Privacy Policy

This Privacy Policy explains how NxTechWorks Consulting (OPC) Private Limited ("NxTechWorks", "we", "us") collects, uses and protects personal data through the Premise360 platform. That covers the Premise360 web and mobile app at app.premise360.com, the user guide at docs.premise360.com and this website, premise360.com (together, the "Service"). NxTechWorks owns and operates the Service.

1. Our role and your organisation's role

Premise360 is a business platform. Organisations (our "Customers") subscribe to it and give their employees, contractors and other people access. Customers decide what information is recorded in their Premise360 account and why. For that information, the Customer is responsible for it as the data fiduciary (or data controller), and NxTechWorks processes it on the Customer's behalf and on their instructions.

If you use Premise360 through your employer or another organisation, contact that organisation's Premise360 administrator first about your data. We will help them answer your request.

For data we collect for our own purposes, such as enquiries sent to us, billing contacts and the security of the Service, NxTechWorks is responsible as the data fiduciary.

2. Information we collect

Account information

Name, email address, phone number, role, the sites and teams you belong to, and your password. Passwords are stored only in hashed form; we cannot read them.

Content you and your organisation add

Records created in the Service. These include incidents and alerts, observations, inspections and audits, permits to work, risk and compliance registers, training records, attendance and shift records, contractor and vendor details, documents, meeting minutes, comments, photos and videos. Depending on the modules your organisation uses, this can include health information, such as injury cases, medical fitness checks and return-to-work records. Your organisation decides whether to record it.

Camera and video analytics data

If your organisation connects cameras, the Service stores frames, detected objects and the alerts raised from them. People may appear in those images.

Technical and security information

IP address, browser and device details, sign-in attempts and failed logins, push notification registrations, server logs and an audit log of changes made in the Service. The app keeps your sign-in token in your browser's local storage so you stay signed in. It does not use advertising or third-party tracking cookies, and neither does this website.

Information you send us

If you email us or ask for a demo, we receive your name, contact details and message.

3. How we use information

• To provide, operate and maintain the Service for our Customers and their users.
• To send the notifications and reminders the Service is set up to send, by email and push notification. Examples are alerts, assignments, due dates and approvals.
• To run the AI features users choose to use (see section 4).
• To keep the Service secure. This includes preventing unauthorised access, enforcing sign-in limits and investigating misuse.
• To provide support, answer enquiries and manage our Customer relationships.
• To fix problems and improve the Service.
• To meet legal obligations and enforce our agreements.

We do not sell personal data. We do not use Customer content for advertising.

4. AI features

Some features use artificial intelligence. Examples are reading text from documents and photos, detecting hazards in images, pre-filling forms and the AI Assistant. When you use one of these features, the content involved (the image, document or text) is sent to Google's Gemini API to produce the result. It is processed under Google's terms for that service. AI output can be wrong, so please check it before relying on it. Your organisation's administrator controls whether the AI Assistant is available.

5. Who we share information with

We share personal data only as needed to run the Service, with:

• Service providers working for us: DigitalOcean (hosting and file storage), Google (AI processing, see section 4), our email delivery provider and the browser push services that deliver notifications.
• Your organisation: administrators and other authorised users in your organisation can see information according to their role and site access.
• Authorities: where the law requires it, or to protect the rights, safety or property of people or of NxTechWorks.
• A successor business: if NxTechWorks is involved in a merger, acquisition or sale of assets, subject to this Policy.

Our service providers may store or process data outside India. Where they do, we rely on their contractual commitments to protect it.

6. Security

We protect data with encrypted connections (HTTPS) and hashed passwords. Accounts lock after repeated failed sign-ins, and sign-in is protected by a captcha. Access depends on role and site, and each organisation's data is kept separate from other organisations'. No system is completely secure. If a personal data breach affects you, we will notify you and the authorities as the law requires.

7. How long we keep information

We keep Customer data for as long as the Customer's subscription is active. When a subscription ends, we delete or anonymise the Customer's data within a reasonable period, unless the law requires us to keep it longer. Copies in backups are removed as the backups expire. Enquiries are kept only as long as needed to respond and follow up.

8. Your rights

Subject to applicable law, including India's Digital Personal Data Protection Act, 2023, you can ask to access, correct, update or erase your personal data. You can also withdraw consent where processing is based on consent, and raise a grievance. You may nominate another person to exercise these rights for you if you die or become unable to. Where your organisation controls the data, we will pass your request to it and help it respond.

9. Children

The Service is meant for workplaces and is not directed at children under 18. We do not knowingly collect their personal data.

10. Changes to this Policy

We may update this Policy from time to time. We will post the new version here with a new effective date. If the changes are significant, we will also tell Customers by email or in the app.

11. Contact us and grievances