Data Protection Notice

Applicable NexSara Entity

If you use NexSara in India, the applicable NexSara entity is Fiidus Solutions Private Limited, which operates the NexSara platform and brand in India.

For users outside India, unless otherwise stated, the applicable NexSara entity is NexSara LLC.

Last Updated: June 6, 2026

This Data Processing Notice (“DPN”) supplements the NexSara Privacy Policy and governs the processing of personal data in connection with NexSara platform services.

1. Roles of the Parties

For purposes of applicable data protection laws:

NexSara acts as a data controller for:

• Platform account information
• Verification data
• Platform operations and security

Service Providers may act as independent data controllers when processing customer data obtained through the platform.

Business entities using the NexSara platform may provide information relating to employees, contractors, representatives, administrators, or other authorized users. NexSara processes such information for account administration, verification, security, compliance, communications, and marketplace operations in accordance with the NexSara Privacy Policy.

2. Data Processing Principles

NexSara processes personal data in accordance with:

• Applicable data protection laws
• Internal security procedures
• Contractual obligations and relationships with users, vendors, service providers, and business partners.

3. Security Measures

NexSara implements reasonable administrative, technical, and organizational safeguards, including:

• Role-based access controls
• Secure hosting infrastructure
• Encryption where appropriate
• Logging and monitoring systems

4. International Data Transfers

NexSara operates from the United States.

Personal data may be transferred internationally for purposes of platform operations.

Where required, NexSara implements recognized legal safeguards for international data transfers.

NexSara may use trusted third-party infrastructure, communications, analytics, security, payment, customer support, and artificial intelligence service providers to support platform operations and related processing activities.

5. Data Subject Rights

Users may exercise applicable privacy rights in accordance with the NexSara Privacy Policy, including rights that may be available under applicable privacy and data protection laws based on the user's jurisdiction.

6. Relationship to Privacy Policy

This Data Processing Notice ("DPN") supplements and should be read together with the NexSara Privacy Policy.

In the event of conflict, the Privacy Policy governs.