Who we are

This policy explains how Parth Bharatbhai Sarkhelia, sole proprietor, trading as Aditya Nexus (GSTIN 24KDMPS9508A1Z8), of 50, Ashwin Co-op Housing Society-3, First Floor, Khodiyar Nagar Road, Varachha Road, Surat, Gujarat 395010, India (“Aditya Nexus”, “we”, “us”) handles personal data. It covers this website (adityanexus.com), the Ankit web app (ankit.adityanexus.com) and our contract software and IT services.

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) we are the Data Fiduciary for the personal data described here. We also follow the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

What we collect

We collect only what each part of the business needs.

Website: this site sets no cookies and uses no analytics or advertising. Cloudflare, which hosts it, processes IP addresses and request logs to keep it secure.
Enquiries on WhatsApp or email: your name, number or email address, and what you write to us.
Ankit account: your name and the email or phone number given when you were invited, your password (stored only as a hash), and a session cookie that keeps you signed in. The session cookie is essential and is not used for tracking.
Uploads: the garment or artwork photos you upload, and the files Ankit generates from them.
Billing: your credit balance and history, UPI or bank transfer references and amounts. We never see card numbers, UPI PINs or bank login details.
Free previews without an account: your IP address, and a random device identifier kept in a cookie (__Host-ankit_device) that lasts 365 days. We store the identifier only as a hash and use it, with your IP address, solely to enforce the daily free-preview limit.
Admin audit log: a record of admin actions on accounts and credits, such as adding credits.
Contract work: documents, data samples and system access you choose to share for a project, handled as the proposal sets out.

Why we use it, and on what basis

We process personal data with your consent, which you give when you contact us, accept an invite or upload a file, and for the legitimate uses in section 7 of the DPDP Act, such as providing a service you asked for and meeting legal obligations like GST and tax records.

To reply to enquiries and prepare proposals and invoices.
To run Ankit: sign you in, process uploads, deliver files and keep your credit balance.
To keep our services secure and prevent abuse, including limits on free previews.
To keep the accounting and tax records Indian law requires.

We do not sell personal data. We do not use your uploads or files to train any model, or for marketing. Designs you upload remain yours.

How long we keep it

Uploaded photos: deleted 30 days after upload.
Generated files: deleted 180 days after they are made, so download what you need.
Account details: until your account is closed.
Billing records: 8 years, to meet GST record-keeping rules (section 36 of the CGST Act, 2017 and Rule 56 of the CGST Rules, 2017).
Enquiries: as long as needed to reply and to keep a record of any engagement that follows.
Free-preview limit data: daily preview counts are cleared automatically; the device cookie expires after 365 days.
Backups: encrypted off-site backups roll over, so deleted data leaves them as older backups expire.

Where your data is kept, and who processes it

Ankit runs on our own server in Surat, India. These providers help us run the business, and some of them may process data outside India:

Cloudflare: secure tunnel, DNS and website hosting.
Our encrypted off-site backup storage provider.
Google Workspace: our email.
WhatsApp (Meta): only when you choose to message us there.
Your UPI app and bank: to move payments you make.

We share personal data with authorities only when Indian law requires it. Any transfer outside India follows the restrictions the Government of India notifies under section 16 of the DPDP Act.

Security

Traffic to our sites is encrypted in transit (HTTPS). Passwords are stored only as hashes. Backups are encrypted. Access to personal data is limited to the proprietor.

No system is perfectly secure. If a personal data breach affects you, we will tell you by email or WhatsApp, and tell the Data Protection Board of India, as the law requires.

Your rights

Under the DPDP Act you can:

ask for a summary of the personal data we hold about you and how we use it;
ask us to correct, complete or update it;
ask us to erase it, unless the law requires us to keep it (for example billing records);
withdraw your consent at any time;
nominate someone to use these rights for you if you die or become unable to;
raise a grievance with us, and then with the Data Protection Board of India.

Withdrawing consent does not affect processing already done. Ankit cannot run without the account data above, so withdrawing consent for it means we close your account.

To use a right, email parth@adityanexus.com from the address linked to your account, or message us on WhatsApp. We may ask you to confirm who you are.

Children

Our services are for people aged 18 and over. We do not knowingly process children’s personal data. If you think a child has given us data, tell us and we will delete it.

Grievance Officer

Parth Bharatbhai Sarkhelia, Aditya Nexus, 50, Ashwin Co-op Housing Society-3, First Floor, Khodiyar Nagar Road, Varachha Road, Surat, Gujarat 395010, India. Email: parth@adityanexus.com.

We acknowledge a grievance within 48 hours and resolve it within 30 days. If you are not satisfied, you can complain to the Data Protection Board of India.

Changes to this policy

We may update this policy when our services or the law change. The date at the top shows the current version. If a change materially affects how we use your data, we will tell account holders by email or WhatsApp before it applies.

Contact

Questions about this policy: parth@adityanexus.com, or WhatsApp us from the contact page.

Privacy policy