Privacy Policy
1. About Us
OpnixLabs is a B2B software development / technology services business — OpnixLabs helps businesses turn ideas into reliable websites, web applications, APIs, and scalable SaaS products., operating as the Data Fiduciary under Section 2(i) of the DPDP Act, 2023. We operate our website (www.opnixlabs.com).
Registered Address
Ankur Vihar, Loni Ghaziabad, Uttar Pradesh
2. Scope & Applicability
This Policy applies to all digital personal data processed by OpnixLabs in connection with our website (www.opnixlabs.com) and associated services — including all Data Principals in India whose data we process.
Exclusions: (a) non-digital data; (b) purely personal or domestic use; (c) publicly available data, as exempted under the DPDP Act.
3. Personal Data We Collect
We collect only the data necessary for the stated purposes below. We do not collect data we do not need.
3.1 Personal Data
- Full name
- Email address
- Mobile number
- IP address
- Device ID & browser info
- Purchase & transaction history
- Support & chat messages
- Browsing & click behaviour
3.2 Sensitive Personal Data
Collected subject to explicit consent only:
- Payment card / UPI / banking details
3.3 How We Collect Data
- Checkout & payment forms
- Cookies & analytics tools
- Contact & support forms
- WhatsApp / email communication
4. Lawful Purpose & Basis of Processing
We process personal data only for lawful purposes for which you have given free, specific, informed, and unambiguous consent or where processing is necessary for a legitimate use of the DPDP Act.
- Order processing & payments
- Product / service delivery
- Customer support & grievance handling
- Invoices, receipts & legal records
- Legal & regulatory compliance (GST, RBI)
- Fraud detection & platform security
- Website & app performance analytics
- Marketing & promotional communications (with consent)
We will not process your data for purposes beyond those stated above without obtaining fresh consent or as otherwise permitted by law. You may withdraw consent at any time.
5. Data Retention & Deletion
Under DPDP Act, OpnixLabs erases personal data once the collection purpose is no longer served, unless retention is required by applicable law.
| Data Category | Retention Period | Legal Basis |
|---|---|---|
| Account & profile data | While account is active; deleted within 90 days after account deletion | Service delivery / specified purpose |
| Transaction & payment records | 72 months from the relevant annual-return due date, where GST record-retention requirements apply | CGST Act, 2017 – Section 36 |
| Customer support records | 3 years from resolution | Dispute resolution / legitimate business records |
| Marketing preferences | Until consent is withdrawn, then deleted/anonymized | Consent / specified marketing purpose |
Deletion Requests
Users can request deletion by emailing privacy@opnixlabs.com or by submitting a data deletion request through the website. We will delete eligible personal data unless retention is necessary for the specified purpose or required by applicable law.
6. Data Sharing & Third-Party Processors
We share personal data with trusted third-party Data Processors acting on our behalf, under written contracts that mandate DPDP-compliant data protection standards.
We do not sell, rent, or trade your personal data to third parties for their own commercial purposes.
We may disclose data to government authorities, law enforcement, or regulatory bodies where required by applicable Indian law or court order.
7. Your Rights as a Data Principal
Contact our Grievance Officer (Section 13) to exercise any of these rights:
Right to Access Information
Obtain a summary of the personal data we process about you, the purposes for processing, and details of all Data Fiduciaries and Processors involved.
Right to Correction & Updating
Request correction of inaccurate, incomplete, or misleading personal data, or request that it be updated or supplemented.
Right to Erasure
Request erasure of your personal data where: (a) the collection purpose is no longer served; (b) consent has been withdrawn; or (c) as required by law.
Right to Withdraw Consent
Where processing is consent-based, you may withdraw consent at any time. Prior lawful processing is unaffected. We will cease processing as soon as reasonably practicable.
Right to Nominate
You may nominate another individual to exercise your data rights in the event of your death or incapacity, of the DPDP Act.
Right to Grievance Redressal
You may raise grievances with our Grievance Officer. If unsatisfied, you may escalate to the Data Protection Board of India (DPBI) of the DPDP Act.
8. Data Security & Breach Notification
OpnixLabs implements appropriate technical and organisational safeguards to protect your personal data against unauthorised access, loss, or disclosure.
- SSL/TLS encryption (HTTPS)
- AES-256 encryption at rest
- PCI-DSS compliant payment processing
- Employee NDAs & security training
Breach Notification
In the event of a personal data breach likely to cause harm, OpnixLabs will notify the Data Protection Board of India within 72 hours of becoming aware, and will notify affected Data Principals as required.
9. Cookies & Tracking Technologies
Our website (www.opnixlabs.com) uses cookies and similar tracking technologies to enhance your experience and support analytics and marketing.
- Essential: login sessions, cart
- Analytics: Google Analytics, Mixpanel
- Marketing: Facebook Pixel, Google Ads
- Preference: language, display settings
You may control cookies via your browser settings. Where required under the DPDP Act, we obtain your consent before placing non-essential cookies.
10. Children's Personal Data
Our services are not directed at individuals under 18. We do not knowingly collect personal data from children without verifiable parental consent as required by the DPDP Act. If we become aware of such collection, we will delete it immediately. Contact our Grievance Officer if you believe this has occurred.
11. Cross-Border Data Transfers
OpnixLabs may transfer or store your personal data outside India via international service providers. Such transfers are made only to countries notified by the Government of India as having adequate data protection, or subject to appropriate contractual safeguards.
12. Consent Management & Policy Updates
We collect consent through a clear, affirmative action (e.g., ticking a checkbox) before processing personal data. We may update this Policy to reflect changes in practices, services, or legal obligations. Material changes will be notified on our website (www.opnixlabs.com). The Effective Date above indicates when this Policy was last updated.
13. Grievance Officer & Contact
OpnixLabs has designated a Grievance Officer to address privacy-related complaints, questions, and data rights requests:
Shivam Gupta
Grievance Officer
Email: contact@opnixlabs.com
Address: Ankur Vihar, Loni Ghaziabad, Uttar Pradesh
We acknowledge all grievances within 48 hours and resolve within 30 days. If you are not satisfied with our resolution, you may lodge a complaint with the Data Protection Board of India (DPBI) established under the DPDP Act at digitindia.gov.in .