Privacy Policy

Last updated on: August 1, 2025

We, Grexa AI Private Limited, a company incorporated under the Companies Act, 2013, having its registered office at  Office No. B-906, BSEL Tech Park, Plot no. 39/5, 39/5A, Sector 30A, Vashi, Sanpada, Thane 400703, Maharashtra, India (“Company”, “we”, “us”, or “our”) are the proprietors of the domain names Grexa.ai, grexa.site, its related domains including the SaaS platform (“Website”) and the mobile application (“Application”) (collectively referred as the “Platform”), including but not limited to the content, information and services offered therein (“Services”). 

We are committed to taking reasonable measures to protect the users' ("You"/"Your"/"User") right to privacy and handling the personal information that you provide to us by accessing the Platform and/or availing our Services. This Privacy Policy provides an overview of how we collect, use, share, and reasonably secure your information when you access the Platform. This Privacy Policy shall be applicable to Users who access, install, browse and/or use the Platform, including availing the Services. 

When you access, interact with, and/or use the Platform and Services, you agree to provide express and voluntary consent to the collection, use, retention, disclosure, and storage of certain sensitive and non-sensitive personal data and information ("Information") as per the terms of this Privacy Policy mentioned herein.

1. Definitions

For the purpose of this Privacy Policy, wherever the context requires: 

• "Account" refers to the User's account, which provides access to certain Services. 
• "Applicable Laws" shall mean any statute, law, regulation, ordinance, rule, judgment, order, decree, by-law, approval from the concerned authority, government resolution, order, directive, guideline, policy, requirement, or other governmental restriction or any other similar form of decision thereof, or determination by, or any interpretation or adjudication having the force of law of any of the foregoing, by any concerned authority having jurisdiction over the matter. 
• "Device" means any device that can access the Platform, such as a computer, a cellphone or a digital tablet;
• "Party", "Parties" shall be used to refer to the Company or the User, individually or collectively;

2. Information We Collect

When you visit our Platform or avail of our Services, we collect certain information about you. The categories of information we collect from Users of and visitors to our Platform are:     

• Personal Information: This includes any information that relates to an identified or identifiable individual, such as full name, contact number, email ID, country, nationality, organization, and designation.
• Demographic Information: This includes information such as age (including date of birth), sex, income level, race, employment, location, and so on. We do not intend to collect this and other sensitive personal information, such as genetic, biometric, and health data, as well as personal data revealing racial and ethnic origin, political opinions, religious or ideological convictions, or trade union membership.
• Business Information: This includes your business operations and activities while using the Platform, as well as third-party details entered or shared, such as customer details, and other operational information and documents. 
• Commercial Information: This includes payment information (including bank account details to enable payments to and from you when you register/sign in to the Platform). 
• Internet or other electronic network activity information: This includes, for example, device screen size, device type (unique device identifiers), browser information, your interactions with our Platform, and the preferred language used to display our Platform. 
• Geo-location data: This includes your location (based on your IP address). 
• Audio, video, and other electronic data: This includes audio, electronic, visual, or similar information, such as chat and any interaction you may have with us (such as for customer service purposes), as well as your profile photo. It also includes any information you submit in forums, chat, or message boards, as well as feedback or testimonials you provide about our Services. 
• Profiles and Inferences: This includes inferences drawn from any of the information identified above to create a profile reflecting preferences, characteristics, predispositions, behaviour, and attitudes. 
• Any other information, details, documents, or records that are easily and freely available and accessible in the public domain.

We obtain this information directly from you or otherwise automatically during your interactions with our Services, with your consent. The sources from which we collect personal information are:     

• Directly from you: For example, when you create an account.     
• Directly and indirectly from activity on our Platform and other services. 
• Service providers who perform services on our behalf, such as processing payments and requests, verifying information, monitoring activity on our Services, providing analysis and analytics, maintaining databases, administering and monitoring emails and marketing, administering and sending mobile messages, serving ads on this and other services, and providing consulting services. 
• Third-party data providers. 

3. How We Use Your Information

• When you visit the Platform, you are not required to actively provide any information, but we may collect some of your Personal Information.
• When you sign into the Platform, we use your Information to create and manage your user account, including verifying or authenticating your identity.
• We collect and use your information to provide relevant updates and statistical data, improve our services, and tailor them to your browsing history on our Platform. 
• We may use your phone number and e-mail address for communication purposes, to obtain feedback regarding the Services, or to inform you about any new services being offered. 
• We may use and share your phone number and email address with our partners, associates, affiliates, or any entities listed on our platform to contact you for the Services.
• We may use your contact information to send you marketing or promotional materials, special offers or promotions. 
• We may use your Information, such as reviews, to publish it on the Platform or other social media pages, promote the Services, and serve as a reference for existing or potential clients. 
• We collect and use your Information to understand your use of the Platform and analyze, evaluate, enhance, modify, customize, and review the same to provide and improve Services. 
• We may use your Information to provide you with information in relation to business updates, invoices, technical notices, security alerts, etc. 
• We may use your phone number or email address to send you text messages or emails to verify your identity and provide notifications about our Services. If you choose to unsubscribe from such notifications, you may write to us or change the settings available on the Platform. 
• We may use the relevant information to process payment transactions through third-party providers, such as banking institutions, payment gateways, financial institutions, payment wallets or other related service providers.
• We may conduct user surveys to understand your preferences or choices, and your responses will be kept anonymous. Such surveys may require you to share Your Personal Information to register or participate in them. The response and the information shared will be used to understand the User preferences and to provide, maintain and improve the Services.
• We may maintain records of any electronic communications or calls that have been made with you while offering the Services for research and evaluation purposes and to improve the Services. 
• We may keep your Information stored on our servers or systems for archival purposes. 
• If we become aware that you have provided false or inaccurate information or are violating any third person's or entity's Intellectual Property Rights or privacy rights, we reserve the right to immediately suspend, delete, or terminate your account or undertake such actions or suitable remedies under the applicable laws to protect our and our other Users’ interests. 

4. Disclosure of Personal Information 

To provide effective Services to you and to further our legitimate interests, we may, from time to time, be required to disclose the information collected from you to trusted third parties as follows: 

• We may disclose your Information to any member of a group of companies, affiliates, subsidiaries, or business partners to the extent that may be reasonably necessary to offer the Services, for the purposes set out in this Privacy Policy. These entities may also use Your Personal Information for any reasonable purposes consistent with this Privacy Policy, including for marketing purposes.
• Third-party service providers that we may engage may have access to your Personal Information to provide the Services contractually on our behalf. 
• Your personal information may be disclosed during integration with third party tools such as Google Ads, and with other business partners.
• If we are involved in a merger, acquisition, or asset sale, your data may be transferred as part of the business transaction. Any such transfer will be subject to a similar standard of data protection. 
• We may share analytical and statistical data and reports with the government authorities, upon request. 
• We would share the information necessary for processing your payments in relation to any financial transactions that may arise, handled by third-party payment service providers.
• We may also disclose Your Personal Information, without notice, if necessary and required to do so by the Applicable Laws, regulations, rules, law enforcement agency, legal authority, governmental official, legal processes or at the governmental request or as may be required in the court of law or other statutory bodies and to protect our rights or those of others to prevent any harm to person or property. 
• We may maintain records of any electronic communications or calls that have been made to you in relation to the Services for research and evaluation purposes and better administration. 
• Our platform contains third-party links. If you directly disclose any personally identifiable information or sensitive data through third-party links or public forums, your information may be collected and used by third-party websites or platforms. We recommend that you read their privacy policies before sharing or disclosing your personal information therein. 

5. Data retention

We will retain your Personal Information with us, only for as long as permitted under law, to satisfy any legal, accounting or reporting obligations.

We retain your Personal Information for the following purposes: 

• To the extent that it is necessary to do so under the law; 
• If it appears that the information is relevant for any ongoing or prospective legal proceedings;
• In order to establish and defend our legal rights; 
• In order to send marketing and promotional materials, offers, and updates regarding our Services or newsletters, only until the consent is withdrawn;
• For archival, research, evaluation and administrative purposes. 

6. Your Rights

• You have the right to request access to the personal information we hold about you, to request correction or deletion of such information, to withdraw consent to our processing and to request restriction or portability of your personal data, subject to applicable laws. You may contact us at [email protected] to exercise these rights.

7. Information Security and Data Protection: 

• All information that you share with us will be centrally stored on our servers/ systems, which are password and firewall protected. 
• We take all reasonable measures, including appropriate encryption and physical, operational, and technical security measures, access controls and authentication mechanisms and regular security audits to safeguard and protect the information you have shared with us against any improper use, unauthorised access, and disclosure on the Platform and other systems on which we store it. However, we do not take any responsibility or liability for data loss or theft caused by unauthorised access to the devices through which you avail the Services.
• You agree to keep your password and other log-in details confidential and against unauthorised access. If you suspect any unauthorised use of your Account, you must immediately notify us by sending us an email at [email protected]. We undertake no liability for any unauthorised use of your account and password. 
• We do our best to secure your information in places that are not easily accessible to the public; however, you understand that no security systems are impenetrable. Hence, we cannot provide any assurance or guarantee regarding the security of our databases or the information you share with us on the Platform. You acknowledge that any transmission is at your own risk. If you do not wish to take such risks, we recommend that you not use the Services.  
• We may disclose and share your Information with our employees, data processors, representatives, agents, partners, and third parties only on a need-to-know basis. We take all reasonable security measures and place procedures and technologies as per industry practice to protect and secure the Information you provided to us, preserved both in electronic form and offline and ensure that all Information shared with our employees, data processors, representatives, agents, partners, etc., shall be maintained in confidentiality. Any third-party data processors shall also be required to comply with the requisite reasonable security measures or policies, or take such adequate measures to protect your Information.  
• We disclaim all responsibilities pertaining to security breaches that are beyond our reasonable control, such as computer hacking, computer crashes, unauthorised access to our Services, government acts, and breaches of encryption.
• In the event of a personal data breach, we will notify you via your registered email address or contact number, and the relevant supervisory data protection authority as required, within 72 hours of becoming aware of the breach. Such notification of a personal data breach will include the nature of the breach, its potential consequences, the measures taken or proposed to address it, and the contact details of the Grievance Officer.

8. International Data Transfers

Your Personal Information may be transferred to and processed in countries other than the country where you reside. Specifically, our site servers are located in India, and our third-party service providers, and partners operate worldwide. This means that when we collect your Personal Information, we may process it in any of these countries.

Although legal requirements may vary from country to country, we have adopted appropriate safeguards to ensure that your Personal Information will remain protected in accordance with this Privacy Policy. 

When we transfer your Personal Information to other territories, we will take appropriate measures to safeguard it in accordance with applicable law. 

9. Cookies and other tracking technologies

We may collect certain information about our users through cookies and similar technologies to provide a customised page based on their browsing preferences on the website. To provide a better user administration and browsing experience, we understand the pattern of our users' interactions with us through web traffic routing. We also use these cookies for research and development and technical administration of the website. While optimising services for you, we may allow authorised third parties to provide a unique cookie on your browser. 

The technologies we use may include:

• Cookies or Browser Cookies: You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if You do not accept Cookies, You may not be able to use or access some parts of our Services. Unless you have adjusted Your browser setting so that it will refuse Cookies, Our Platform may use Cookies.
• Flash Cookies: Certain features of Our Platform may use locally stored objects (or Flash Cookies) to collect and store information about your preferences or Your activity on our Services, fraud prevention, and other site operations.
• Analytics and customization cookies: These cookies collect information that is used either in aggregate form to help us understand how our Platform is being used, how effective our marketing campaigns are, or to customize our Platform for you.
• Performance or functionality cookies: These cookies are used to enhance the performance and functionality of our Platform but are non-essential to its use. However, without these cookies, certain functionality (like videos) may become unavailable. They also help us remember choices you make when you use the Platform, such as remembering your login details or language preferences. Their primary purpose is to provide You with a more personal experience and to avoid You having to re-enter Your preferences every time You use the Platform. 
• Web beacons: Web beacons (sometimes called "tracking pixels" or "clear gifs") that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of a certain section and verifying system and server integrity).

How can You control cookies?

You have the right to decide whether to accept or reject cookies. You can exercise Your cookie rights by setting Your preferences in the Cookie Consent Manager. The Cookie Consent Manager allows You to select which categories of cookies You accept or reject. Essential cookies cannot be rejected as they are strictly necessary to provide You with the Services. 

The means by which you can refuse cookies through your web browser controls vary from browser to browser. You should visit your browser's help menu for more information. The following is information about how to manage cookies on some of the most popular browsers:

• Chrome
• Firefox
• Safari

Usually, web browsers automatically accept Cookies. However, browser settings may be modified to turn off such cookies. You may still use the Platform, but it may restrict a user's access to some features and services.   

Any third-party sites or links placed or displayed within the Services, or the Platform are not controlled or owned by us. These third-party sites or links may place their cookies and collect data or personal information from their users. We are not responsible for any such collection of data by these third parties and make no representations concerning their privacy policies or terms of use. If you decide to visit a third-party website linked to the website, you do this entirely at your own risk, and we highly recommend that you read the privacy policies of that website.

10. Children's Privacy

The Platform is not directed towards minors. We do not knowingly collect personal information from any User who is under 18 (eighteen) years of age. If we are made aware that we have collected the personal information of a person below the age of 18 (eighteen) years, we will take steps to delete the information within a reasonable time frame. If a parent or guardian becomes aware that their child has provided their information on the Platform without their consent, they shall contact us to delete such information. In the event that a person below the age of 18 (eighteen) uses the Platform in contravention of the Privacy Policy, we shall not be held liable or responsible for any damage or injury suffered by such a person.

By using the platform, you represent that you are at least 18 or, in the case of users below the age of 18, that your parent or guardian consents to your use of the Platform. If we learn that personal information from users less than 18 years of age has been collected without parental consent, we will deactivate the account and take reasonable measures to delete such data from our records promptly. If you believe your child has provided this kind of information on our Platform, we strongly encourage you to contact us immediately. We will do our best to remove such information from our records promptly.        

11. Updates to this Privacy Policy

We may update this Privacy Policy from time to time in response to changing legal, technical, or business developments. When we do, we will take appropriate measures to inform you, consistent with the significance of the changes we make.  

You can see when this Privacy Policy was last updated by checking the "Last updated" date displayed at the top of this Privacy Policy.  

12. How to contact us

In the event of any grievances with respect to this Privacy Policy, or if You want to file a request to amend the Information we have on you, you may connect with the Grievance Officer at: 

Grievance Officer: Shraddha Palekar

Address: BSEL Tech Park, B 906, Sector 30A, Vashi, Navi Mumbai, Maharashtra 400703

Ph. No.:  +91 89760 41042

Email ID: [email protected]

The Grievance Officer will acknowledge your request/grievance within seven (7) working days of receipt and shall provide the necessary information within a month from the date of its receipt.