Privacy Policy

Nanostuffs Technologies Private Limited is registered in India, with its registered office at Office No. 1201 to 1208, 12th Floor, Apex Business Court Phase 2 (Raviraj Cru Mall), near Gangadham Chowk, Bibvewadi, Pune, Maharashtra 411037. We also operate from offices in Dubai, New York, and Sydney. For the purposes of applicable data protection laws, Nanostuffs is the "data fiduciary" (under India's DPDP Act, 2023) and "data controller" (under the GDPR) for personal information collected through this Website.

Contact: info@nanostuffs.com

2.1 Information You Provide Directly

When you fill out a contact, demo-request, or lead-generation form on our Website, we collect:

• Full name
• Email address
• Phone number
• Any additional details you choose to include (e.g., company name, message content)

We only collect what you voluntarily submit — we do not require account creation to browse the Website.

2.2 Information Collected Automatically

Like most websites, our hosting and infrastructure providers automatically log limited technical data when you visit — such as IP address, browser type, device type, pages visited, and timestamps. This is standard server/CDN logging (e.g., via our hosting provider) used for security, performance monitoring, and troubleshooting, not for profiling individual visitors. If we later add analytics tools (e.g., Google Analytics) or marketing cookies, this Policy and our cookie banner will be updated accordingly, and consent will be requested where legally required.

2.3 Information We Do Not Collect Via the Website

We do not knowingly collect sensitive personal data (health data, financial account details, government ID numbers, etc.) through the public Website's contact/lead forms.

We use the information collected to:

• Respond to inquiries and demo/consultation requests
• Provide information about our services
• Communicate updates, proposals, or follow-ups related to your inquiry
• Improve and maintain the security and functionality of the Website
• Comply with legal obligations

We do not sell your personal information to third parties.

Where the GDPR applies (e.g., visitors in the EU/EEA), we process personal data on the following bases:

• Consent — when you voluntarily submit a form
• Legitimate interests — responding to business inquiries, securing our Website
• Legal obligation — where required by law

You may withdraw consent at any time by contacting us at the details in Section 10.

The Website may use strictly necessary cookies required for basic functionality and security. We do not currently use advertising or cross-site tracking cookies. If this changes, we will provide a cookie consent banner allowing you to accept or decline non-essential cookies before they are set.

We do not sell or rent personal information. We may share information with:

• Service providers who support our operations (e.g., hosting/infrastructure, email delivery), bound by confidentiality and data protection obligations.
• Legal and regulatory authorities, where required by law, court order, or to protect our legal rights.
• Business transfers, in the event of a merger, acquisition, or asset sale, subject to standard confidentiality protections.

6.1 Client Engagements and WhatsApp Business Solution Provider (BSP) Activities

Separately from this Website, Nanostuffs acts as a data processor on behalf of its clients when delivering software services, including as a WhatsApp Business Solution Provider (BSP). In that capacity:

• We process personal data (e.g., end-customer names, phone numbers, message content) strictly on the client's documented instructions, under a separate Data Processing Agreement (DPA) or Master Services Agreement executed with each client.
• We do not use client end-customer data for our own marketing or product-development purposes without explicit authorization.
• Sub-processors (e.g., cloud hosting, Meta/WhatsApp infrastructure) are engaged under confidentiality and data protection obligations consistent with the client agreement.
• Any such processing is governed by the terms of the relevant client contract, which takes precedence over this public Website policy for that data.

As Nanostuffs operates across India, the UAE, the US, and Australia, personal information may be transferred to and processed in countries other than your own. Where required (e.g., under GDPR), we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms for such transfers.

We retain personal information collected via forms only as long as necessary to respond to your inquiry and for a reasonable period thereafter for record-keeping and legal compliance purposes, after which it is securely deleted or anonymized.

9.1 Under India's Digital Personal Data Protection Act, 2023 (DPDP Act)

You have the right to:

• Obtain a summary of personal data we hold about you and its processing
• Request correction, completion, or updating of your personal data
• Request erasure of your personal data (subject to legal retention requirements)
• Nominate another individual to exercise these rights on your behalf in case of death or incapacity
• Withdraw consent at any time
• Lodge a grievance with our Grievance Officer: Mitesh Chordia, Admin Head (mitesh.chordia@nanostuffs.com), and if unresolved, with the Data Protection Board of India

9.2 Under the GDPR (EU/EEA visitors)

You additionally have the right to: access, rectify, erase, restrict processing, object to processing, and data portability. You may also lodge a complaint with your local supervisory authority.

9.3 Under the CCPA/CPRA (California residents)

You have the right to: know what personal information is collected, request deletion, correct inaccurate information, and opt out of the sale or sharing of personal information (Nanostuffs does not sell personal information). We will not discriminate against you for exercising these rights.

To exercise any of the above rights, contact us using the details in Section 10.

For privacy-related questions, requests, or grievances:

The Website is not directed to individuals under 18, and we do not knowingly collect personal information from children.

The Website may contain links to third-party sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately.

We may update this Privacy Policy periodically. Material changes will be reflected by updating the "Last Updated" date above. Continued use of the Website after changes constitutes acceptance.