Last updated: 29 July 2026
ResioX Technologies Private Limited (“ResioX,” “we,” “us,” or “our”) operates ResioX — The Research Exchange, a platform connecting verified researchers with corporates, communities, and collaborators (the “Platform”). This Privacy Policy explains what personal data we collect from users of the Platform, why we collect it, how long we keep it, and what rights you have over it.
By creating an account or otherwise using the Platform, you agree to the collection and use of information as described in this Policy.
We collect the following categories of personal data, depending on how you use the Platform:
Identity & contact information. Full name, email address, phone number, and (for corporate accounts) organisation name and registered address.
Professional details. Institution or organisation, designation, qualifications, years of experience, research domain and skill tags, publications, education and work experience history, and LinkedIn / ORCID / Google Scholar profile links you choose to add.
Platform activity data. Projects and training requirements you post or apply to, proposals you submit or receive, milestone and deliverable records, messages exchanged with other users through the Platform, ratings and reviews, and Reviewer Board applications and review reports.
Payment information. We do not store your card, UPI, or bank account details ourselves. Payments are processed by Razorpay, our third-party payment gateway partner; we retain records of the transaction (amount, status, and a payment reference), not your raw payment instrument details. For manual bank transfers, we record the bank reference number you or our admin team provides for reconciliation.
Documents you upload. Verification documents (e.g. identity or institutional proof), CVs, NDAs, Freelancer Agreements, Reviewer Board Agreements, and any other files you upload in connection with a project, training engagement, or review.
E-signature & audit data. When you electronically sign a contract on the Platform, we record your typed legal name, the IP address the signature was made from, and a timestamp, along with a cryptographic hash of the signed document. This data is captured to make the signature legally attributable under Indian law (see Section 5) and is retained for as long as the underlying contract is retained (see Section 3).
Device & technical data. IP address, browser and device information, and a push-notification token if you enable browser or app notifications.
We use the data described above to:
Operate the Platform. Create and manage your account, match you with relevant projects or training opportunities, display your public profile to other users where applicable, and moderate content in accordance with our community standards.
Send notifications. We send transactional emails (via Resend) for events like verification status, proposal updates, milestone reminders, and contract actions; SMS messages (via MSG91) for OTP verification and critical security alerts; and browser/app push notifications (via Firebase Cloud Messaging) for time-sensitive updates such as new messages or contract deadlines, if you have granted notification permission.
Generate and execute contracts. We use your name, typed signature, IP address, and timestamp to generate NDAs, Freelancer Agreements, and Reviewer Board Agreements, and to produce a signed PDF with an embedded audit record once all parties have signed.
Process payments. We share the minimum information necessary (your name, email, phone, and the amount due) with Razorpay to generate a payment link or process a subscription charge. Razorpay’s own privacy policy governs how it handles your payment instrument details.
Comply with legal and tax obligations, including generating GST invoices for payments made on the Platform.
We do not sell your personal data to third parties.
Active accounts. We retain your data for as long as your account remains active and you continue to use the Platform.
Deleted accounts. If you delete your account, it is immediately deactivated and your session is revoked. Your personal data (name, email, phone, avatar, username, uploaded profile documents and CV) is then permanently anonymized 30 days after deletion. This 30-day window exists to let you recover from an accidental deletion request and to allow us to complete any in-flight financial reconciliation tied to your account.
Contracts and payment records. Signed contracts (NDAs, Freelancer Agreements, Reviewer Board Agreements), payment records, and GST invoices are retained for 7 years, in line with Indian tax and contract-limitation record-keeping requirements, even after the underlying account has been anonymized.
Audit logs. System audit logs (records of who did what and when on the Platform) are retained for 3 years for security and dispute-resolution purposes.
Where your personal data is anonymized rather than deleted outright, this is because other users’ records (a signed contract, a released payment, a completed project) legitimately still reference the same underlying account, and removing the row entirely would corrupt those other users’ own records. Anonymization replaces your identifying details while preserving the historical transaction.
Right to access. You can view most of the personal data we hold about you directly from your account dashboard and profile settings at any time.
Right to correction. You can update your profile, contact details, and professional information yourself from your account settings.
Right to delete your account. You can request account deletion from your account settings. This triggers the 30-day soft-delete and anonymization process described in Section 3.
Right to withdraw consent for optional notification channels (e.g. browser push) at any time, by revoking notification permission in your browser or device settings, or by disabling a specific SMS/email trigger where the Platform offers that option.
To exercise any of these rights, or if you have questions about your data that aren’t answered above, contact us at support@resiox.com.
Electronic signatures collected on the Platform are legally binding under Section 3A of the Information Technology Act, 2000, as amended by the Information Technology (Amendment) Act, 2008. Electronic records and the associated audit trail (typed name, IP address, timestamp, document hash) are maintained to satisfy the evidentiary requirements of that Act.
Our collection, storage, and processing of personal data is also governed by the Digital Personal Data Protection Act, 2023 (DPDPA), India’s primary personal data protection legislation, to the extent it applies to the Platform’s processing activities.
This Privacy Policy and your use of the Platform are governed by the laws of India.
ResioX Technologies Private Limited
Email: support@resiox.com
If you have any questions, concerns, or complaints about this Privacy Policy, please reach out to us at the email address above.