Privacy Policy
We're transparent about how we handle your data. This policy explains what we collect, why we collect it, how we protect it, and the rights you have over it.
Zetamicron Technologies ("Zetamicron," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, share, retain, and protect personal information when you visit www.zetamicron.com, use our products NexureAI or Dexara, or communicate with us.
Our core commitment: We do not sell your personal data. We do not use your data or content you enter into our products to train shared or third-party AI models without your explicit consent. Your business data stays yours.
1Information We Collect
Information you provide directly
- Contact & account data: Name, email, company name, phone number, and job title when you request a demo, register, or contact us.
- Billing information: Payment details processed by our payment provider. We do not store raw card numbers.
- Communications: Messages you send via email, our contact form, or support channels.
- Product data: Content you upload or create within NexureAI (insurance documents, test requirements) or Dexara (business metrics, financial records, operational data).
Information collected automatically
- Usage & log data: IP address, browser type, device type, pages visited, time on page, and referring URLs.
- Cookies & similar technologies: Session identifiers, authentication tokens, and analytics data (see Section 6).
- Product usage signals: Feature engagement, error logs, and performance metrics — used to improve product quality.
Sensitive data: Please do not submit special categories of personal data (health, biometric, financial account numbers) unless directly required by the product feature and covered by a separate data processing agreement.
2How We Use Your Information
| Purpose | Data Used |
|---|---|
| Providing and operating our products & services | Account info, product data, usage signals |
| Responding to enquiries and providing support | Contact info, communication history |
| Processing payments and managing subscriptions | Billing info, account info |
| Sending product updates and marketing (opt-out available) | Email address |
| Improving and developing our products | Anonymised usage signals, error logs |
| Legal compliance | As required by applicable law |
| Fraud detection and platform security | Log data, usage patterns |
AI inference & training: Content entered into NexureAI and Dexara is processed solely to provide you the service. We do not use this content to train shared AI models. AI features use Anthropic's Claude API under an enterprise agreement that guarantees zero data retention by Anthropic.
3Legal Basis for Processing (GDPR)
For individuals in the EEA and UK, we rely on the following legal bases:
- Contract performance: Processing necessary to deliver the services you've signed up for.
- Legitimate interests: Analytics, fraud prevention, product improvement — balanced against your privacy rights.
- Legal obligation: Where processing is required by law.
- Consent: For optional marketing communications and non-essential cookies — withdrawable at any time.
For users in India, we comply with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDPA).
4Sharing & Disclosure
We do not sell, rent, or trade personal data. We may share information with:
- Service providers: Cloud infrastructure (AWS), payment processors, analytics tools — all under strict Data Processing Agreements.
- AI providers: Anthropic (Claude API) for AI inference only — with contractual zero-retention guarantees on your data.
- Legal authorities: Where required by law, court order, or to protect rights and safety.
- Business transfers: In a merger or acquisition — with prior notice to affected users.
- With your consent: Any other sharing requires your explicit prior agreement.
Sub-processor list: A current list of our data sub-processors is available on request. Email contact@zetamicron.com.
5Data Retention
| Data Category | Retention Period |
|---|---|
| Account & contact data | Duration of account + 90 days post-closure, then deleted |
| Product data (NexureAI, Dexara) | Duration of subscription + 30 days, then permanently deleted |
| Payment & billing records | 7 years (statutory tax obligation) |
| Support communication logs | 2 years |
| Anonymised usage analytics | Up to 3 years (aggregated, non-identifiable) |
You may request early deletion of your data at any time. Requests are processed within 30 days subject to legal retention obligations.
6Cookies & Tracking Technologies
- Strictly necessary: Authentication tokens, session management, and security. Cannot be disabled without breaking core functionality.
- Functional: User preferences and UI state. Activated on first use.
- Analytics: Aggregate page views and feature usage for product improvement. Consent-based only.
- Marketing: We do not use third-party advertising or retargeting cookies.
Manage cookie preferences via the banner on your first visit or through your browser settings. Disabling analytics cookies does not affect your access to our products.
7Security
We implement comprehensive security measures to protect your data:
Encryption
AES-256 at rest, TLS 1.2+ in transit. All API communications encrypted end-to-end.
Access Control
Role-based access (RBAC), least-privilege principle, and MFA enforced for all internal systems.
Data Residency
Dexara: AWS Mumbai (ap-south-1). NexureAI: AWS US-East. No cross-region transfer without consent.
Audit Trails
Comprehensive logs for all data access and modifications within product environments.
Security Testing
Regular penetration testing, vulnerability assessments, and dependency scanning across production.
Breach Response
Documented response plan. Affected users and regulators notified within 72 hours of a confirmed breach.
To responsibly disclose a security vulnerability, contact contact@zetamicron.com.
8Your Rights
Depending on your location, you have the following rights over your personal data. Contact us at contact@zetamicron.com to exercise any right — we respond within 30 days.
Access
Request a copy of the personal data we hold about you.
Rectification
Correct inaccurate or incomplete personal data we hold.
Erasure
Request deletion of your data ("right to be forgotten"), subject to legal retention obligations.
Restriction
Request we restrict processing of your data in certain circumstances.
Portability
Receive your data in a structured, machine-readable format for transfer to another provider.
Objection
Object to processing based on legitimate interests or for direct marketing.
India (DPDPA 2023): Indian residents have the right to nominate a representative for data rights, and the right to grievance redressal. All requests are handled within 30 days as required by the Act.
9International Data Transfers
If you are in the EEA, UK, or other jurisdictions with data transfer restrictions, your data may be processed in India (Dexara) or the United States (NexureAI infrastructure). Transfers are protected by:
- Standard Contractual Clauses (SCCs) approved by the European Commission where applicable.
- Data Processing Agreements with all sub-processors imposing equivalent data protection standards.
- Adequacy decisions or other approved transfer mechanisms as available.
10Children's Privacy
Our products and website are not directed at children under 16. We do not knowingly collect personal data from minors. If you believe we have inadvertently done so, contact us at contact@zetamicron.com and we will delete it promptly.
11Changes to This Policy
We may update this Privacy Policy periodically. For material changes, we will:
- Update the "Last updated" date at the top of this page.
- Send an email notification to registered users for significant changes.
- Display a prominent notice on our website for at least 30 days following material updates.
Continued use of our products after the effective date of a revised policy constitutes acceptance of the updated terms.
12Contact Us
For privacy questions, data subject requests, or to report a security concern, please reach us below. We aim to respond within 5 business days and resolve all requests within 30 days.
Privacy & Data Queries
Zetamicron Technologies — responsible for data processing under this policy