1. Who we are
This website, nxt-grid.com, is operated by Nxt Grid Private Limited, a private limited company incorporated in India ("nxtGrid", "we", "us" or "our"). Our principal place of business is at WeWork, Eldeco Centre, Malviya Nagar, New Delhi - 110017, India.
For personal data we collect through this website and in the course of our sales and business relationships, we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), and the body corporate responsible for that data under the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules").
2. What this policy covers
This policy applies to personal data we process when you:
- visit or browse nxt-grid.com;
- request a demo or callback, call us, email us or otherwise contact us;
- attend a meeting, demo or event with us, or receive business communications from us; and
- act as a contact person for a customer, prospective customer, vendor or partner.
It does not cover data that our customers load into the nxtGrid platform. That is explained in section 7.
3. Personal data we collect
Data you give us
- Contact details: your name, company, job title, work email address and phone number (with country code).
- Business information: portfolio capacity and number of sites, the asset types you operate (solar, wind, BESS or hybrid), your existing monitoring system, the configuration you are interested in and anything you write in a message or tell us on a call.
- Correspondence: records of emails, messages and calls with us.
Data collected automatically
- Technical data: IP address, browser type, device type, operating system, pages visited, referring page and the date and time of your visit. This is recorded in standard server and security logs by us and our hosting providers.
The loss calculator on our home page runs entirely in your browser. The figures you enter there are not sent to us or stored by us.
We do not ask for, and you should not send us, sensitive personal data such as passwords, financial account or card details, health information or biometric information through this website.
4. How we use your personal data
| Purpose | Personal data used |
|---|---|
| Responding to your demo, callback or information request | Contact details, business information, correspondence |
| Preparing and sharing proposals, quotes and commercial terms | Contact details, business information |
| Managing our relationship with customers, vendors and partners | Contact details, correspondence |
| Sending product updates or event invitations you have agreed to receive | Name, email address |
| Operating, securing and improving this website | Technical data |
| Complying with law, responding to lawful requests and protecting our legal rights | Any of the above, as needed |
We do not sell your personal data, and we do not use it for automated decisions that produce legal or similarly significant effects for you.
5. Consent and legitimate uses
When you submit a form, call us or write to us, you consent to us processing the personal data you share for the purpose of responding to you. Before we collect it, we tell you what we collect and why through this policy and the notice next to our forms.
We may also process personal data without fresh consent where the DPDP Act allows it as a legitimate use, for example where you have voluntarily provided the data for a specified purpose and have not said you do not consent, or where processing is needed to comply with law or a court order.
You can withdraw consent at any time by contacting us using the details in section 14. Withdrawing consent is as easy as giving it. It does not affect processing that happened before you withdrew, and we will stop processing your data for the withdrawn purpose within a reasonable time unless the law requires or permits us to keep it.
7. Data in the nxtGrid platform
Our customers use the nxtGrid platform to monitor and maintain their energy assets. Plant and equipment data in the platform is generally not personal data. The platform also holds limited personal data about our customers' users, such as names, email addresses, phone numbers, roles and activity records, and photographs or records submitted through the field application.
For that data, our customer is usually the Data Fiduciary and nxtGrid acts as a Data Processor on the customer's behalf. That processing is governed by our agreement with the customer. If you are a user of the platform, please contact your employer or the organisation that gave you access with any questions or requests, and we will help them respond.
8. Where your data is stored
We and our service providers may store and process personal data in India and in other countries. Where personal data is transferred outside India, we do so in line with the DPDP Act, including any restrictions the Government of India notifies on transfers to particular countries, and we require recipients to protect it to the standard described in this policy.
10. How long we keep personal data
We keep personal data only for as long as needed for the purpose it was collected for, and then delete it, unless we must keep it longer to comply with law, resolve disputes or enforce our agreements. As a guide:
- Enquiries that do not lead to a business relationship: up to 24 months after our last contact with you.
- Customer, vendor and partner contact records: for the term of the relationship and as long afterwards as required by tax, company and other applicable laws.
- Server and security logs: for at least one year, or longer where the law requires.
Where the law requires it, we will tell you before we erase personal data that we hold because you have not engaged with us.
11. How we protect personal data
We use reasonable security practices and procedures appropriate to the nature of the data, as required by the Information Technology Act, 2000 and the DPDP Act. These include encryption in transit, access controls based on role and need-to-know, logging and monitoring, and contractual obligations on our service providers.
No method of transmission or storage is completely secure. If a personal data breach occurs, we will notify the Data Protection Board of India and affected individuals as required by law.
12. Your rights
Subject to applicable law, you have the right to:
- Access information about the personal data we process about you, the processing activities, and the identities of others we have shared it with.
- Correct, complete or update personal data that is inaccurate, incomplete or out of date.
- Erase personal data that is no longer needed for the purpose it was collected for, unless the law requires us to keep it.
- Withdraw consent you have given, at any time.
- Nominate another individual to exercise your rights if you die or become incapacitated.
- Have your grievances addressed by us, and, if you are not satisfied, complain to the Data Protection Board of India.
To exercise any of these rights, contact us using the details in section 14. We may need to verify your identity before acting on your request.
Under the DPDP Act you also have duties: you must not impersonate another person, suppress material information or file false or frivolous complaints.
13. Children
This website and our services are intended for businesses and are not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we will delete it.
14. Grievance Officer and contact
If you have a question, request or complaint about how we handle personal data, please contact our Grievance Officer, Dixit Goyal:
Dixit Goyal, Grievance Officer
Nxt Grid Private Limited
WeWork, Eldeco Centre, Malviya Nagar, New Delhi - 110017, India
Phone: +91 99900 62445founders@nxt-grid.com
Email: founders@nxt-grid.com
We will acknowledge your grievance promptly and resolve it within the time required by law, and in any case within one month of receiving it. If you are not satisfied with our response, you may approach the Data Protection Board of India once it is constituted and operational for such complaints.
15. Changes to this policy
We may update this policy from time to time, for example as the rules under the DPDP Act come into force. The "Last updated" date at the top shows when it was last changed. If we make significant changes, we will make that clear on this page and, where appropriate, notify you directly.