Privacy Policy

Chronexabuilds and operates automation and artificial-intelligence systems for businesses. That work necessarily involves personal information — our own visitors and prospects, our clients' staff, and sometimes the data held inside the systems we build. This policy explains how we handle all of it.

It applies to everything we do: our website, our advertising and marketing, our sales conversations, our client engagements, the software we deliver, and our dealings with candidates and suppliers. Where a signed agreement with a client says something more specific, that agreement governs the data covered by it.

1. Who we are and how to reach us

Chronexa operates from IXC, India and serves clients internationally. For the personal information described in Section 3 we act as the controller— we decide why and how it is used. For personal information inside systems we build or run on a client's behalf we act as a processor, handling it only on that client's documented instructions.

For any privacy question, request or complaint, including requests under the Indian Digital Personal Data Protection Act, the GDPR, or comparable laws, write to info@chronexa.iowith "Privacy" in the subject. That address reaches the person responsible for privacy matters at Chronexa, and we aim to respond within 30 days.

2. Our principles

• We collect the least we need, and we say why.
• We do not sell personal information, and we never have.
• We do not share it with third parties for their own marketing.
• We do not use client data to train public or third-party AI models.
• Where we can do the work without personal data, we do.

3. Information we collect, and why

Prospects and enquiries

When you contact us — through a form on this website, an advertising lead form on a social platform, email, telephone, WhatsApp, LinkedIn, a booked call, or in person — we collect what you tell us. Typically that is your name, work email, phone number, employer, role, and a description of the problem you want solved. We use it to respond, to prepare for conversations with you, and to keep a record of what was discussed.

Our lawful basis is our legitimate interest in responding to a business enquiry you initiated, and your consent where a channel requires it — messaging you on WhatsApp, for example, which we do only where you have specifically agreed to it.

Clients and engagements

During an engagement we hold contact and role details for the people we work with, together with correspondence, meeting records, project documentation and billing information. We use this to deliver the work, support it, invoice for it, and meet our legal and tax obligations.

Data inside the systems we build

Our work often involves processing documents, records and messages belonging to a client — which may contain personal information about that client's own customers, employees or counterparties. We access this only as far as building, testing, operating and supporting the system requires. We do not use it for our own purposes, we do not use it to train models for other clients, and we return or delete it at the end of the engagement in line with the relevant contract.

Website visitors

We collect standard technical information — IP address, browser and device type, pages viewed, time spent, and the site or advertisement that referred you. We use it to understand what is useful, to fix problems, and to measure whether our advertising works.

Candidates and suppliers

If you apply to work with us we hold your application and our notes on it for up to twelve months. If you supply goods or services to us we hold the contact and payment details needed to work with you and pay you.

4. Cookies, analytics and advertising

We use cookies and similar technologies for three things: making the site work, measuring how it is used, and measuring our advertising. Analytics tell us which pages people read. Advertising technologies, including the Meta Pixel and equivalent conversion measurement, tell the platform that a visit or an enquiry happened, so we can tell which campaigns produce real conversations and stop paying for those that do not.

You can block or delete cookies in your browser settings, and control how advertising platforms profile you in their own preference centres — for example in your Meta ad preferences. Blocking analytics or advertising cookies does not affect the site's function.

5. How we communicate with you

We contact people by email, telephone and messaging platforms including WhatsApp. Where a channel or a law requires your explicit permission before we may use it, we ask for it first and record that you gave it.

You can stop any of it at any time — reply STOP to a message, use the unsubscribe link in an email, tell us on a call, or write to info@chronexa.io. We act on those requests promptly and keep only the minimum record needed to make sure we do not contact you again by mistake.

6. Artificial intelligence

We build AI systems, and we use them in our own work. Two commitments follow from that.

First, we do not use client data or your personal information to train general-purpose AI models, whether ours or a third party's. Where a system we build learns from a client's data, it does so for that client alone.

Second, where we use third-party AI services in delivering work, we choose services that contractually exclude the data we send from being used for their own model training, and we prefer deployments inside a client's own environment where the engagement calls for it.

We do not make decisions about individuals that produce legal or similarly significant effects on them by automated means alone.

7. Who we share information with

We use established service providers to run our business. They act on our instructions and are bound by confidentiality and data-protection terms. They fall into these categories:

• Cloud hosting and infrastructure
• Email, document storage and collaboration tools
• Customer records and workflow systems
• Advertising, messaging and scheduling platforms
• Website and product analytics
• Accounting, invoicing and payment processing
• AI and machine-learning services used to deliver client work

We will also disclose information where the law requires it, where we must to establish or defend a legal claim, or in connection with a merger or acquisition — in which case we will tell you before your information becomes subject to a different policy.

We will name the specific providers relevant to you on request. Clients receive a current sub-processor list as part of their engagement.

8. International transfers

We operate from India and work with clients and suppliers in other countries, so personal information may be processed outside your own. Where we transfer information across borders we rely on appropriate safeguards — standard contractual clauses, adequacy decisions, or the equivalent mechanism available under the applicable law. Clients with data-residency requirements should raise them before an engagement begins; we can usually meet them.

9. How long we keep information

• Enquiries that do not become clients: up to 24 months from last contact.
• Client records: for the engagement, then as long as tax, accounting and limitation law requires.
• Data inside systems we build: per the client contract; returned or deleted at the end of the engagement.
• Candidate applications: up to 12 months.
• Website analytics: up to 26 months, in aggregate wherever possible.

You can ask us to delete sooner, and we will unless we are legally required to keep it.

10. How we protect information

Access is limited to the people who need it to do their job. Credentials and secrets are held in dedicated secret-management systems, never in code or documents. Systems are protected by access controls and multi-factor authentication, data is encrypted in transit and at rest with the providers we use, and we review our arrangements regularly.

No system is perfectly secure. If a breach affects your personal information we will notify you and the relevant authority as the law requires, and tell you plainly what happened and what we are doing about it.

11. Your rights

Depending on where you live, you may have the right to:

• Know what information we hold about you and get a copy
• Have inaccurate information corrected
• Have your information deleted
• Restrict or object to how we use it, including for direct marketing
• Receive your information in a portable format
• Withdraw consent you previously gave, at any time
• Nominate someone to exercise these rights on your behalf
• Complain to your data protection authority

Email info@chronexa.io. We do not require any particular form of words, and we will not charge you or make it difficult. If the information sits inside a system we run for a client, we are the processor and will refer your request to that client, telling you that we have done so.

12. Children

We sell to businesses and do not direct our services at children. We do not knowingly collect information from anyone under 18. If you believe we have, tell us and we will delete it.

13. Changes

When this policy changes we update the date at the top. Where a change materially affects how we use information you have already given us, we will tell you directly rather than relying on you noticing.