Data Policy

1. Overview

This Data Policy explains how Ploxi Consult ("Ploxi", "we", "us") collects, uses, shares, and protects personal data when you use the Ploxi Earth platform at www.ploxi.earth (the "Platform").

We act as the Data Fiduciary for this personal data under India’s Digital Personal Data Protection Act, 2023 ("DPDP Act"). We have written this policy in plain English; if anything is unclear, please ask us.

2. Who we are and how to reach us

Ploxi Consult, Embassy Golf Links Business Parks, Domlur, Bengaluru, Karnataka, India.

For any question, request, or grievance about your personal data, contact our support team at support@ploxi.earth or +91 77959 34859.

3. Data we collect

Depending on how you use the Platform, we may collect:

• Identity and contact details: your name, email address, phone number, and role or designation.
• Organisation details: your company’s name, industry, size, location, and identifiers such as a GST number, as provided in registration and onboarding forms.
• Account and authentication data: your login email and password (passwords are stored only in hashed form by our authentication provider) and one-time passwords used for verification.
• Registration and enquiry content: the information you submit through corporate, cleantech, climate-finance, carbon-market, and similar forms.
• Calculator inputs and results: the data you enter into the GHG Calculator and the results it generates, so we can show your history in your portal.
• Usage and technical data: pages visited, actions taken on the Platform, timestamps, and device and browser information.
• Communications: records of emails and notifications we send you (such as account and onboarding emails), and messages you send us.

4. Why we process your data

We use personal data to operate and improve the Platform, specifically to:

• create and administer your account and give you access to the correct portal;
• review and process registrations, vendor onboarding, and agreement workflows, including scheduling introductory meetings;
• run the tools you use (such as the GHG Calculator) and save your inputs and results so they are available to you later;
• respond to your enquiries and requests, and connect you with the vendors, consultants, or programmes you ask about;
• send you service-related emails (such as verification codes, reset links, and onboarding updates);
• keep the Platform secure, prevent fraud and abuse, and comply with legal obligations; and
• understand, in aggregate, how the Platform is used, so we can improve it.

5. Our legal bases

We process personal data where you have given your consent (for example, by submitting a form), where processing is necessary to provide the services you have requested, and for legitimate uses recognised by the DPDP Act, such as security, fraud prevention, legal compliance, and the operation of our business.

Where processing is based on consent, you may withdraw it at any time by contacting us. Withdrawal does not affect processing that has already occurred.

6. How we share data

We do not sell personal data. We share it only as follows:

• Service providers: we use trusted processors under contractual obligations to run the Platform, including cloud hosting and databases (Supabase and Vercel), email delivery (Brevo), electronic-signature services used to send agreements for signature, and meeting scheduling (Calendly).
• Counterparties you choose: when you submit a registration or enquiry that is meant for a vendor, corporate, or programme partner, we share the submitted information with that counterparty so they can respond to you.
• Legal requirements: where disclosure is required by law, regulation, or a valid order of a court or authority.

All processing happens under reasonable safeguards, and cross-border transfers, where any occur, are made in compliance with applicable law.

7. Cookies and local storage

We use the minimum storage needed to run the Platform: sign-in session identifiers so you stay logged in, and small preferences (such as portal status cached for faster loading) stored in your browser’s local storage.

We use Vercel Analytics to measure aggregate usage of the Platform. It does not build individual advertising profiles, and we do not use advertising cookies.

You can clear cookies and local storage through your browser settings at any time; some features (such as staying signed in) may stop working until you sign in again.

8. How long we keep data

We keep personal data only as long as needed for the purposes described above and to meet legal, accounting, and dispute-resolution obligations.

When you close your account or ask us to erase your data, we delete or anonymise it, except where we are required to retain specific records by law.

9. How we protect data

We apply reasonable technical and organisational safeguards, including encryption of data in transit, strict row-level access controls on our database, separation of privileged (server-side) access from public access, and least-privilege access for our team.

No method of transmission or storage is perfectly secure. If you suspect a security issue involving the Platform, please tell us immediately at support@ploxi.earth.

10. Your rights

Under the DPDP Act, you have the right, subject to its conditions, to:

• access a summary of the personal data we hold about you and how we process it;
• correct inaccurate or incomplete data;
• erase your data (except what we must retain by law);
• nominate another individual to exercise your rights if of an age or condition the Act recognises; and
• withdraw consent and raise a grievance with us.

To exercise any right, email support@ploxi.earth from your registered address (or tell us through your account contact). We will verify your identity and respond within the timelines required by law; where none is prescribed, we aim to respond within 30 days.

11. Children

The Platform is intended for businesses and professionals and is not directed at anyone under 18. We do not knowingly collect the personal data of children. If you believe a child’s data has reached us, contact us and we will delete it.

12. Changes to this policy

We may update this Data Policy as the Platform evolves. We will notify registered users of material changes by email or through the Platform before they take effect. The "Last updated" date above always reflects the current version.

13. Contact

Ploxi Consult, Embassy Golf Links Business Parks, Domlur, Bengaluru, Karnataka, India. Email: support@ploxi.earth. Phone: +91 77959 34859.