This Privacy Policy describes how Orbitnexa Technologies Pvt Ltd (“Orbitnexa”, “we”, “us”) collects and processes personal data through inferagen.ai (“the Service”) under India's Digital Personal Data Protection Act, 2023 (“DPDP Act”).
1. Data we collect
- Form submissions — name, work email, phone, lab name, role, test types, and sample volume submitted via demo, contact, and lead-magnet forms.
- Account data — for customers, the data needed to provision and operate the Service (organisation, users, audit logs).
- Genomic data — sequence reads, variant calls, interpretations, and reports processed under a signed Data Processing Agreement.
- Analytics — pages visited, referrer, device, and coarse geography. We use privacy-first analytics where possible.
2. Lawful basis
We process personal data on the basis of consent (DPDP Act §6), contractual necessity, and legitimate interest as permitted under the DPDP Act for clearly identified operational purposes.
3. Your rights
- Right to access, correction, completion, and erasure
- Right to grievance redressal
- Right to nominate (in case of incapacity or death)
- Right to withdraw consent at any time
Exercise any of these by emailing privacy@inferagen.ai.
4. Subprocessors
We maintain a current list of subprocessors who help us operate the Service. See the Security & Compliance page for the latest list. By default, no genomic data leaves India.
5. India data residency
Production data is stored in AWS Mumbai (ap-south-1). Cross-border transfer happens only where the customer explicitly opts in.
6. Retention
Marketing form submissions are retained for 24 months. Account data is retained for the life of the contract plus 90 days. Genomic data retention is governed by the customer DPA.
7. Data Protection Officer
DPO: privacy@inferagen.ai. Postal: Workafella Cyber Crown, HiTech City, Madhapur, Hyderabad, Telangana 500081, India.
8. Updates
We will notify customers of material changes by email or in-app notification. The current version is dated above.