This notice explains how Loopnexa handles personal data that reaches us through this website, by email, by WhatsApp, through job applications and through campus invitations. It is written to meet India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"), the Digital Personal Data Protection Rules, 2025, and the Information Technology Act, 2000 and the rules made under it.
Who we are
Loopnexa ("we", "us") is a software services company based in Patna, Bihar, India. For the personal data described here, we are the Data Fiduciary: we decide why and how it is processed.
This notice does not cover the software we build for our clients, or data we handle for them. That is covered by our contract with each client (see When we work for our clients).
What we collect
| When | What |
|---|---|
| You send an enquiry | Your name, organisation, organisation type, email address, phone or WhatsApp number, what you need, your timeline, an optional budget band, your preferred reply language, your message, and your consent to this notice. |
| With every enquiry | The page you sent it from, the first page of your visit, the website that referred you, any campaign tags in the link, and the time taken to fill in the form (to stop spam). |
| Spam protection | Cloudflare Turnstile checks that a person, not a bot, is sending the form. To do this it processes technical signals from your browser and your IP address. |
| You email or WhatsApp us | Your name, email address or phone number, and what you write to us, including any files you attach. |
| You apply for a job | Your CV, links to your work, education, contact details and anything else you choose to send. |
| A college invites us | The name and contact details of the placement officer or staff member who writes to us. |
| You browse the site | Basic technical data that every website receives, such as IP address, browser and pages requested, kept in security logs by our hosting provider. We may also use Cloudflare Web Analytics, which counts visits without cookies and without identifying you. |
We do not ask for passwords, bank or card details, health information, biometric data or government ID numbers through this website. Please do not send them.
Why we use it
- To reply to your enquiry, understand what you need, prepare a proposal and follow up on it.
- To deliver and manage work you engage us for, under a separate written agreement.
- To assess job applications and run our campus programme.
- To keep the website secure, prevent spam and fraud, and fix problems.
- To keep records we are required to keep, and to establish, exercise or defend legal claims.
We process your data on the basis of your consent, or for legitimate uses permitted by Section 7 of the DPDP Act, such as data you have voluntarily given us for a specific purpose, or compliance with law. We do not sell personal data, and we do not use it for advertising.
Consent and withdrawal
When you send the enquiry form, you consent to us using your details as described in this notice. You can withdraw your consent at any time, as easily as you gave it: email admin@loopnexa.net or message us on WhatsApp. Withdrawal does not affect processing already carried out, or data we must keep by law.
Cookies and browser storage
We do not use advertising or tracking cookies. The site stores up to four small items in your own browser, which never leave your device unless you send the form:
| Item | Why | How long |
|---|---|---|
| Sector you chose | To pre-fill the contact form for your sector | Until you clear your browser data |
| First page of your visit | Sent with an enquiry, so we know what you read first | Until you close the tab |
| Problem you typed on the home page | To fill in the contact form's message for you | Removed when the contact page opens, or when you close the tab |
| Opening animation shown | So the home page animation plays once per visit | Until you close the tab |
Cloudflare, our host, may set strictly necessary security cookies to protect the site from attacks. You can block or clear browser storage in your browser settings; the site will still work.
Who we share it with
We share personal data only as needed, and only with:
- Service providers who process it for us (Data Processors), under contract: Cloudflare (website hosting, security and spam protection) and Zoho (email, including ZeptoMail for delivering form messages).
- Services you choose to use: if you contact us on WhatsApp, Meta processes that message under its own terms.
- Professional advisers, such as lawyers, auditors and accountants, under a duty of confidentiality.
- Authorities, when the law requires it or to protect our rights, our people or others.
- A successor business, if Loopnexa is merged, acquired or restructured, on the same terms as this notice.
Where it is stored
Our email is hosted by Zoho in India. Cloudflare runs a global network, so website and security data may pass through or be processed in other countries. Any transfer outside India is made only as permitted under the DPDP Act and to countries not restricted by the Government of India.
How long we keep it
| Data | Kept for |
|---|---|
| Enquiries that do not lead to work | Up to 24 months after our last contact with you |
| Client and contract records | For the contract and as long as tax, accounting and other laws require |
| Job applications not taken forward | Up to 12 months, so we can consider you for future roles |
| Security and system logs | As long as the law requires, including the periods set by CERT-In directions |
After that, we delete or anonymise the data, unless we need it to establish, exercise or defend a legal claim.
Security and breaches
We use reasonable security safeguards, as required by the DPDP Act and the IT Act: access limited to named people with two-step sign-in, encrypted connections, and providers with recognised security programmes. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
If a personal data breach occurs, we will inform the Data Protection Board of India and affected individuals, and report cyber incidents to CERT-In, in the manner and within the time the law requires.
Your rights
Under the DPDP Act you have the right to:
- get a summary of the personal data we hold about you and how we process it;
- have it corrected, completed, updated or erased;
- withdraw your consent;
- have your grievances addressed; and
- nominate someone to exercise your rights if you die or become unable to.
To use any of these rights, email admin@loopnexa.net. We may ask you to confirm your identity first. We will respond within the time the law sets. Some requests may be limited where the law requires us to keep data.
Your duties
The DPDP Act also asks you to give accurate information, not to impersonate anyone, not to hide material information, and not to file false or frivolous complaints. Please only send us personal data about other people if you are allowed to share it.
Children
This website, our form and our services are for organisations and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us their details, contact us and we will delete them.
When we work for our clients
When we build or run software for a client, the client decides what personal data its system processes and why. In that role, we act as a Data Processor on the client's instructions and under our written agreement with them. If your data is in a client's system, please contact that organisation first; we will help them respond.
Other websites
This site links to websites we do not control, such as WhatsApp, app stores and government portals. Their own privacy notices apply.
Changes to this notice
We may update this notice as our services, the law or our providers change. The version and effective date at the top show the latest version. Where a change is significant and we have your contact details, we will tell you.
Grievance officer and contact
For any question, request or complaint about your personal data, contact our grievance officer at admin@loopnexa.net, or write to Loopnexa, Patna, Bihar, India.
If you are not satisfied with our response, you may complain to the Data Protection Board of India after first raising it with us.
This notice is published in English. Where a translation is provided, the English version prevails.