Home›Privacy Policy

Privacy Policy

Last updated: October 4, 2026

1. Introduction and Who We Are

NEXOMATIC ("we", "our", "us") is a brand of Hasmita Agriservices Private Limited, 217/A, Sathy Road, Ganesh Nagar, Revenue Nagar, Saravanampatti, Coimbatore, Tamil Nadu – 641035, India. For the purposes of India's Digital Personal Data Protection Act, 2023, Hasmita Agriservices Private Limited is the data fiduciary for the personal data described here.

This Privacy Policy explains how we collect, use and protect your personal information when you use the NEXOMATIC Smart Home mobile application (the "App"), our connected smart home hardware, and our website nexomatic.in (the "Website") — including website accounts, orders, enquiry and lead forms, dealer applications and the website chat. By using the App, the hardware or the Website, you agree to the collection and use of information as described in this policy.

2. Information We Collect

2.1 Account Information

Email address (for login and notifications)
Username and password (stored securely with Firebase Authentication)
Phone number — for support call-backs, orders and service verification

2.2 Device Information

Smart hub device identifiers (network MAC address)
Device status (online/offline, firmware version, uptime)
Device configurations (names, types, schedules, scenes)
Power consumption data (wattage, kWh, daily/monthly usage)
Sensor readings (temperature, humidity, smoke, motion, door status)

2.3 Location Data

Used only when you turn on geofencing
Your live location stays on your phone
The home location and radius you set for a geofence are stored with your account, so arrival and departure automations work
Background location access is required for geofencing to work when the App is closed

2.4 Audio Data

Collected only when Music Reactive Mode is activated by the user
Used to capture ambient sound for real-time light synchronization with smart bulbs
Processed locally on the device — never recorded, stored, or transmitted

2.5 Usage Data

App interaction patterns (for improving user experience)
Error logs and crash reports (via Firebase Crashlytics)
Device command history (for diagnostics and troubleshooting)

2.6 Website

Website account: name, email address, phone number and password (stored hashed), or your Google sign-in if you choose it
Orders: the items you buy, delivery address, phone number and payment status (card and UPI details are handled by Razorpay, not stored by us)
Enquiry, demo and lead forms: name, phone number, email address, city and your message
Dealer applications: business name, owner name, phone number, email address and business details
Website chat: the messages you type, and any name and phone number you give for a call back
Cookies and analytics — see section 8

3. How We Use Your Information

Data	Purpose
Account info	Authentication, account management, notifications
Device data	Real-time control, monitoring, automation, energy tracking
Location	Geofencing automation (arrival/departure actions)
Audio	Music-reactive smart lighting (local processing only)
Sensor data	Safety alerts (smoke, gas, intrusion), automation rules
Usage data	App improvement, bug fixes, crash resolution
Website data	Processing and delivering orders, replying to enquiries and call-back requests, reviewing dealer applications, and (only with your consent) measuring website use and our ads

4. Data Storage, Location & Security

Where your data is stored. Your data is stored on servers in India (Mumbai) and on Google Firebase (United States / Singapore).

We protect your data with the following measures:

Encryption in transit — traffic between the app, our servers and your hub is encrypted in transit (TLS). On your home Wi-Fi the app can also reach the hub directly using a per-hub password.
Per-device keys — each device has its own key for cloud commands
Hashed authentication — passwords are hashed, never stored in plain text
Anti-replay protection — signed commands carry a timestamp so an old command cannot be replayed later

5. Data Sharing

We do NOT sell or trade your personal data.

Website chat. Messages you type into the chat on nexomatic.in are sent to Anthropic (Claude), which generates the replies, and each conversation — with any name and phone number you give for a call back — is emailed to our team at info@nexomatic.in so we can follow up. Please do not share passwords or payment details in the chat.

We use the following service providers (data processors), who process data only on our behalf and for the purpose listed:

Service	Purpose	Data shared
Hostinger	Our servers in Mumbai, India — main data store, device messaging, firmware updates and the Website	Account info, device data, website data
Google Firebase	Sign-in and crash reports (United States / Singapore)	Account info, crash and error reports
Razorpay	Payments for orders and subscriptions	Payment info (handled by Razorpay, not stored by us)
Amazon (Alexa)	Voice control — only if you choose to link your account	Device and room names, device type, and on/off or open/closed state. See section 6
Anthropic (Claude)	Website chat replies and in-app AI features	The messages and questions you send
Tuya cloud	Only for compatible third-party Wi-Fi or Zigbee devices you add to your account	The state and commands of those devices
Zoho Mail	Email delivery (for example sign-in codes and support replies)	Email address and the email content
Resend	Website email: form confirmations and chat transcripts to our team	Name, email address, phone number and message
Cloudinary	Website image hosting	Images uploaded by our team
Google Analytics, Google Ads	Website analytics and ad measurement — only with your consent	Pages visited, device and browser information, cookie identifiers
Meta Pixel (Facebook / Instagram)	Website ad measurement — only with your consent	Pages visited, device and browser information, cookie identifiers
Spotify	Music playback — only if you link your Spotify account	The access token Spotify issues, and your playback requests

We do not share location data, audio data, or device usage patterns with any third party for their own use. Sensor readings are not shared with Amazon, which is why sensors are deliberately not exposed to Alexa (section 6). We may disclose data where Indian law requires it.

6. Voice Assistants (Amazon Alexa)

Voice control is optional and does nothing until you link your NEXOMATIC account to Amazon Alexa yourself. If you never link it, nothing in this section applies to you and no data reaches Amazon.

6.1 Linking your account

You sign in on a NEXOMATIC page, on our own domain, over our own certificate — your username and password are never given to Amazon
Your password is not stored by that page. What is stored is the access token Amazon presents back to us, and it is stored hashed
Linking is per account. Alexa is offered only the homes your own account is a member of

6.2 What we share with Amazon

Device names and room names, so you can say them out loud
Device type (switch, light, plug, curtain, appliance) and its capabilities
Current state — on or off, curtain position, and whether the device is reachable
Nothing else. No address, no phone number, no payment information

Only devices you can control are shared. Sensors — door and window contacts, motion, presence, light level, vibration — are deliberately withheld, so your sensor readings stay inside NEXOMATIC and your automations keep running on our own hub rather than in a third party's cloud.

6.3 What Amazon shares with us

An access token that identifies your linked account, and the command you asked for (for example "turn on the bedroom light") as a structured instruction
We never receive voice recordings or audio of any kind. What Amazon does with your voice is governed by Amazon's own privacy notice, not this one

6.4 Unlinking

You can unlink at any time, from either side: in the Alexa app, disable the NEXOMATIC skill; or in the NEXOMATIC app, Settings → Alexa → Unlink. Unlinking deletes the stored tokens immediately and voice control stops working the same moment. Devices already discovered may remain listed in your Alexa app until you delete them there — Alexa keeps its own copy of that list and we cannot remove it for you.

7. Push Notifications

The App sends push notifications for:

Emergency alerts — smoke, gas, intrusion detection (critical safety)
Device status — offline alerts, firmware updates available
Automation events — schedule execution, sensor triggers
Subscription — trial expiry, payment reminders

You can manage notification preferences in the App settings. Emergency safety notifications cannot be disabled.

8. Cookies

Essential cookies — needed for the Website to work: keeping you signed in, your cart, and remembering your cookie choice. These are always on.
Analytics cookies (Google Analytics) — help us understand how visitors use the Website. Used only if you accept analytics in the cookie banner.
Marketing cookies (Google Ads, Meta Pixel) — measure whether our ads lead to visits and enquiries. Used only if you accept marketing in the cookie banner.

Analytics and marketing cookies are off until you choose. You can change your choice at any time by clearing this site's data in your browser, which shows the cookie banner again.

9. Your Rights

You have the right to:

Access — view all data associated with your account
Correct — update your account information at any time
Delete — you can request deletion of your account from the app; deletion of all associated data is completed within 30 days
Withdraw consent — turn off optional features (geofencing, music mode) and change your cookie choice
Export — request a copy of your data in a machine-readable format
Grievance redressal — raise a complaint with our Grievance Officer (section 13)

To exercise these rights, contact us at the email below.

10. Data Retention

Account data — retained while your account is active; deleted within 30 days of an account deletion request
Device configuration — retained while the device is registered to your account
Command history — 90 days, then automatically deleted
Raw power and sensor samples — 30 days, then automatically deleted
Notifications — 60 days, then automatically deleted
Daily energy totals — kept while your account is active, so your bill history and reports keep working
Geofence settings — the home location and radius you set are kept with your account until you change or delete them; your live location is not stored
Audio data — never stored; processed locally in real-time only
Website orders — kept for as long as Indian tax and accounting law requires
Enquiries, dealer applications and chat records — kept while we need them to respond and follow up, and deleted on request

11. Children's Privacy

The App is not intended for use by children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the App or the Website after changes constitutes acceptance of the updated policy.

13. Grievance Officer

In line with the Digital Personal Data Protection Act, 2023, you can raise any question or complaint about how your personal data is handled with our Grievance Officer. We respond within 30 days.

Name: Sudhagar
Email: info@nexomatic.in
Phone: +91 75500 58208
Address: Hasmita Agriservices Private Limited, 217/A, Sathy Road, Ganesh Nagar, Revenue Nagar, Saravanampatti, Coimbatore, Tamil Nadu – 641035

14. Contact Us

If you have questions about this Privacy Policy or your data:

Email: info@nexomatic.in
App: Settings → Support → Create Ticket
Address: Hasmita Agriservices Private Limited, 217/A, Sathy Road, Ganesh Nagar, Revenue Nagar, Saravanampatti, Coimbatore, Tamil Nadu – 641035