Privacy Policy

CLEARIE™ GETWAY ("Getway", "we", "us") is operated by Neximprove Private Limited("Neximprove"). This Privacy Policy explains what personal and business information we collect when you use the Getway platform, APIs, and websites, how we use it, and the rights available to you.

1. Information we collect

• Account data — name, work email, company, country, tax identifier (GSTIN/VAT/EIN/etc.), and role.
• Usage data — API calls, AI credits consumed, IP, user-agent, timestamps, and rate-limit metrics.
• Workspace content — queries you submit, watchlists, saved analyses, and uploads.
• Billing data — invoices and payment-method references handled by Cashfree Payments (we do not store full card numbers).
• Trade dataset personal data — where present in source material, proprietor names, contact names, addresses, tax identifiers, IEC-linked details, and business-contact information.
• Support data — tickets, emails, screenshots, attachments, and diagnostic context you submit to support.
• Diagnostics — error logs and performance traces strictly to operate and secure the service.

2. How we use information

• Provide, secure, and improve Getway features, APIs, and AI outputs.
• Authenticate users, enforce plan limits, prevent abuse and fraud.
• Bill subscriptions and add-on packs, send tax-compliant invoices.
• Send transactional emails (OTPs, renewal reminders, dunning, security alerts).
• Investigate support, abuse, security, privacy, and data-quality requests.
• Comply with applicable laws and lawful requests.

3. Sub-processors

We engage the following sub-processors and vendors:

• Microsoft Azure (hosting, compute, storage — India regions by default).
• Cashfree Payments India Pvt Ltd (payments, subscriptions, KYC).
• Resend (transactional email delivery).
• OpenAI / Azure OpenAI (inference for AI features — content is not used to train models).

The current list is maintained on request via privacy@neximprove.com.

4. Data location & retention

Primary data is stored in India (Azure Central India / South India). Retention follows your plan: audit logs and stored analyses are kept for the period stated in your subscription, then deleted or anonymized. You may request export or deletion at any time.

• Account and billing records are retained while the account is active and as required by law.
• API usage logs are retained according to plan limits and security requirements.
• Support tickets are retained for operational, audit, and dispute-resolution purposes.
• Backups are rotated on a controlled schedule and deleted through normal backup expiry.

5. Security

TLS 1.2+ in transit, AES-256 at rest, RBAC with least-privilege, hashed API keys, OTP-based email/phone verification, optional SSO (SAML/OIDC) on Business and Enterprise plans. We follow ISO 27001-aligned controls and conduct annual third-party penetration tests.

Additional security and incident-response commitments are described in our Security & Incident Response page.

6. Your rights

Subject to applicable law, including India's DPDP framework, GDPR for EU customers, and CCPA for California residents where applicable, you may request access, correction, deletion, portability, consent withdrawal, grievance redressal, or restriction. Contact privacy@neximprove.com.

7. Cookies

We use strictly-necessary cookies for authentication and session integrity. We do not run third-party advertising or tracking pixels on the product surfaces.

8. Changes

We will notify customers by email of any material changes at least 30 days before they take effect.

9. Contact

Neximprove Private Limited · privacy@neximprove.com · Privacy and grievance requests are triaged through privacy support workflows.