Summary: Norexis collects your mobile number and energy asset information solely to provide you with a unified energy management account. We do not sell your personal data. You may download, correct, or request deletion of your data at any time.
Norexis is an energy account platform operated from Kerala, India. We provide consumers with a single account to manage their energy connections, usage history, and related documents.
"Norexis", "we", "us", and "our" refer to the platform operator. "You" refers to any individual who creates a Norexis account or uses our services.
This Privacy Policy is issued in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.
We collect only the personal data necessary to provide our services to you.
| Category | What We Collect | Why |
|---|---|---|
| Contact | Mobile number | Account creation and authentication |
| Profile | Display name (optional, user-provided) | Personalising your account |
| Energy accounts | Utility consumer number, asset details you provide | Linking and managing your energy accounts |
| Energy history | Bill amounts, usage data, payment records | Your energy dashboard and history |
| Documents | Documents you choose to upload | Storing proof of your energy assets |
| Device | Device token for push notifications | Sending you bill and service alerts |
We do not collect email addresses, home addresses, Aadhaar numbers, PAN numbers, or bank account details at this time.
We use your personal data only for the following purposes:
We do not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human oversight.
We process your personal data on the following legal bases under the DPDP Act 2023:
Processing necessary to provide the core service (account management, bill retrieval, asset management) is disclosed in these terms. Only non-essential processing such as marketing communications requires a separate opt-in consent, which you may withdraw at any time without affecting your use of the platform.
Withdrawing consent to the core service processing will require account deletion, as such processing is necessary to provide the service.
We retain your personal data for as long as your account is active and as required by applicable law thereafter.
Following a verified account deletion request, your personally identifiable information will be removed or anonymised within 30 days, subject to any legal retention obligations.
Under the DPDP Act 2023, you have the following rights as a data principal:
To exercise any of these rights, use the tools in your account or contact us at grievance@norexis.in.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encryption of sensitive data at rest and in transit, access controls, and regular security reviews.
Uploaded documents are stored in private, access-controlled storage. They are never publicly accessible. Any link you share to a document is time-limited and expires automatically.
No system is completely secure. If you suspect your account has been compromised, please contact us immediately at grievance@norexis.in.
If you discover a security vulnerability in our platform, please disclose it responsibly to grievance@norexis.in. We will acknowledge receipt within 48 hours.
Our platform is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has created an account, please contact us at grievance@norexis.in and we will promptly investigate and, if confirmed, delete the account.
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes via in-app notice at least 14 days before they take effect.
Continued use of the platform after the effective date of a change constitutes your acceptance of the updated policy. If you do not accept the updated policy, you may request account deletion.
The date of the most recent update is shown at the top of this document. Prior versions are available on request from grievance@norexis.in.
As required by the Digital Personal Data Protection Act 2023 and the Information Technology Act 2000, we have designated a Grievance Officer to address data-related complaints and queries.
Name: Rosin Banu
Email: grievance@norexis.in
Response time: Within 30 days of receiving your complaint
Jurisdiction: Kerala, India
Please include your account identifier and a clear description of your concern when writing to us.
You also have the right to lodge a complaint with the Data Protection Board of India if you are not satisfied with our response.
For privacy-related queries that are not formal complaints:
This is a draft document pending formal legal review before public launch. Version 1.0 — 14 June 2026.