Privacy Policy

1. Overview & Scope

GenNexus Tech Solutions LLP (“GenNexus”, “we”, “us”, or “our”), headquartered in Alpharetta, GA, is dedicated to protecting the personal data and confidentiality of candidates, enterprise clients, partners, and site visitors. This Privacy Policy governs data collection, storage, processing, and disclosure practices across gennexustech.com.

2. Information We Collect

• Candidate Data: Resumes, employment history, technical skill evaluations, contact details, certifications, and target compensation provided during role applications.
• Enterprise Inquiries: Corporate email addresses, organization names, job descriptions, technical requirements, and project scope details submitted via inquiry forms.
• Technical & Telemetry Data: IP addresses, browser user-agents, referring pages, and session diagnostics collected automatically to maintain system security and uptime.

3. Purpose of Processing

We process information solely to facilitate technical talent acquisition, conduct external coding evaluations, fulfill Master Services Agreements (MSAs), comply with state and federal employment regulations, and protect against security incidents.

4. Legal Basis for Processing (GDPR Article 6)

5. International Data Transfers & Cross-Border Safeguards

GenNexus Tech Solutions LLP operates across North America and collaborates with international technology delivery centers, primarily in the United States and India. When personal data is transferred across international borders, we ensure adequate security measures and legal protections:

• European Economic Area (EEA) Transfers: We execute Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring equivalent data protection levels.
• India Cross-Border Transfers: We adhere strictly to Chapter V of India's Digital Personal Data Protection Act 2023 (DPDPA) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011.

6. Data Protection & Zero Unauthorized Sharing

GenNexus does not sell, rent, or lease personal candidate profiles or client information to third-party data brokers. Candidate resumes are shared with prospective employers strictly upon candidate authorization and qualification matching.

7. Security Protocols & Data Breach Notification

All data in transit is encrypted using modern TLS 1.3 cryptographic suites. Access to internal candidate repositories is restricted under role-based access control (RBAC), multi-factor authentication, and monitored with continuous security audit logging.

Statutory Breach Notification: In the event of a verified personal data breach that compromises or risks the confidentiality or integrity of personal data, GenNexus Tech Solutions LLP will promptly notify affected Data Principals and relevant supervisory authorities—including the Data Protection Board of India (DPBI) pursuant to Section 8(6) of the Digital Personal Data Protection Act (DPDPA 2023) and competent international data protection regulators—without undue delay and in accordance with statutory reporting timelines.

8. Data Retention Schedule & Purpose Limitation

In strict compliance with India's DPDPA 2023 and GDPR Article 5(1)(e), GenNexus Tech Solutions LLP retains personal data only for as long as necessary to fulfill the specific operational and talent-matching purposes for which it was gathered, unless a longer retention period is mandated by law:

• Candidate Resumes & Portfolios: Retained for a maximum period of twenty-four (24) months following submission, allowing our talent acquisition team to evaluate profiles against active and upcoming client requirements. Candidates may request immediate, irreversible erasure at any time prior to this expiration.
• Client Inquiries & Contractual Records: Retained for the active duration of the commercial engagement plus the statutory limitation period required for tax, audit, and legal defense (typically up to seven (7) years).
• Opt-Out & Suppression Registries: Minimal identifiers (hashed or masked email records) are maintained indefinitely solely to enforce unsubscribe preferences and honor statutory non-contact obligations under CAN-SPAM, DPDPA, and GDPR.
• Edge Telemetry & Security Logs: IP address logs and security telemetry are retained for no more than ninety (90) days, after which they are permanently overwritten or aggregated anonymously.

9. Children's Privacy (COPPA Notice)

Our talent acquisition and IT consulting services are exclusively directed to adult professionals and enterprise commercial entities. We do not knowingly solicit, collect, or process personal data from children or individuals under the age of 18. If we discover that personal data from a minor has been inadvertently submitted, we take immediate corrective steps to permanently delete the records from our systems.

10. Data Subject Rights & Deletion Requests

Under the California Consumer Privacy Act (CCPA), the European General Data Protection Regulation (GDPR), India's Digital Personal Data Protection Act (DPDPA 2023), and applicable United States privacy statutes, you hold statutory rights regarding your personal records:

• Right to Access & Portability: Request a full copy of personal and resume data maintained in our records.
• Right to Erasure / Deletion: Request the irreversible deletion of your resume, profile, and contact history.
• Right to Rectification: Update or correct inaccurate credentials or professional details.
• Right to Opt-Out: Withdraw consent for talent pool representation at any time.
• Right to Nominate (DPDPA 2023, Section 14): Designate an authorized representative to exercise your data rights in the event of death or incapacity.

To submit a formal deletion or data access request, email our compliance team directly at contact@gennexustech.com with the subject line “Data Deletion Request” or “Data Access Request”. We verify identity and fulfill all legitimate requests within thirty (30) business days at zero charge.

11. Grievance Officer (India & Global Compliance)

Pursuant to India's Information Technology Act 2000, the IT Rules 2011, and the Digital Personal Data Protection Act (DPDPA) 2023, the designated Grievance Officer for GenNexus Tech Solutions LLP is:

12. Corporate Contact & Compliance Desk

For any privacy questions, regulatory inquiries, or data governance requests, please contact our legal desk in Alpharetta: