Effective Date: August 9, 2025

Privacy Notice

This notice explains how Nishmira Technologies Private Limited collects, uses, discloses, stores, and protects your personal information when you access Shamixo FM.

1. Introduction

Nishmira Technologies Private Limited ("we," "us," or "our"), incorporated under Indian law, is committed to protecting the privacy of users of Shamixo FM, a Computer-Aided Facility Management (CAFM) Software-as-a-Service platform accessible via web, Android, and iOS applications.

This Privacy Notice explains the collection, use, disclosure, storage, and protection of personal information when using the Service. It applies to facility managers, employees, and authorized personnel of subscribing facility management companies. By accessing the Service, you agree to these practices.

2. Scope of This Privacy Notice

Coverage extends to the Shamixo FM web app, Android app, and iOS app data collection globally, and is designed to comply with GDPR, CCPA, and India's Digital Personal Data Protection Act, 2023 (DPDP Act). Third-party linked services maintain their own separate privacy policies.

3. Information We Collect

Personal Information

  • Account Information: Name, email, phone, job title, employee ID, and organization details.
  • Biometric Data: Fingerprint or facial recognition (processed on-device, not stored on our servers).
  • Payment Information: Billing details processed via Paddle or PayPal.
  • User-Generated Content: Facility records, maintenance schedules, asset details, blueprints, and images.

Usage Data

  • Device Information: IP address, device type, OS, browser type, app version, and device identifiers.
  • Geolocation Data: GPS data (with consent) for field work; approximate location via IP.
  • Interaction Data: Pages visited, features used, time spent, and clickstream data.
  • IoT Sensor Data: Environmental sensors and equipment monitors for real-time monitoring.

Automatically Collected Data

  • Cookies and Tracking: Session management, analytics, and performance optimization.
  • Analytics Data: Aggregated user interaction data for improvements and insights.

4. How We Collect Information

  • Directly from you during account creation, data input, uploads, or support contact.
  • Automatically through web/mobile app usage, cookies, LocalStorage, and Google Analytics.
  • From IoT devices you integrate for real-time monitoring.
  • From third parties such as your organization's super admin, payment processors, and hosting/storage providers.

5. How We Use Your Information

  • Service Delivery: Operating Shamixo FM functionality.
  • Real-Time Monitoring and Analytics: Facility monitoring and automated reports.
  • Predictive Maintenance: Analyzing IoT data for maintenance insights.
  • Account Management: Authentication, subscriptions, and payments.
  • Communication: Service notifications and support responses.
  • Improvement and Development: Usage analysis and feature development.
  • Security and Compliance: Fraud prevention and legal compliance.
  • Personalization: Customized dashboards and reports by role.

6. How We Share Your Information

Your data is not shared with other clients except with the following service providers:

  • GoDaddy — Cloud hosting and storage
  • Cloudflare R2 — User-generated content storage
  • Paddle & PayPal — Payment processing
  • Google Analytics — User interaction analysis

We may also disclose data under other circumstances:

  • Legal Obligations: Court orders, subpoenas, and regulatory requirements.
  • Business Transfers: Mergers, acquisitions, or asset sales (with equivalent protections).
  • With Your Consent: Explicit permission for specific sharing.

Organization data remains isolated from other clients.

7. Data Retention

  • Account and User-Generated Data: Retained during your active subscription.
  • Archived Data: Securely stored and anonymized post-termination for auditing.
  • Deletion Requests: Super admin requests processed within 30 days (legal retention excepted).
  • Payment Data: Managed by third-party processors, not stored beyond transaction needs.
  • Analytics Data: Aggregated, anonymized data may be retained indefinitely.

8. International Data Transfers

Data may be stored or processed outside India (e.g., Singapore via GoDaddy). Safeguards include:

  • Standard Contractual Clauses (SCCs) for jurisdictions without adequate protections.
  • Data minimization — only necessary data is transferred.
  • Industry-standard encryption (TLS 1.3).

EEA, UK, and other regulated regions receive compliant treatment.

9. Your Privacy Rights

Jurisdiction-dependent rights include:

  • Access: Request copies of your personal data.
  • Rectification: Correct inaccurate data.
  • Deletion: Request data removal (subject to legal retention).
  • Portability: Receive data in a structured, machine-readable format.
  • Objection: Object to processing activities.
  • Restriction: Restrict processing in certain circumstances.
  • Withdraw Consent: Revoke consent anytime without affecting prior processing.

Super admins may submit requests via the Shamixo FM interface or by email. A thirty-day response is guaranteed.

10. Cookies and Tracking Technologies

  • Essential Cookies: Session management, authentication, and core functionality.
  • Analytics Cookies: Google Analytics for anonymized interaction data.
  • LocalStorage: User preferences and session data.

Browser settings manage cookie preferences. Disabling essential cookies impairs functionality. Mobile apps use push notifications for CAFM alerts only, without additional tracking.

11. Third-Party Services

Integrated services process data under their own privacy policies:

  • GoDaddy — Server hosting and data storage
  • Cloudflare R2 — Blueprint, image, and file storage
  • Paddle & PayPal — Payment processing
  • Google Analytics — User interaction analysis

Third-party providers adhere to strict data protection standards.

12. Data Security

  • Encryption: TLS 1.3 in transit, AES-256 at rest.
  • Access Controls: Role-based access limiting authorization.
  • Regular Security Audits: Periodic vulnerability identification.
  • Industry Standards: ISO 27001 compliance.

No system ensures complete security; data breaches will prompt user notification per legal requirements.

13. Children's Privacy

Shamixo FM targets professional facility management use and does not knowingly collect data from individuals under 16. Discovery triggers immediate deletion and preventive measures.

14. Changes to This Privacy Notice

Updates reflect changes in practice, law, or features. Material changes prompt email/in-app notification 30 days before taking effect. Updated notices are posted on the web and mobile apps with new effective dates.

15. Contact Us

  • Email: admin@nishmira.com
  • Address: Nishmira Technologies Private Limited, Holding 27, Road 4, Azadnagar, Jamshedpur – 832110, Jharkhand, India

A thirty-day response is guaranteed. Unsatisfied parties may contact their local data protection authority (such as the Data Protection Authority of India or the Information Commissioner's Office).

On This Page

Also see: