🔒 Legal

Privacy Policy

We're transparent about how we handle your data. This policy explains what we collect, why we collect it, how we protect it, and the rights you have over it.

Effective: April 1, 2026 Last updated: April 28, 2026 Applies to: zetamicron.com · NexureAI · Dexara

Zetamicron Technologies ("Zetamicron," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, share, retain, and protect personal information when you visit www.zetamicron.com, use our products NexureAI or Dexara, or communicate with us.

🛡️

Our core commitment: We do not sell your personal data. We do not use your data or content you enter into our products to train shared or third-party AI models without your explicit consent. Your business data stays yours.

1Information We Collect

Information you provide directly

  • Contact & account data: Name, email, company name, phone number, and job title when you request a demo, register, or contact us.
  • Billing information: Payment details processed by our payment provider. We do not store raw card numbers.
  • Communications: Messages you send via email, our contact form, or support channels.
  • Product data: Content you upload or create within NexureAI (insurance documents, test requirements) or Dexara (business metrics, financial records, operational data).

Information collected automatically

  • Usage & log data: IP address, browser type, device type, pages visited, time on page, and referring URLs.
  • Cookies & similar technologies: Session identifiers, authentication tokens, and analytics data (see Section 6).
  • Product usage signals: Feature engagement, error logs, and performance metrics — used to improve product quality.
⚠️

Sensitive data: Please do not submit special categories of personal data (health, biometric, financial account numbers) unless directly required by the product feature and covered by a separate data processing agreement.

2How We Use Your Information

Purpose Data Used
Providing and operating our products & services Account info, product data, usage signals
Responding to enquiries and providing support Contact info, communication history
Processing payments and managing subscriptions Billing info, account info
Sending product updates and marketing (opt-out available) Email address
Improving and developing our products Anonymised usage signals, error logs
Legal compliance As required by applicable law
Fraud detection and platform security Log data, usage patterns

AI inference & training: Content entered into NexureAI and Dexara is processed solely to provide you the service. We do not use this content to train shared AI models. AI features use Anthropic's Claude API under an enterprise agreement that guarantees zero data retention by Anthropic.

3Legal Basis for Processing (GDPR)

For individuals in the EEA and UK, we rely on the following legal bases:

  • Contract performance: Processing necessary to deliver the services you've signed up for.
  • Legitimate interests: Analytics, fraud prevention, product improvement — balanced against your privacy rights.
  • Legal obligation: Where processing is required by law.
  • Consent: For optional marketing communications and non-essential cookies — withdrawable at any time.

For users in India, we comply with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDPA).

4Sharing & Disclosure

We do not sell, rent, or trade personal data. We may share information with:

  • Service providers: Cloud infrastructure (AWS), payment processors, analytics tools — all under strict Data Processing Agreements.
  • AI providers: Anthropic (Claude API) for AI inference only — with contractual zero-retention guarantees on your data.
  • Legal authorities: Where required by law, court order, or to protect rights and safety.
  • Business transfers: In a merger or acquisition — with prior notice to affected users.
  • With your consent: Any other sharing requires your explicit prior agreement.
🔒

Sub-processor list: A current list of our data sub-processors is available on request. Email contact@zetamicron.com.

5Data Retention

Data Category Retention Period
Account & contact data Duration of account + 90 days post-closure, then deleted
Product data (NexureAI, Dexara) Duration of subscription + 30 days, then permanently deleted
Payment & billing records 7 years (statutory tax obligation)
Support communication logs 2 years
Anonymised usage analytics Up to 3 years (aggregated, non-identifiable)

You may request early deletion of your data at any time. Requests are processed within 30 days subject to legal retention obligations.

6Cookies & Tracking Technologies

  • Strictly necessary: Authentication tokens, session management, and security. Cannot be disabled without breaking core functionality.
  • Functional: User preferences and UI state. Activated on first use.
  • Analytics: Aggregate page views and feature usage for product improvement. Consent-based only.
  • Marketing: We do not use third-party advertising or retargeting cookies.

Manage cookie preferences via the banner on your first visit or through your browser settings. Disabling analytics cookies does not affect your access to our products.

7Security

We implement comprehensive security measures to protect your data:

🔐

Encryption

AES-256 at rest, TLS 1.2+ in transit. All API communications encrypted end-to-end.

👤

Access Control

Role-based access (RBAC), least-privilege principle, and MFA enforced for all internal systems.

🏢

Data Residency

Dexara: AWS Mumbai (ap-south-1). NexureAI: AWS US-East. No cross-region transfer without consent.

📋

Audit Trails

Comprehensive logs for all data access and modifications within product environments.

🧪

Security Testing

Regular penetration testing, vulnerability assessments, and dependency scanning across production.

🚨

Breach Response

Documented response plan. Affected users and regulators notified within 72 hours of a confirmed breach.

To responsibly disclose a security vulnerability, contact contact@zetamicron.com.

8Your Rights

Depending on your location, you have the following rights over your personal data. Contact us at contact@zetamicron.com to exercise any right — we respond within 30 days.

👁️

Access

Request a copy of the personal data we hold about you.

✏️

Rectification

Correct inaccurate or incomplete personal data we hold.

🗑️

Erasure

Request deletion of your data ("right to be forgotten"), subject to legal retention obligations.

⏸️

Restriction

Request we restrict processing of your data in certain circumstances.

📦

Portability

Receive your data in a structured, machine-readable format for transfer to another provider.

🚫

Objection

Object to processing based on legitimate interests or for direct marketing.

🇮🇳

India (DPDPA 2023): Indian residents have the right to nominate a representative for data rights, and the right to grievance redressal. All requests are handled within 30 days as required by the Act.

9International Data Transfers

If you are in the EEA, UK, or other jurisdictions with data transfer restrictions, your data may be processed in India (Dexara) or the United States (NexureAI infrastructure). Transfers are protected by:

  • Standard Contractual Clauses (SCCs) approved by the European Commission where applicable.
  • Data Processing Agreements with all sub-processors imposing equivalent data protection standards.
  • Adequacy decisions or other approved transfer mechanisms as available.

10Children's Privacy

Our products and website are not directed at children under 16. We do not knowingly collect personal data from minors. If you believe we have inadvertently done so, contact us at contact@zetamicron.com and we will delete it promptly.

11Changes to This Policy

We may update this Privacy Policy periodically. For material changes, we will:

  • Update the "Last updated" date at the top of this page.
  • Send an email notification to registered users for significant changes.
  • Display a prominent notice on our website for at least 30 days following material updates.

Continued use of our products after the effective date of a revised policy constitutes acceptance of the updated terms.

12Contact Us

For privacy questions, data subject requests, or to report a security concern, please reach us below. We aim to respond within 5 business days and resolve all requests within 30 days.

Privacy & Data Queries

Zetamicron Technologies — responsible for data processing under this policy

✉️Email: contact@zetamicron.com
📍Hyderabad, Telangana, India