Answer support requests and provide onboarding help;
- Improve the Service through aggregate, de-identified analytics.
We do not sell your data. We do not use your Customer Data to train third-party AI models. If you opt to use the AI Assistant with your own Anthropic or OpenAI API key, prompts are sent to that provider on your behalf and subject to their privacy policy — you are always in control of whether this is enabled.
4. Who we share it with
We share limited data only with the following categories of processors, under written contracts requiring confidentiality and equivalent protections:
- Cloud infrastructure providers that host the Service;
- Payment gateway providers that process card and bank payments;
- Email delivery providers for transactional notifications;
- Browser push vendors (Google, Mozilla, Apple, Microsoft) for delivering Web Push;
- Support desk / CRM tools used by our own team;
- Law enforcement or courts, where required by a lawful order.
We do not share Customer Data across tenants. Every tenant's data is logically isolated.
5. Where data is stored
Data is stored in secure data centres located in India and, where necessary for redundancy, in other jurisdictions with equivalent data-protection standards. All data in transit is encrypted using TLS 1.2 or higher; data at rest is encrypted using industry-standard algorithms.
6. How long we keep it
- Live Customer Data — retained for the life of your subscription plus thirty (30) days for export.
- Encrypted backups — retained for up to ninety (90) days for disaster recovery, then purged.
- Invoices, tax records — retained for a minimum of eight (8) years as required by Indian tax law.
- Audit logs — retained for a minimum of one (1) year for security investigation.
- Marketing website analytics — retained for up to twenty-six (26) months in aggregate form.
7. Your rights
Subject to applicable law, you may:
- Access, correct, or export the personal data we hold about you;
- Request deletion (subject to legal retention obligations for invoices and audit logs);
- Object to certain processing based on legitimate interest;
- Withdraw consent for browser push at any time from your browser settings;
- Lodge a complaint with the relevant data-protection authority.
To exercise any of these rights, email us at support@technoinfonet.com. We respond within thirty (30) days.
8. Security
We take security seriously. Measures we apply include:
- Encrypted transport (TLS) on every request; encrypted storage at rest;
- Role-based access control, permission grading, and full audit logging for every mutation;
- Password hashing using industry-standard algorithms; optional 2-factor authentication;
- Isolated tenant workspaces at the application and database level;
- Regular vulnerability scans and dependency updates.
No system is 100% secure. If we become aware of a personal-data breach affecting you, we will notify affected customers without undue delay and within seventy-two (72) hours where required by law.
9. Cookies
We use only strictly necessary first-party cookies — for authentication, CSRF protection, and remembering your preferences. No third-party advertising or cross-site tracking cookies are set. Because these cookies are essential to the operation of the Service, disabling them will break login.
10. Children's data
DevNexa is a business tool. It is not intended for individuals under the age of 18, and we do not knowingly collect data from minors. If you believe we have collected data from a minor, contact us immediately and we will delete it.
11. Changes to this Policy
We may update this Policy from time to time. Material changes will be announced by email to workspace admins and posted on this page at least fourteen (14) days before they take effect.
12. Contact
For any privacy-related question, or to exercise your rights:
Techno Infonet Gujarat Pvt. Ltd.
A-402, Signature 2, SG Highway, Sarkhej, Ahmedabad, Gujarat 382210, India
Email: support@technoinfonet.com