Privacy Policy
Last updated: 10 October 2026
1. Who we are
Norexis Technologies Private Limited ("Norexis", "we", "us" or "our") operates Norexis, an energy identity platform that helps consumers manage home electricity, solar systems, battery storage and electric vehicles from a single account.
This policy explains how we process personal data when you use the Service, as defined in our Terms of Service.
We do not knowingly process personal data of anyone under 18. If you believe a child has provided us personal data, contact privacy@norexis.ai and we will delete it.
2. Personal data we collect and why
Depending on how you use the Service, we collect or generate the personal data described below for the stated purposes.
| Personal data | Purpose |
|---|---|
| Personal dataAccount and contact information: your name, email address, mobile number and selected interests | PurposeManage your account or early-access request and communicate with you |
| Personal dataAuthentication and device information: login and verification records, session identifiers, device details and notification tokens | PurposeSign you in, secure your account and deliver notifications |
| Personal dataEnergy asset and relationship information: asset identifiers (such as consumer numbers, vehicle registration numbers and equipment serial numbers), specifications, installation address or location, ownership or management relationships and access permissions | PurposeOrganise your energy profile |
| Personal dataDocuments and extracted information: files you upload (such as bills, invoices, warranty certificates, ownership documents and installation records), their metadata and information extracted from them | PurposeOrganise your records and support processing and verification |
| Personal dataEnergy, billing and service records: energy usage or generation, bill amounts, payment status, maintenance history, warranties and related dates | PurposeProvide tracking, reminders and insights |
| Personal dataVerification and generated insights: verification records, supporting evidence, calculations and other outputs derived from your information | PurposeProvide the features you use. Optional ratings or trust scores require the separate consent described in Section 4 |
| Personal dataConsent and sharing records: your permissions, consent choices, withdrawals and access records | PurposeManage sharing and keep evidence of your choices |
| Personal dataCommunications and technical information: enquiries, support requests, grievances, IP addresses and usage or security logs | PurposeRespond to you, and operate and protect the Service |
| Personal dataBusiness or contributor information: where applicable, professional contact details, business identifiers and contributions to asset installation, servicing or verification | PurposeManage those interactions |
Cookies. We use only cookies that are strictly necessary for the Service to work, such as keeping you signed in. We do not use analytics, advertising or tracking cookies.
What you should not share. We do not need payment-card details, bank credentials, Aadhaar numbers or biometric data. Please do not include them in uploads or messages. If a document contains them, we may ask you to replace it or may remove it from the Service; we do not edit stored documents.
3. Consent and service communications
Where we rely on consent, we explain what personal data we need and the specific purposes for which it will be used before asking for your consent. We may also process personal data where applicable law authorises processing without consent.
We use your contact details to send communications necessary for the features you use, such as account and security notices, bill reminders, service reminders, and notifications about AMC, warranty or insurance expiry dates recorded in your account.
Promotional offers and partner marketing are separate from these service communications. If we introduce marketing communications, we will ask for a separate, optional opt-in. Declining marketing will not prevent you from using the core service.
You may withdraw consent by contacting privacy@norexis.ai or using account controls where available. Withdrawal does not affect the lawfulness of earlier processing. We will stop the processing concerned unless continued processing is required or authorised by applicable law. Features that depend on that processing may become unavailable.
4. Optional future services
If we introduce optional energy identity ratings, trust scores or similar assessments, we will explain the data used, the purpose and intended use, and obtain your specific consent before processing your data for that assessment.
Before sharing your personal data, profile, rating or score with a business for an optional service, we will identify the business, explain what information will be shared and why, and ask for your specific consent.
Accepting this Privacy Policy does not by itself authorise these future assessments, business disclosures or marketing communications.
5. Sharing
We do not sell, rent or trade your personal data. We do not use your personal data for marketing or partner promotions without your separate, explicit consent. We share personal data only in the circumstances described below.
- With service providers who host, secure, support or send communications for the Service, under contracts that restrict their use of the data.
- At your direction, when you share a document or your profile through a feature of the Service.
- With businesses you choose to engage with, after we explain the information to be shared, the recipient and the purpose, and obtain your specific consent.
- For legal reasons, where disclosure is required or authorised by applicable law, a court or a government authority.
- In a business transfer, such as a merger, acquisition or restructuring, where the recipient continues to protect the data as described in this policy.
Recipients may retain copies of information you choose to share. Revoking access in Norexis cannot remove copies they have already downloaded.
6. Storage and security
We use service providers to store and process personal data and operate the Service. Where automated document reading is available, documents may be processed using automated tools to extract information.
We use reasonable technical and organisational safeguards to protect personal data.
Our service providers may process personal data in India or other countries, subject to applicable legal requirements and restrictions.
If a personal data breach occurs, we will notify affected users and authorities as required by applicable law.
7. Retention and deletion
We retain personal data for as long as necessary for the purposes explained to you or as required or authorised by applicable law. When those purposes no longer apply, or you withdraw consent, we will erase the data unless continued retention is required or authorised by applicable law. Requests for deletion are handled subject to applicable legal requirements.
8. Your rights
The Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 commence in phases. Subject to their commencement and applicable conditions, you may:
- obtain a summary of your personal data we process and our processing activities, and information about the organisations with which we have shared it and the personal data shared, subject to applicable exceptions;
- ask us to correct, complete or update your personal data;
- ask us to erase your personal data;
- seek redressal of your grievances (Section 9); and
- nominate another individual to exercise these rights in the event of your death or incapacity.
Withdrawal of consent is covered in Section 3.
To make a request, email privacy@norexis.ai. We may ask for information needed to verify your identity before acting, and may decline a request where applicable law permits.
9. Contact and grievances
For privacy questions or requests, contact privacy@norexis.ai.
For grievances, contact our Grievance Officer:
Rosin Banu, Grievance Officer
Norexis Technologies Private Limited
Email: grievance@norexis.ai
We handle privacy requests and grievances within applicable legal timelines. Where the relevant statutory provisions and procedures are in force, you may approach the Data Protection Board of India after exhausting our grievance process.
10. Changes to this policy
We may update this policy to reflect changes to the Service, our processing or applicable law. We will publish the revised version with a new date and notify you of significant changes by email or in the Service.
If we introduce a new processing purpose that requires consent, we will explain it and obtain that consent before beginning the processing. Continued use of the Service does not by itself provide consent to a new purpose.