ZenixBio

Privacy Policy

Last updated: September 29, 2026

1. Objective

This Data Privacy Policy (“Policy”) is drafted to describe how ZenixBio (“Platform”, “we”, “us”, or “our”) collects, uses, processes, stores, discloses, and protects Personal Data when Users (“individual”, “you”, “your”) access or use our website and services.

The Platform enables organizations, educational institutions, and companies (“Organizations”) to publish innovative challenges, hackathons, and research competitions, and allows Users to participate by submitting ideas, projects, and solutions.

This Policy provides an overview of ZenixBio’s data protection practices and reflects our commitment to safeguarding Personal Data that we collect from various sources, respecting individual privacy rights, and ensuring transparency in our data processing activities. By accessing or using ZenixBio, you agree to the collection and use of information in accordance with this policy.

2. Scope

This Policy explains how ZenixBio collects, uses, and shares personal data that is provided to us, generated by us, or obtained from other lawful sources. It also describes the legal bases on which personal data is processed and the technical and organizational measures we use to protect such data. In addition, this Policy outlines the rights individuals have in relation to their personal data and provides other relevant information about our data processing practices.

This Policy applies to all personal data processed by the Platform in connection with:

  • Users who create accounts or participate in challenges
  • Organizations that publish challenges or innovation opportunities
  • Visitors who browse the Platform website

3. Applicable Laws and Regulations

ZenixBio complies with applicable data protection laws, including but not limited to:

  • European Union: General Data Protection Regulation (EU) 2016/679 (GDPR)
  • United Kingdom: General Data Protection Regulation (UK GDPR)
  • United States: Applicable federal and state laws, including but not limited to the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), Virginia Consumer Data Protection Act, Colorado Privacy Act, etc.
  • India: Digital Personal Data Protection Act, 2023
  • Canada: Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws
  • Australia: Privacy Act 1988 and Australian Privacy Principles (APPs)

And any other applicable data protection laws.

4. Roles of Processing

In relation to the personal data processed through the Platform in connection with its operations and challenges, both ZenixBio and the Organization shall act as independent Data Controllers, as the term is defined under applicable data protection laws.

Each party shall determine independently the purposes and means of processing personal data and shall be independently responsible for complying with its own obligations under applicable data protection laws and regulations. Accordingly:

  • ZenixBio shall process personal data in accordance with its Privacy Policy.
  • The Organizations shall process personal data in accordance with their own privacy policy.

The parties acknowledge and agree that:

  • ZenixBio and the Organization do not act as joint controllers unless explicitly stated otherwise.
  • Each party is independently responsible for providing any required notices, obtaining consents (where applicable), and responding to data subject rights requests relating to the personal data it processes.
  • Any complaints, queries, or requests regarding personal data processing should be directed to the relevant controller, as identified in their own privacy policy.

5. Collection of Personal Data

We collect only the personal data necessary to operate the Platform and provide challenge participation services, and for the purposes defined under section 6 of this policy. ZenixBio does not process data beyond what is required for such purposes.

5.1 Information Provided by Users

User Account Information

When users register on the platform, we may collect:

  • First name
  • Last name
  • Mobile number
  • Email address
  • Password (stored in encrypted form)
  • User type (School / Undergraduate / Postgraduate / Researcher / Professional)
  • Institution name
  • Course or field of study
  • Graduation year

Organization Account Information

Organizations registering to create challenges may provide:

  • Organization’s name
  • Work email address (business domain)
  • Organization logo
  • Organization description

Challenge Participation Information

When participating in opportunities or submitting projects:

  • Team name
  • Responses to screening questions
  • Project descriptions
  • Uploaded project files
  • Challenge idea submissions
  • Optional attachments or notes

Communications

We collect information you provide when contacting us or interacting with platform support.

Public and Organization Visibility of Submissions

Submissions on the Platform may be visible to those listed below, unless explicitly stated otherwise or marked confidential under specific event rules:

  • ZenixBio
  • The Challenge Hosting Organization
  • Judges or mentors associated with the challenge

The submissions mentioned may include project descriptions, presentation materials, demo videos, or any other details collected by ZenixBio (as described in this section).

5.2 Information from Public Sources

We may collect personal data from publicly available sources where permitted by applicable law. Such sources may include publicly accessible websites, professional profiles, academic publications, or social media platforms.

This may include information such as name, professional affiliation, publicly shared work, or other details that users have made publicly available.

We process such data only for purposes consistent with this Policy and applicable laws.

5.3 Automatically Collected Information

When users access the platform, certain technical information may be collected automatically, including:

  • IP address
  • Browser type and version
  • Device type
  • Operating system
  • Access timestamps
  • Pages visited and actions taken on the platform

This information helps us improve performance, maintain security, and understand platform usage.

6. How We Use Your Information

We use collected information to operate and improve the platform, including to:

  • Create and manage user accounts
  • Verify email addresses and authenticate users
  • Allow organizations to create and publish innovation challenges
  • Allow users to register for challenges and submit projects
  • Enable organizations and judges to review submissions and select winners
  • Display publicly available challenge information and winners
  • Send platform-related notifications and confirmations
  • Monitor platform security and prevent abuse
  • Enforce platform policies and administrative moderation
  • Improve platform functionality and user experience
  • Detect, investigate, and prevent fraud, abuse, or security incidents

We may use publicly available information to verify user profiles, improve platform integrity, or enhance the relevance of opportunities and collaborations.

We may use automated tools, including artificial intelligence systems, to assist in content moderation, analytics, recommendations, and platform improvements. Such processing is conducted in accordance with applicable data protection laws.

7. Lawful Bases for Processing

Depending on the jurisdiction and context, we process personal data based on one or more of the following lawful grounds:

  • Consent: Where permitted by applicable law, we may process personal data based on freely given, informed consent for one or more specific purposes. Individuals may withdraw their consent at any time by contacting us using the details provided in this policy.
  • Contract: We process personal data where it is necessary to enter or perform a contract with you. This includes processing data for creating a challenge or for participation purposes, or to provide services. If you do not provide the required personal data, we may not be able to pursue the contract or challenge.
  • Legal obligation: We process personal data where required to comply with legal or regulatory obligations or to protect our legal rights.
  • Legitimate business interests: We may process personal data for our legitimate business purposes, such as internal operations, security, fraud prevention, and risk management, as long as your rights are not overridden. Where this legal basis is not permitted by law, we will rely on consent.
  • Public interest or other legal reasons: We may process personal data where required to carry out tasks in the public interest or to meet requirements from government, regulatory, or law enforcement authorities, as permitted by law.

8. Use of Cookies and Analytics Technologies

The Platform may use cookies and similar technologies to analyze platform usage, maintain session security, and improve user experience. Additional information about these technologies is available in our Cookie Policy.

9. Individual Rights

Subject to applicable laws, individuals may have the right to:

  • Right to access: Know if their data is processed and obtain a copy of the same.
  • Right to correction: Correct inaccurate or incomplete data.
  • Right to deletion / erasure: Request deletion where lawful conditions are met.
  • Right to restriction or objection: Limit or object to certain processing activities.
  • Right to data portability: Receive data in a structured, machine-readable format.
  • Right to withdraw consent: Applicable where processing is consent-based.
  • Right to complain: Escalate to regulators if dissatisfied.

All such requests or rights shall be exercised by reaching out to us by email or through our platform. All such requests will be handled in accordance with applicable legal timelines.

10. Disclosure and Data Sharing

Personal data may be shared:

  • Within the Platform and its affiliates on a need-to-know basis
  • With authorized service providers and vendors under contractual safeguards
  • With regulators, law enforcement, or courts when legally required to do so
  • In connection with corporate restructuring, mergers, or acquisitions, subject to legal protections

We do not sell or trade your personal data to third parties for monetary or other valuable consideration.

11. Cross Border Data Transfers

Your Personal Data may be transferred across borders to countries outside your country of residence, which may have different data protection laws. In such cases, we shall ensure that a valid legal basis for the transfer is in place, and appropriate safeguards such as an adequacy decision, standard contractual clauses, intragroup data transfer agreements or BCRs, or any required statutory/regulatory mechanism are implemented. We shall also conduct transfer risk assessments to evaluate potential risks associated with the transfer. We take reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy.

12. Data Security

The Platform maintains reasonable and appropriate technical, administrative, and physical security measures to protect personal data against unauthorized access, disclosure, loss, or destruction. Security measures include, but are not limited to, access controls, encryption, monitoring tools, and secure systems and facilities. The Platform periodically reviews and updates its security practices, conducts risk assessments, and maintains incident response procedures to address potential data security incidents.

13. Data Breach

In the event of a personal data breach, the Platform or Organization, whomsoever is the data controller, will take appropriate steps to assess, contain, and mitigate the impact of the data breach. Where required by applicable data protection law, the data controller will notify affected individuals and relevant regulatory authorities within prescribed timelines.

14. Age Assurance

The Platform is intended for individuals who are at least twelve (12) years of age. Where a user is below the age of eighteen (18) years or the age of majority in their jurisdiction, use of the Platform must occur with the consent and supervision of a parent, legal guardian, educational institution, or other authorized representative, in accordance with applicable law.

15. Updates to This Policy

This Policy is updated periodically to reflect changes in laws, regulations, or business practices. The latest version will be made available on our website.

16. Contact Information

For questions, concerns, or requests related to this Policy or the processing of personal data, please contact: risk.compliance@agilisium.com.