Who we are
The services are operated by Nexa Health Tech (“we”, “us”). For privacy-related requests, use the contact options listed in the Contact section of this policy.
What this policy covers
This policy applies to information processed through our marketing site, documentation, contact and lead forms, and any cloud-hosted adapter or gateway products we provide to customers under subscription or trial (“Services”), including workflows related to India’s Health Claims Exchange (NHCX) and FHIR-based interoperability.
Information we collect
We may collect:
- Account and contact data — name, work email, phone, company, role, and similar details you submit (for example via our contact form).
- Usage and technical data — IP address, device/browser type, approximate location, pages viewed, and diagnostic logs needed to operate and secure the Services.
- Customer content — payload or configuration data you send through the Services in connection with your subscription. Handling of health or sensitive categories is governed by your contract and applicable law, including India’s Digital Personal Data Protection Act (DPDP) where applicable.
How we use information
We use information to:
- Provide, maintain, and improve the Services;
- Authenticate users, prevent abuse, and enforce security controls;
- Respond to inquiries and manage the customer relationship;
- Meet legal obligations and defend our legitimate interests where permitted.
Legal bases (where applicable)
Depending on jurisdiction, we rely on consent (e.g. marketing cookies where required), performance of a contract, legitimate interests (e.g. security and product improvement), or legal obligation.
Retention
We retain information only as long as needed for the purposes above, including legal, accounting, and dispute resolution. Retention periods may be specified in your order form or DPA.
Security
We implement appropriate technical and organizational measures—including encryption in transit, access controls, OAuth 2.0 and Keycloak-based authentication where applicable, and audit logging designed for enterprise operations. No method of transmission or storage is completely secure.
Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, or portability of your personal data, or object to certain processing. To exercise these rights, contact us using the details below. You may also lodge a complaint with a supervisory authority where you reside.
International transfers
If we transfer personal data across borders, we use appropriate safeguards such as standard contractual clauses or other mechanisms required by law.
Children
The Services are not directed at children. We do not knowingly collect personal information from children without parental consent.
Changes to this policy
We may update this policy from time to time. We will post the revised version with an updated effective date. Material changes may be communicated by email or in-product notice where appropriate.
Contact
For privacy questions or requests, contact us through our contact page, email contact@nexahealthtech.com, or write to us at Ghaziabad, UP, India. Service usage is also governed by our Terms of Service.