Back to sign in

Privacy Notice

Last updated: 03 Oct 2026

Apertotek Consulting LLP ("the Company", Pune Maharashtra India) uses Nexus to run its dealer network, orders and payments and its human resources. This notice explains what personal data Nexus holds about you, why, how it is protected, and the rights you have under India's Digital Personal Data Protection Act, 2023 ("DPDP Act").

Who is responsible

  • The Company is the Data Fiduciary: it decides what data is collected and why, and is responsible to you for it. Contact its grievance officer (below) about anything in this notice.
  • Apertotek Consulting LLP develops and maintains Nexus for the Company and acts as a Data Processor: it handles data only on the Company's instructions, under a data processing agreement, and never for its own purposes.

What we collect and why

Everyone who signs in to Nexus:

WhatDetailsWhy
Sign-in accountName, work email, role, password (stored hashed, never readable)To give you access and decide what you can see and do
Activity recordsSign-ins, failed sign-in attempts, IP address, changes made in the systemSecurity, preventing misuse, and an audit trail of who changed what
NotificationsIn-app messages sent to you (reminders, approvals, decisions)To keep you informed about items that need your attention

Employees:

WhatDetailsWhy
Employee profileEmployee code, name, work email/phone, department, designation, employment type, work location, reporting manager, joining and exit datesManaging employment and the organization structure
Personal detailsPersonal email and phone, address, gender, date of birth, emergency contactEmployment administration and emergencies - visible only to you and authorised HR
AttendanceCheck-in/check-out times, attendance corrections and their approvalRecording working time and payroll inputs
LeaveLeave requests, dates, reasons, balances and approvalsManaging leave entitlements and approvals
ProbationProbation dates, manager recommendations, confirmation or extension decisions and remarksDeciding confirmation of employment
Salary and payrollSalary structure, payslips, loss-of-pay days, PF / professional tax / TDS deductions, bank account detailsPaying salaries and meeting tax and statutory obligations - amounts are hidden on screen until revealed by authorised users
PerformanceSelf reviews, manager reviews and ratingsPerformance appraisal and development

Dealers and sales:

WhatDetailsWhy
DealersBusiness name, owner/contact name, email, phone, business address, GSTINManaging the dealer relationship, orders, credit and payments
Orders and paymentsPurchase orders, invoices, payment records (mode, reference, cheque details)Order fulfilment, dealer ledger and financial reconciliation
Sales teamSales position, regions covered, reporting managerAssigning dealers and showing each team its own records

Nexus does not collect Aadhaar numbers, biometric data, health records or financial data beyond what is listed above, and is not intended for anyone under 18.

Legal basis

  • Employees: processing for the purposes of employment, which the DPDP Act allows as a legitimate use without separate consent, and to meet legal obligations such as tax, provident fund and labour law records.
  • Dealers: details provided by the dealer for the business relationship, used only for that purpose.
  • Candidates: details you provide when applying, used only to assess your application.

Who can see it

  • Access is limited by role: each person sees only the records their role and team allow.
  • The company directory shows only work details; personal details are limited to you and authorised HR.
  • Salary amounts are hidden on screen until an authorised user chooses to reveal them.
  • Data is not sold or shared for marketing. It is shared outside the Company only where the law requires it (for example tax and provident fund authorities) or with the processors listed below.

Decisions about you

Nexus does not make automated decisions about you. Leave, attendance, probation, appraisal and hiring decisions are made by people, with Nexus applying the Company's configured rules (for example leave entitlements) and sending reminders.

Where it is stored and who processes it

Data is stored in Northern Virginia (us-east-1). The following service providers process it on the Company's behalf:

  • Vercel Inc - Runs the application
  • MongoDB in AWS - Stores the data (encrypted at rest)
  • GMail - Sends sign-in and password-reset emails

How it is protected

  • Encrypted connections (HTTPS); data encrypted at rest by the database provider.
  • Passwords are stored hashed; repeated failed sign-ins temporarily lock the account.
  • Role-based access, and an audit trail of sign-ins and changes to records.
  • The Service Provider's support access is limited to what is needed for a specific issue and is logged.

How long it is kept

Data is kept while the relationship (employment, dealership or your application) is active, then only as long as needed or required by law, after which it is deleted or anonymised automatically:

  • Former employees' personal details (contacts, address, date of birth): 12 months after leaving.
  • Bank account details: 3 months after leaving; payslips and salary records: 8 years (tax and accounting law).
  • Attendance, leave and appraisal records: 3 years after leaving.
  • Employment record: anonymised 8 years after leaving.
  • Unsuccessful candidates: anonymised 6 months after the decision.
  • Notifications: 90 days; security and audit logs: 12 months.

Records needed for a legal claim or investigation may be kept longer. If the Company stops using Nexus, the data is returned to it and deleted from the Service Provider's systems.

If you are a job candidate

The Company records your name, contact details, the details in your CV, the role you applied for, interview stage and interviewer feedback, to assess your application. Only the hiring team can see it. If you are not hired, your details are anonymised 6 months after the decision, unless you agree to be considered for future roles. You have the same rights as described below.

Your rights

  • Access: a summary of your personal data held and how it is used.
  • Correction and completion: fix data that is wrong or incomplete.
  • Erasure: deletion once it is no longer needed, except where the law requires it to be kept.
  • Nomination: name someone to use these rights for you in case of death or incapacity.
  • Grievance: raise a complaint with the Company, and if it is not resolved, with the Data Protection Board of India.

Employees can see most of their own data in Nexus (profile, leave, attendance, payslips) after signing in.

Contact - grievance officer

Madan Bhintade
Email: mbhintade@gmail.com
Phone: 9923106978

We aim to respond to requests and complaints within 30 days.