Privacy Policy

1. Introduction

This Privacy Policy describes how CodeYantra Technologies handles information in connection with Nexafield, a business software platform used by pharmaceutical and field-driven businesses to manage field-force, reporting, customer and order-related operational workflows.

Nexafield is primarily used by organizations (“customer organizations”) and their authorized users, such as company administrators, field managers and field representatives. A customer organization using Nexafield may provide or manage information relating to its own employees, field users and business relationships (such as doctors, chemists and stockists) within its Nexafield workspace. This Privacy Policy explains how CodeYantra Technologies, as the provider of the Nexafield platform, handles that information — it does not make CodeYantra Technologies the owner of business data that a customer organization enters into Nexafield.

2. Information We Collect

The information handled through Nexafield depends on how a customer organization and its authorized users use the platform. The categories below reflect what Nexafield currently supports.

A. Account Information

• Name
• Email address
• Phone number, where provided
• Role and account/employee identifiers
• Account status (e.g., invited, active, suspended)

B. Company Information

• Company name and company profile information
• Billing email and subscription/licence information (plan, purchased seats, subscription period, licence status)
• Company administrator details
• Where submitted for verification purposes, business documents such as a GST certificate, company registration certificate, drug licence, authorized signatory identification, board resolution or similar business documentation

C. Field and Business Operations Data

Where used by a customer organization, this may include:

• Daily field visit reports (DCR) — visit type, customer name, visit date, check-in/check-out time, notes and status, and, where submitted, a check-in photo
• Doctor, chemist and stockist records — name, contact details, address and, where applicable, licence/registration numbers such as a drug licence number or GSTIN, related verification photos, and verification/approval status
• Orders, order items and invoice-related information
• Product and pricing information configured by the company
• Expense and tour records submitted by field users

Much of this information is entered, uploaded and managed by the customer organization and its authorized users as part of their own operational workflows.

D. Device and Security Information

For account roles where device-based access control currently applies (Medical Representative / MR accounts), Nexafield registers a hashed device identifier generated by the field application, together with device platform, device name and app version, in order to associate the account with one authorized device. Nexafield does not collect raw identifiers such as an IMEI or MAC address, and does not access contacts, SMS or call logs. Security-related events, such as device registration or an administrator-initiated device reset, may be recorded in an internal audit log along with the associated account and timestamp.

E. Location Information

Certain field-operation records — such as a daily field visit report (DCR) or a business registration submitted through the field application — may include GPS coordinates associated with that specific record, where provided by the submitting device and permitted by the field user. Nexafield does not currently perform continuous or background location tracking through this web application; any location capture depends on the device/app used and the permissions granted on that device.

F. Payment & Subscription Information

To manage subscriptions, Nexafield/CodeYantra Technologies may maintain business transaction information such as an order/payment reference, selected plan, seat quantity, subscription period and payment status, along with status information received from the payment provider. Where online payments are enabled, Cashfree is the payment gateway currently used to process those transactions.

Sensitive payment credentials — such as full card numbers, CVV, UPI PIN or your banking password — are entered directly into the payment provider’s checkout environment and are handled by that provider. Nexafield is not intended to store such credentials.

3. How Information Is Collected

• Information supplied during company or account registration
• Information entered by company administrators
• Information entered by authorized employees and field users in the course of using Nexafield
• Device and security information generated automatically during authorized access, for account roles where device-based access control applies
• Transaction status information received from payment providers
• Technical details such as IP address and user agent, recorded when a user accepts applicable platform policies, for compliance record-keeping
• Support communications sent to our team

4. How We Use Information

• Creating and maintaining company accounts
• Providing Nexafield’s functionality to customer organizations and their authorized users
• Managing authorized users, roles and permissions
• Enabling field-operation and business workflows within a company’s workspace
• Processing subscriptions and maintaining licensing/access status
• Providing customer support
• Securing accounts and detecting misuse
• Troubleshooting and maintaining service reliability
• Meeting applicable legal and compliance obligations

We do not use information collected through Nexafield for advertising profiling, and we do not sell customer data.

5. Customer Organization & Authorized Users

Company administrators may create and manage accounts and business information for their organization within Nexafield. Authorized users may access information according to the permissions and workflows made available to their role.

Customer organizations are responsible for ensuring they have appropriate authority and permission to enter employee, customer or other business-related information into Nexafield, and for administering access within their own workspace.

6. Doctor, Chemist, Stockist & Business Data

Nexafield allows a customer organization to maintain records relating to doctors, chemists, stockists and other business relationships as part of its own operational workflows, including basic contact details and, where applicable, licence or registration information and related verification documents.

Such records are generally provided and managed by the customer organization and its authorized users as part of their business activity. Nexafield does not independently source or collect these records from public directories or third parties.

7. Data Sharing & Service Providers

Operating Nexafield requires certain information to be processed by service providers that support the platform, including:

• Supabase — backend database, authentication and related infrastructure
• Cashfree — online payment processing, where enabled
• Resend — delivery of transactional emails (e.g., account setup and password-related notifications)
• Vercel — application hosting and deployment infrastructure

We do not maintain an exhaustive public list of every internal tool used to operate Nexafield; the providers above reflect the ones confirmed in the current production configuration.

Information may also be disclosed where reasonably necessary to comply with applicable law, respond to lawful requests, protect the security of users or the platform, investigate suspected fraud or misuse, or enforce our applicable terms. Because operating Nexafield necessarily involves such service providers, we do not represent that information is never shared with anyone.

8. Veltrix and the CodeYantra Ecosystem

Veltrix is a technology platform/brand of CodeYantra Technologies. Nexafield may use selected Veltrix platform capabilities for services such as licensing, secure access, platform coordination or payment-integration workflows where applicable.

Veltrix is not presented as a separate payment gateway or financial institution. Where payments are processed by a third-party payment provider such as Cashfree, payment credentials are handled through that provider’s own payment environment as applicable, not by Veltrix.

9. Data Security

CodeYantra Technologies uses reasonable technical and organizational measures appropriate to the service, including authenticated access, role-based permissions, database access rules that scope each company’s data to its own account, hashed device identifiers for device-based access control where applicable, and encrypted transport for data in transit.

No method of electronic transmission or storage can be guaranteed to be completely secure.

10. Data Retention

Information may be retained for as long as reasonably necessary to provide the service, maintain active accounts and subscriptions, meet legitimate business requirements, resolve disputes, maintain transaction and account records, meet legal obligations, and protect the security of the platform. Retention periods may vary by category of information and are not fixed to a single duration across all data types.

11. Account Closure / Data Requests

Organizations and users may contact support@codeyantra.in for privacy-related requests, including correction of account information, account closure, questions about personal information, or deletion requests where applicable.

We cannot guarantee immediate deletion in every case — certain information may need to be retained where required for legitimate business, security, transaction or legal purposes. Because Nexafield is organization-managed, some requests from an employee or field user may need to be coordinated with that user’s company administrator.

12. Cookies / Local Storage / Session Technologies

Nexafield’s web application uses browser local storage to keep authorized users signed in and to cache basic session/account information needed to operate the application. This use is functional and session-related, not advertising-related. Nexafield does not currently use third-party advertising or tracking cookies.

13. Third-Party Links and Services

Nexafield may link to or integrate with third-party services, such as our payment provider. Those third parties’ own privacy practices govern their handling of information, and we encourage you to review their policies where applicable.

14. Children

Nexafield is a business/enterprise platform and is not designed or intended for use by children as a consumer service.

15. International / Infrastructure Processing

Nexafield relies on third-party infrastructure and service providers to operate. Information may be processed or stored on infrastructure operated by those providers, which is not necessarily located in a single jurisdiction. We do not represent that all information is stored exclusively in any one country.

16. Changes to This Privacy Policy

We may update this Privacy Policy as Nexafield evolves or as legal and operational requirements change. An updated policy will be published on this page with a revised “Last updated” date.

17. Contact Us

Nexafield — a product of CodeYantra Technologies.

Website: nexafield.codeyantra.in