1. Scope
This policy applies to varadanexus.com, the Varada Enterprise Management System (“EMS”), Nexus Social, our mobile and web applications, and services that connect to third-party platforms including Meta, Facebook, Instagram, Threads, WhatsApp, Google, and advertising platforms.
2. Data we collect
- Identity and contact information such as name, business email, telephone number, role, and organisation.
- Account, authentication, access-control, device, browser, security, and audit information.
- Business records entered into EMS, including projects, tasks, approvals, documents, support requests, and communications.
- Social account identifiers, Page and Instagram professional account details, content, comments, messages, mentions, audience metrics, insights, advertising accounts, campaigns, leads, catalogues, and related performance data when an authorised user connects those assets.
- Billing, transaction, campaign-budget, and service usage information where applicable. Payment card data is processed by authorised payment providers and is not stored unless expressly stated.
- Technical information such as IP address, timestamps, diagnostic events, and cookies required for security and functionality.
3. How we use data
- Provide, secure, maintain, and improve our services.
- Authenticate users and enforce role-based permissions.
- Create, schedule, publish, analyse, moderate, and manage authorised social content and advertising activity.
- Receive and respond to authorised comments, messages, leads, and support requests.
- Produce operational reports, analytics, audit trails, and business records.
- Prevent fraud, misuse, unauthorised access, and security incidents.
- Comply with contractual, tax, accounting, regulatory, and legal obligations.
4. Meta platform data
Nexus Social accesses Meta platform data only after an authorised business user grants permissions through Meta. Access is limited to the permissions approved by the user and Meta, which may include Page management, Instagram publishing, messages, comments, insights, leads, catalogues, and advertising management.
We use Meta platform data solely to provide the requested EMS functions. We do not use it for unrelated profiling, and we do not sell it. Users can revoke access from Meta Business Settings, Facebook Settings, Instagram Settings, or EMS Social Accounts at any time.
5. Lawful processing and consent
Depending on the context, we process data to perform a contract, comply with law, protect legitimate business and security interests, or based on consent. Where consent applies, it may be withdrawn through the relevant account settings or by contacting us.
6. Sharing and service providers
We may share limited data with authorised staff, contractors, hosting providers, database and security providers, communications services, analytics providers, professional advisers, and connected platforms necessary to deliver the service. Providers must use the data only for contracted purposes and protect it appropriately. We may disclose information when legally required or to protect rights, safety, and security.
Government and public-authority requests are handled under our Government Data Request Policy, which requires legality review, challenges to unlawful or disproportionate requests where available, data minimisation, and documented accountability.
7. Retention
We retain data only as long as necessary for the stated purpose, account administration, security, dispute resolution, and legal obligations. Connected-platform tokens are encrypted and retained while the integration is active. Revoked or deleted integrations are removed or rendered unusable, subject to backup cycles and mandatory retention.
8. Security
We use role-based access controls, encryption, secret management, audit logging, secure development practices, and monitoring appropriate to the nature of the data. No system is completely secure; users must protect their credentials and notify us of suspected unauthorised access.
9. Your choices and rights
Subject to applicable law, you may request access, correction, completion, erasure, withdrawal of consent, grievance redressal, or information about processing. Requests may require identity verification. You can also disconnect third-party accounts directly from EMS or the relevant platform.
10. Children
Our EMS and business services are not directed to children. We do not knowingly collect children’s personal data through Nexus Social.
11. International processing
Service providers and connected platforms may process data in other countries. Where this occurs, we use contractual, organisational, and technical safeguards required by applicable law.
12. Updates
We may update this policy to reflect product, legal, or operational changes. The effective date above identifies the current version. Material changes will be communicated through an appropriate channel.
13. Contact and grievances
Privacy or data-rights requests may be sent to varadanexus@gmail.com. Please include the service used and enough information to identify the relevant account. Varada Nexus Private Limited is located in Rajahmundry, Andhra Pradesh, India.