Privacy Policy

Nexous Hub Privacy Policy

Nexous Hub — HRMS, Payroll, Meeting, LMS, AI Chatbot & more

Effective Date: 04 August 2026 · Last Updated: 04 August 2026

This Privacy Policy explains how Nexous Hub collects, uses, stores, processes, protects, and discloses personal data when you access or use our SaaS platform, applications, websites, APIs, integrations, and related services (collectively, the "Services").

Nexous Hub is operated by SIXSIGMAONE TECHNOLOGIES, having its registered office at 428/429, Iscon Emporio, Satellite, Ahmedabad, Gujarat-380015.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

1. Scope of This Privacy Policy

This Privacy Policy applies to personal data processed through Nexous Hub, including data provided directly by users, data generated through use of the Services, and data provided by organizations or administrators using Nexous Hub.

Where Nexous Hub is used by an organization, such as an employer, business, educational institution, or other customer, that organization may determine what information is collected and how it is used within its account.

In such circumstances, Nexous Hub may process personal data on behalf of the organization as a service provider or processor. Questions regarding the organization's use of personal data may need to be directed to that organization.

2. Personal Data We Collect

Depending on the Services used and the configuration selected by the customer or administrator, Nexous Hub may collect and process the following categories of personal data.

2.1 Identity and Profile Information

This may include:

  • Full name
  • Employee/customer/user ID
  • Profile photograph
  • Date of birth, where required
  • Gender, where provided
  • Designation and job title
  • Department and team
  • Reporting manager
  • Organization details
  • Professional profile information

2.2 Contact Information

This may include:

  • Email address
  • Mobile or telephone number
  • Business address
  • Residential or correspondence address
  • Emergency contact information
  • Other contact information provided by users or administrators

2.3 Employment and Organization Information

Where Nexous Hub is used as an HRMS or workforce management platform, information may include:

  • Employee code
  • Date of joining
  • Employment status
  • Department and designation
  • Reporting structure
  • Work location
  • Employment history
  • Probation and confirmation information
  • Leave records
  • Attendance records
  • Timesheets
  • Project assignments
  • Performance reviews
  • Goals, KRAs and KPIs
  • Training and learning records
  • Employee documents
  • Onboarding and offboarding information

2.4 Payroll and Financial Information

Where payroll or financial features are enabled, information may include:

  • Salary and compensation details
  • Payroll information
  • Bank account information
  • Tax-related information
  • Statutory information
  • Reimbursements
  • Expense information
  • Payment-related records
  • Other information necessary for payroll or financial administration

2.5 Recruitment Information

Where recruitment features are used, Nexous Hub may process:

  • Resume/CV information
  • Education details
  • Employment history
  • Skills and qualifications
  • Interview information
  • Assessment results
  • Candidate communication
  • References
  • Recruitment status
  • Documents submitted during recruitment

2.6 Business and Customer Information

For CRM, ERP, invoicing and business management functions, information may include:

  • Customer and prospect names
  • Business contact information
  • Company information
  • Leads and opportunities
  • Sales activities
  • Communication records
  • Invoices
  • Transactions
  • Products and services
  • Project information
  • Customer support records

2.7 Usage and Technical Information

When you use Nexous Hub, we may automatically collect:

  • IP address
  • Browser type and version
  • Device type
  • Operating system
  • Login and authentication information
  • Access times
  • Session information
  • Application activity
  • Pages, screens or features accessed
  • Error logs
  • Diagnostic information
  • Security and audit logs
  • Device identifiers, where applicable

2.8 Location Information

Where enabled and necessary for a particular feature, Nexous Hub may process approximate or precise location information, including location information associated with attendance, workforce management, security or other authorized business functions.

Location-based features will be used only where enabled by the relevant organization or user and permitted by applicable law.

2.9 Communications and Support Information

We may collect information contained in:

  • Support requests
  • Emails
  • Chat messages
  • Service tickets
  • Feedback
  • Surveys
  • Product communications
  • Other communications with Nexous Hub

2.10 Cookies and Similar Technologies

Nexous Hub may use cookies, local storage, session technologies, analytics tools and similar technologies to:

  • Maintain user sessions
  • Authenticate users
  • Remember preferences
  • Improve platform performance
  • Understand product usage
  • Detect security threats
  • Troubleshoot technical issues
  • Improve our Services

3. How We Use Personal Data

We may process personal data for the following purposes:

3.1 Providing and Managing the Services

We use personal data to:

  • Create and manage user accounts
  • Authenticate users
  • Provide access to authorized features
  • Process transactions
  • Operate customer accounts
  • Deliver SaaS functionality
  • Maintain user and organization records
  • Provide customer support

3.2 HR and Workforce Management

Where enabled by an organization, personal data may be processed to support:

  • Employee onboarding
  • Attendance management
  • Leave management
  • Timesheets
  • Payroll
  • Reimbursements
  • Performance management
  • Recruitment
  • Training and learning
  • Employee records
  • Workforce analytics
  • Offboarding

3.3 CRM, ERP and Business Operations

Personal data may be processed for:

  • Customer relationship management
  • Lead management
  • Sales management
  • Invoicing
  • Project management
  • Inventory management
  • Expense management
  • Business reporting
  • Workflow automation

3.4 Security and Fraud Prevention

We may process information to:

  • Protect accounts
  • Detect unauthorized access
  • Prevent fraud and abuse
  • Monitor suspicious activity
  • Maintain audit trails
  • Investigate security incidents
  • Protect the Services and our users

3.5 Product Improvement and Analytics

We may use information to:

  • Understand how users interact with our Services
  • Identify technical issues
  • Improve functionality
  • Develop new features
  • Improve user experience
  • Analyze product performance

Where analytics information is used for product improvement, we seek to use appropriate safeguards and, where feasible, aggregated or de-identified information.

3.6 Communications

We may use contact information to send:

  • Service notifications
  • Security alerts
  • Account-related communications
  • Product updates
  • Administrative communications
  • Support communications
  • Other communications necessary to provide the Services

Marketing communications will be handled in accordance with applicable law and available user choices.

3.7 Legal and Regulatory Compliance

We may process personal data where necessary to:

  • Comply with applicable laws
  • Respond to lawful requests
  • Meet statutory obligations
  • Establish or defend legal claims
  • Protect our legal rights
  • Prevent or investigate unlawful activities

6. Data Provided by Organizations

Nexous Hub is often used by organizations to manage their employees, customers, candidates, vendors and other users.

Where an organization provides personal data to Nexous Hub:

  • The organization may determine the purposes for which the data is processed.
  • Nexous Hub processes the information according to the organization's instructions and applicable agreements.
  • The organization is responsible for ensuring that it has the necessary authority or lawful basis to provide such information to Nexous Hub.
  • Users may need to contact their organization's administrator for certain requests concerning their personal data.

7. Sharing and Disclosure of Personal Data

We do not sell personal data as a commercial product.

We may disclose or provide access to personal data to the following categories of recipients where necessary and lawful:

7.1 Service Providers

We may use third-party service providers for:

  • Cloud hosting
  • Data storage
  • Infrastructure
  • Email delivery
  • Authentication
  • Payment processing
  • Analytics
  • Customer support
  • Security
  • Backup
  • Monitoring
  • Communication
  • Other technical services

Such providers may process personal data only as necessary to provide their services to us and subject to appropriate contractual and security safeguards.

7.2 Customer Organizations

Where applicable, information may be accessible to the organization that has provided or authorized your Nexous Hub account, including its administrators, HR personnel, managers, authorized employees or other designated users.

Access is controlled based on account permissions and roles configured by the organization.

7.3 Legal and Regulatory Authorities

We may disclose information where required or permitted by applicable law, regulation, court order, governmental request or lawful process.

7.4 Business Transactions

If Nexous Hub or its business assets are involved in a merger, acquisition, restructuring, financing, sale, or similar transaction, personal data may be transferred as part of that transaction, subject to applicable legal requirements.

8. International Data Transfers

Depending on our infrastructure, service providers and customer configuration, personal data may be processed or stored in locations outside India.

Where personal data is transferred internationally, we will take reasonable steps to ensure that such transfers are carried out in accordance with applicable law and appropriate contractual, organizational and technical safeguards.

9. Data Security

We take reasonable security measures designed to protect personal data against:

  • Unauthorized access
  • Unauthorized disclosure
  • Loss
  • Misuse
  • Alteration
  • Destruction
  • Accidental or unlawful processing

Depending on the nature of the information and Services, security measures may include:

  • Access controls
  • Role-based permissions
  • Authentication mechanisms
  • Encryption or other appropriate safeguards
  • Security monitoring
  • Audit logs
  • Backup mechanisms
  • Vulnerability management
  • Incident response procedures

However, no electronic system or method of transmission can be guaranteed to be completely secure.

10. Data Retention

We retain personal data only for as long as reasonably necessary to:

  • Provide the Services;
  • Fulfil the purposes for which it was collected;
  • Meet contractual requirements;
  • Comply with legal and regulatory obligations;
  • Resolve disputes;
  • Enforce agreements; or
  • Protect our legitimate business interests.

When personal data is no longer required, we may delete, anonymize, aggregate or otherwise securely dispose of it, subject to applicable legal, contractual and operational requirements.

Specific retention periods may vary depending on the type of data, customer configuration and applicable legal requirements.

11. User Rights

Subject to applicable law and relevant conditions, individuals may have rights including:

Right to Access

You may request information about the personal data being processed and other information relating to its processing.

Right to Correction

You may request correction of inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of personal data where permitted under applicable law.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent.

Right to Grievance Redressal

You may raise concerns or complaints regarding the processing of your personal data.

Right to Nominate

Where applicable under the DPDP framework, you may exercise your right to nominate another individual to exercise your rights in accordance with applicable law.

Requests may be subject to verification and applicable legal or contractual limitations.

12. Children's Privacy

Nexous Hub is primarily intended for businesses, organizations and professional users.

Our Services are not intentionally designed to collect personal data directly from children unless such processing is specifically authorized and permitted by applicable law.

Where applicable, we will comply with legal requirements relating to children's personal data and parental or guardian consent.

13. Cookies and Tracking Technologies

We may use cookies and similar technologies to operate, secure and improve Nexous Hub.

Some cookies may be essential for the functioning of the Services, while others may support analytics, preferences or performance.

Where required by applicable law, we will provide appropriate choices regarding non-essential cookies and similar technologies.

14. Third-Party Integrations and Services

Nexous Hub may integrate with third-party services, applications, APIs or platforms.

If you choose to connect a third-party service, information may be shared with that service according to the permissions you authorize and the third party's privacy practices.

We recommend reviewing the privacy policies of third-party services before enabling integrations.

Nexous Hub is not responsible for the independent privacy practices of third-party services that are not controlled by us.

15. Artificial Intelligence Features

Nexous Hub may provide AI-powered features, including automation, analytics, search, recommendations, assistance, classification, summarization or other AI-enabled functionality.

Where AI features process personal data:

  • The processing will be subject to the applicable purpose and permissions of the relevant Nexous Hub account.
  • Access to AI-generated information will be controlled according to applicable user permissions.
  • We may use technical safeguards to limit unauthorized access to information.
  • AI-generated outputs may not always be accurate and should be reviewed before being relied upon for important decisions.

Customer organizations remain responsible for determining whether and how AI-enabled features should be used within their organization, subject to applicable law and contractual requirements.

16. Employee and Customer-Controlled Data

For enterprise and organizational accounts, the customer may control:

  • What information is collected;
  • Which users have access;
  • What information is entered into the system;
  • How long information is retained;
  • Which features are enabled;
  • Which integrations are connected.

Nexous Hub provides administrative and technical controls to support these requirements where available within the Services.

17. Data Breach and Security Incidents

If we become aware of a personal data breach affecting personal data processed through our Services, we will take appropriate steps to investigate, contain, mitigate and remediate the incident.

Where required by applicable law, we will provide notifications to affected parties, customers, regulators or other authorities within the applicable timelines.

18. Accuracy of Personal Data

We rely on users and customer organizations to provide accurate and up-to-date information.

You should promptly update information that is inaccurate, incomplete or outdated where the relevant functionality is available.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • Changes in our Services;
  • Changes in technology;
  • Changes in data processing practices;
  • Changes in applicable laws or regulations; or
  • Other operational or legal requirements.

When we make material changes, we may provide an appropriate notification through the Services, website, email or other reasonable means.

22. Governing Law

This Privacy Policy shall be governed by and interpreted in accordance with the laws applicable in India, subject to any mandatory rights or protections available under applicable law.

23. Contact Us

If you have questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, please contact us:

SIXSIGMAONE TECHNOLOGIES
Product: Nexous Hub
Email: admin@sixsigmacs.com
Phone: +91 8690969090
Registered Office: 428/429, Iscon Emporio, Satellite, Ahmedabad, Gujarat-380015

By using Nexous Hub, you acknowledge that you have read and understood this Privacy Policy.

© 2026 SIXSIGMAONE Technologies. All rights reserved.