1. About Us — Who Is the Data Fiduciary
Zarqnix Private Limited ("Zarqnix", "we", "us", or "our") is a company incorporated under the Companies Act 2013, registered in India. We are the Data Fiduciary as defined under the Digital Personal Data Protection Act, 2023 ("DPDP Act") for data collected through our website and products.
Registered Address:
9-14-1, SNo 5/2P F NO 504, Kotu Empire CBM Compound,
Andhra University, Visakhapatnam,
Andhra Pradesh – 530003, India
Contact: privacy@zarqnix.com
2. Scope and Applicability
This Privacy Policy governs the collection, use, storage, disclosure, and deletion of personal data provided to or collected by Zarqnix through:
- Our website at zarqnix.com and its subdomains
- Our products including Verikred (verikred.com)
- Job applications submitted through our Careers page
- Waitlist registrations and contact form submissions
- Email correspondence with our team
This policy is published in compliance with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and its associated Rules.
3. Personal Data We Collect
We collect only the minimum data necessary for our operations.
3.1 Data You Provide Directly
- Identity data: Full name, email address
- Contact data: Email address, any contact details you choose to share
- Application data: Role applied for, cover letter, LinkedIn or portfolio URL — when you apply for a position through our Careers page
- Communication data: Content of messages sent to us via contact forms or email
- Waitlist data: Email address, name, product interest — when you join a product waitlist
3.2 Data Collected Automatically
- Usage data: Pages visited, time spent, navigation paths, referring URLs
- Device and technical data: IP address, browser type and version, operating system, screen resolution
- Cookie data: Session identifiers and preference cookies (see our Cookie Policy)
3.3 Sensitive Personal Data (Verikred)
For users of our Verikred product, we additionally process sensitive personal data including:
- Government-issued identity identifiers (Aadhaar-linked verification, subject to Aadhaar Act 2016 restrictions)
- Employment history, educational credentials, and professional certifications
- GitHub or other platform OAuth tokens (access-scoped, stored encrypted)
- Biometric-adjacent data (facial verification, if opted in, for identity confirmation)
Sensitive personal data is handled with additional safeguards and is processed only with your explicit written consent obtained at the point of collection.
4. Purposes and Legal Basis for Processing
Under the DPDP Act 2023, we process your personal data on the following grounds:
- Consent: Where you have given explicit consent prior to processing. You may withdraw consent at any time without affecting the lawfulness of prior processing.
- Legitimate uses: Where processing is necessary for compliance with law, court orders, or prevention of unlawful acts.
- Contractual necessity: To fulfil our obligations under Terms of Service when you use our products.
Specific purposes:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Responding to contact and support enquiries | Name, email, message | Consent |
| Processing job applications | Application data | Consent / Contract |
| Sending waitlist updates and product news | Email, name | Consent |
| Operating and improving our website | Usage data, device data | Legitimate interest |
| Security and fraud prevention | IP address, usage patterns | Legitimate interest / Legal obligation |
| Compliance with legal obligations | As required by law | Legal obligation |
| Verikred Trust Score computation | Professional credentials, assessments | Consent / Contract |
5. Data Sharing and Disclosure
We do not sell, rent, or trade your personal data. We may share data in the following limited circumstances:
- Service providers (Data Processors): Trusted vendors who process data on our behalf under written data processing agreements — including cloud hosting providers, email delivery services, and analytics providers.
- Legal requirements: When required by applicable law, court order, or competent government authority in India.
- Protection of rights: To prevent fraud, enforce our Terms of Service, or protect the safety of our users or the public.
- Business transfers: If Zarqnix undergoes a merger or acquisition, we will provide notice before your personal data is transferred.
We will never share your data with advertisers, data brokers, or marketing companies.
6. Cross-Border Data Transfers
We primarily store and process your data within India on servers located in Indian data centres. Where we use third-party service providers that process data outside India, we ensure such transfers are subject to contractual safeguards that provide equivalent protection. We do not transfer sensitive personal data outside India without your explicit consent, in compliance with the DPDP Act 2023 and applicable data localisation requirements.
7. Data Retention
We retain your personal data only for as long as necessary for the purposes set out in this policy or as required by law:
- Contact and enquiry data: 24 months from last interaction, or until you request deletion
- Job application data: 12 months from the date of application
- Waitlist data: Until the product launches and you create an account, or until you opt out
- Usage and technical logs: 90 days, then anonymised or deleted
- Verikred account and credential data: Duration of your account plus 30 days after deletion request
- Accounting and tax records: 8 years as required under Indian tax laws
8. Security of Your Data
We implement appropriate technical and organisational security measures in compliance with Rule 8 of the IT (Reasonable Security Practices) Rules, 2011 and IS/ISO/IEC 27001 standards, including:
- Encryption of data in transit using TLS 1.3
- Encryption of data at rest using AES-256
- Application-layer encryption for sensitive fields using per-user keys
- Ed25519 digital signatures for credential integrity
- Role-based access controls with least-privilege enforcement
- Regular security audits and penetration testing
In the event of a personal data breach likely to result in harm to you, we will notify the Data Protection Board of India within 72 hours and will inform affected individuals as required under the DPDP Act 2023.
9. Children's Data
Our services are not directed to individuals below the age of 18 years. We do not knowingly collect personal data from children under 18. If you are a parent or guardian and believe your child has provided us with personal data without appropriate consent, please contact us at privacy@zarqnix.com and we will delete such data promptly.
10. Your Rights as a Data Principal
Under the Digital Personal Data Protection Act, 2023, you have the following rights as a "Data Principal":
- Right to access information (Section 11): You may request a summary of personal data we hold about you and the processing activities carried out.
- Right to correction and erasure (Section 12): You may request correction of inaccurate or misleading data, or erasure of data that is no longer necessary.
- Right to grievance redressal (Section 13): You may raise a complaint with our Grievance Officer. If not satisfactorily resolved, you may escalate to the Data Protection Board of India.
- Right to nominate (Section 14): You may nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
- Right to withdraw consent: You may withdraw consent at any time. Withdrawal does not affect the lawfulness of prior processing.
To exercise any of these rights, contact our Grievance Officer at privacy@zarqnix.com.
11. Cookies
We use essential and preference cookies only. We do not use advertising, tracking, or analytics cookies that identify individuals. See our Cookie Policy for full details.
12. Links to Third-Party Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites and encourage you to review their privacy policies independently.
13. Grievance Officer
In accordance with the Digital Personal Data Protection Act, 2023, the details of the Grievance Officer are:
Name: Sagar Pinninti
Designation: Founder & CEO, Zarqnix Private Limited
Email: privacy@zarqnix.com
Address: 9-14-1, SNo 5/2P F NO 504, Kotu Empire CBM Compound, Andhra University, Visakhapatnam, Andhra Pradesh – 530003, India
Response time: Grievances will be acknowledged within 24 hours and resolved within 15 days of receipt.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the revised policy on this page with an updated "Last updated" date. For material changes, we will provide notice via email or a prominent notice on our website at least 15 days before the changes take effect.
15. Contact Us
For any questions, concerns, or requests regarding this Privacy Policy or your personal data:
Email: privacy@zarqnix.com
Postal address: Zarqnix Private Limited, 9-14-1, SNo 5/2P F NO 504, Kotu Empire CBM Compound, Andhra University, Visakhapatnam, Andhra Pradesh – 530003, India
Effective date: June 2026