Legal · Privacy
Privacy policy.
Written in plain English. If any of it is unclear, email privacy@nexxorex.com. We will answer within one business day.
Last updated · September 2026Governing law · Bangladesh
01
What we collect
- Contact information you send us during intake (name, email, phone, company).
- Business context you share on the intake call (workflows, systems, revenue).
- Standard site analytics: pages visited, referrer, device type. No fingerprinting.
02
What we do with it
- Deliver the written scope you paid for.
- Contact you about the engagement in progress.
- Improve the site based on aggregate analytics.
- Nothing else. We do not sell data. We do not share with third parties beyond the vendors listed below.
03
Third-party processors
- Calendly (intake booking) · Stripe (payments) · Vercel (hosting) · Anthropic + OpenAI (AI processing on your active engagements only).
- Each is contractually bound to data-processing standards. None of them get customer data beyond what is strictly required to render the service.
04
How long we keep it
- Active engagement data: for the duration of the engagement plus 24 months for warranty and audit purposes.
- Intake data from calls that did not result in an engagement: 12 months, then deleted.
- Analytics: 26 months aggregated, no personal identifiers.
05
Your rights
- Access, correct, or delete your data at any time by emailing privacy@nexxorex.com.
- Requests are acknowledged within two business days and answered within thirty days.
- You may opt out of any non-essential communications at any time.
06
Security
- TLS 1.3 in transit. Encryption at rest across all managed data stores.
- Append-only audit logging. On-premise and in-country deployment supported where residency requires it.
- Access controls: least-privilege, audit-logged, no shared credentials.