Next Gen ERP AI Privacy Policy

NextGenERPAI Privacy Policy

At NextGenERPAI, safeguarding your privacy is fundamental to how we operate. This Privacy Policy describes our practices regarding the collection, use, storage, and protection of information when you visit our website at www.nextgenerpai.com or engage our ERP development and consulting services.

1. About NextGenERPAI

NextGenERPAI provides enterprise resource planning solutions, including Apache OFBiz development, Moqui Framework implementations, warehouse management systems, and AI-powered business automation. We are based in Mumbai, Maharashtra, India, and serve clients globally.

Contact for Privacy Matters:
Email: privacy@nextgenerpai.com
Location: Mumbai, Maharashtra, India

2. Information We Gather

We collect different categories of information depending on how you interact with us:

Information You Provide Directly

  • Contact details such as name, email address, phone number, and company name when you submit inquiries or request consultations
  • Project requirements and business information shared during discovery calls or proposal discussions
  • Communication records including emails, chat messages, and meeting notes
  • Billing and payment information for invoicing purposes
  • Feedback and testimonials you choose to share

Information Collected Automatically

  • Device specifications including browser type, operating system, and screen resolution
  • Network information such as IP address and approximate geographic location
  • Website interaction data including pages visited, time spent, click patterns, and referral sources
  • Technical identifiers assigned through cookies and similar tracking mechanisms

Project-Related Information

  • Business process documentation and workflow specifications
  • System access credentials provided for development and integration work
  • Sample data sets shared for testing and configuration purposes
  • Technical infrastructure details required for deployment
3. How We Utilize Your Information

We process your information for the following purposes:

  • Service Delivery: Executing ERP development projects, providing technical support, and fulfilling contractual obligations
  • Communication: Responding to inquiries, sending project updates, and providing relevant information about our services
  • Business Operations: Processing payments, maintaining records, and managing client relationships
  • Website Enhancement: Analyzing usage patterns to improve functionality, content, and user experience
  • Security Measures: Detecting and preventing fraudulent activities, unauthorized access, and technical issues
  • Legal Compliance: Meeting regulatory requirements, responding to legal requests, and protecting our rights
  • Marketing Activities: Sending newsletters and promotional content to those who have opted in
4. Legal Grounds for Processing

We rely on the following legal bases to process your personal information:

  • Contractual Necessity: Processing required to deliver services you have requested or to take pre-contractual steps at your request
  • Legitimate Business Interests: Operating and improving our services, maintaining security, and conducting business analytics, balanced against your privacy rights
  • Your Consent: For marketing communications, non-essential cookies, and analytics tracking where required by law
  • Legal Obligations: Compliance with applicable laws, tax regulations, and government requests
5. Cookies and Tracking Technologies

Our website employs cookies and similar technologies to enhance your browsing experience and gather analytical insights.

Categories of Cookies We Use:

  • Essential Cookies: Required for basic website functionality including security, session management, and load balancing. These cannot be disabled.
  • Functional Cookies: Remember your preferences such as language settings and display options
  • Analytics Cookies: Help us understand how visitors interact with our website through tools like Google Analytics
  • Marketing Cookies: Enable targeted advertising and measure campaign effectiveness across platforms

Managing Your Cookie Preferences:

For visitors from the European Economic Area (EEA) and United Kingdom, non-essential cookies are activated only after you provide consent through our cookie banner. You can modify your preferences anytime via the "Cookie Settings" link in our website footer. You may also configure your browser to reject cookies, though this may limit certain website features.

6. Information Sharing Practices

We do not sell your personal information. We may share data with the following categories of recipients:

  • Technology Partners: Cloud hosting providers, content delivery networks, and infrastructure services that support our operations
  • Analytics Providers: Services that help us measure and improve website performance
  • Communication Tools: Email platforms, CRM systems, and customer support software
  • Payment Processors: Secure payment gateways for transaction processing
  • Professional Advisors: Legal counsel, accountants, and auditors as necessary
  • Legal Authorities: Government bodies when required by law or to protect our legal rights

All third-party service providers are bound by appropriate data processing agreements and confidentiality obligations.

7. Cross-Border Data Transfers

As a globally operating business, your information may be processed in countries outside your residence. When transferring personal data from the EEA, UK, or other regions with data transfer restrictions, we implement appropriate safeguards including:

  • Standard Contractual Clauses approved by relevant authorities
  • Adequacy decisions where applicable
  • Additional technical and organizational security measures

You may request details about specific transfer mechanisms by contacting privacy@nextgenerpai.com.

8. Data Retention Periods

We retain information only as long as necessary for the purposes described in this policy:

Information CategoryRetention Duration
Inquiry and lead information24 months from last contact
Client project recordsDuration of engagement plus 7 years
Financial and billing records7 years for tax compliance
Support correspondence3 years after issue resolution
Website analytics data26 months (configurable)
Marketing consent recordsDuration of consent plus 3 years

Certain records may be retained longer when required by law, pending litigation, or for legitimate archival purposes.

9. Your Privacy Rights

Depending on your location, you may exercise the following rights regarding your personal information:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Ask us to rectify inaccurate or incomplete information
  • Deletion: Request erasure of your personal data under certain circumstances
  • Restriction: Ask us to limit how we process your information
  • Portability: Receive your data in a structured, machine-readable format
  • Objection: Object to processing based on legitimate interests or for direct marketing
  • Consent Withdrawal: Revoke previously given consent at any time

To exercise these rights, contact us at privacy@nextgenerpai.com. We will respond within 30 days. For complex requests, we may extend this period by up to 60 additional days with prior notice. We may request identity verification before processing your request.

10. Region-Specific Provisions

European Economic Area and United Kingdom

If you are located in the EEA or UK, you benefit from rights under the General Data Protection Regulation (GDPR) and UK GDPR respectively. Non-essential cookies require your prior consent. You have the right to lodge complaints with your local supervisory authority if you believe your rights have been violated.

India

We comply with India's Digital Personal Data Protection Act, 2023 and related regulations. Indian residents may exercise rights including access, correction, and erasure of their personal data.

United States

We comply with applicable state privacy laws including the California Consumer Privacy Act (CCPA/CPRA), Virginia Consumer Data Protection Act, Colorado Privacy Act, and similar legislation. California residents may request disclosure of data collected, opt out of data sales (we do not sell personal information), and request deletion of their information.

United Arab Emirates

We adhere to UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection. UAE residents may exercise access, correction, and deletion rights.

Saudi Arabia

We comply with Saudi Arabia's Personal Data Protection Law. Residents may exercise their statutory rights including access and correction.

11. Information Security

We implement comprehensive security measures to protect your information:

  • Encrypted data transmission using TLS/SSL protocols
  • Secure cloud infrastructure with access controls and monitoring
  • Regular security assessments and vulnerability testing
  • Employee training on data protection and security practices
  • Incident response procedures for potential data breaches
  • Access restrictions based on role and necessity

While we employ industry-standard protections, no system is completely secure. We encourage you to use strong passwords and exercise caution when sharing sensitive information.

12. Client Confidentiality Commitment

Beyond standard privacy obligations, we maintain strict confidentiality regarding client engagements:

  • Client business information and project details are never disclosed to third parties without explicit authorization
  • We do not reference client names or brands in marketing materials without written permission
  • Client lists and contact information are not shared with prospective clients or external parties
  • All team members involved in client projects sign confidentiality agreements
  • Project documentation and source code remain confidential as specified in service agreements

These commitments are formalized in our service agreements and survive the conclusion of our business relationship.

13. Intellectual Property

All content on our website including text, graphics, logos, images, and software is protected by intellectual property laws and owned by NextGenERPAI or our licensors. You may not reproduce, distribute, modify, or create derivative works from our content without prior written permission.

You may print or download content for personal, non-commercial reference provided you maintain all copyright notices. Any feedback, suggestions, or ideas you submit may be used by us without restriction or compensation.

14. External Links

Our website may contain links to third-party websites, documentation, or resources. These external sites operate independently and have their own privacy practices. We are not responsible for their content, security, or data handling. We encourage you to review the privacy policies of any external sites you visit.

15. Children's Privacy

Our services are designed for businesses and professionals. We do not knowingly collect information from individuals under 18 years of age. If we discover that we have inadvertently collected data from a minor, we will promptly delete such information.

16. Policy Updates

We may revise this Privacy Policy periodically to reflect changes in our practices, legal requirements, or business operations. When we make updates:

  • The revised policy will be posted on this page with an updated effective date
  • For significant changes, we will provide prominent notice through our website or email notification
  • Continued use of our services after changes take effect constitutes acceptance of the revised policy

We recommend reviewing this policy periodically to stay informed about our data practices.

17. Limitation of Liability

To the maximum extent permitted by law, NextGenERPAI shall not be liable for any indirect, incidental, consequential, or punitive damages arising from your use of our website or services, including but not limited to loss of data, business interruption, or unauthorized access resulting from circumstances beyond our reasonable control.

18. Governing Law

This Privacy Policy is governed by the laws of India. For users in regions with specific data protection regulations (such as GDPR for EEA/UK residents), those regional requirements apply to the extent they provide greater protections.

19. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out:

For information about our service terms and conditions, please review our Terms of Service.

Effective Date: January 7, 2026

Last Updated: January 7, 2026