Privacy Policy

Account information. When you create an account, we collect your name, email address, password (hashed), and optional profile details such as your company name and job title.

Usage data. We collect information about how you interact with our products — pages visited, features used, session duration, and actions taken within the platform.

Payment information. We use Stripe to process payments. We store only the last four digits of your card and billing address. Full card numbers are never stored on our servers.

Log data. Our servers automatically record information such as your IP address, browser type, operating system, referring URLs, and timestamps when you access our services.

Customer data. Content you input into nsxia products — invoices, contacts, CRM records, documents, and similar business data — is stored on our servers solely to provide the service to you.

Communications. If you contact us by email or through our support system, we store those communications to help resolve your queries.

We use the information we collect to:

• Provide, operate, and improve the nsxia platform and its products
• Process transactions and send related information, including purchase confirmations and invoices
• Send transactional and service notifications (account confirmations, password resets, product updates)
• Respond to comments, questions, and support requests
• Monitor and analyse usage patterns to improve product quality and user experience
• Detect, investigate, and prevent fraud, unauthorised access, and other illegal activities
• Comply with legal obligations

We do not sell your personal data to third parties. We do not use your customer data to train machine-learning models.

We share your information only in the following limited circumstances:

Service providers. We engage trusted third-party vendors to perform functions on our behalf — including cloud hosting (Neon/AWS), payment processing (Stripe), email delivery (AWS SES), and error monitoring. These parties access your data only as necessary to perform their functions and are bound by confidentiality agreements.

Legal requirements. We may disclose your information if required by law, subpoena, or other legal process, or if we believe disclosure is necessary to protect the rights, property, or safety of nsxia, our users, or others.

Business transfers. In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred. We will provide notice before your personal data is transferred and becomes subject to a different privacy policy.

With your consent. We may share your information for any other purpose with your explicit consent.

We retain your account data for as long as your account is active or as needed to provide services. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal, tax, or regulatory purposes.

Log data and analytics are retained for up to 90 days. Aggregated, anonymised analytics may be retained indefinitely.

Backup copies may persist for up to 60 days following deletion.

We implement technical and organisational measures to protect your data against unauthorised access, loss, alteration, and disclosure. These include:

• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Secure, hashed password storage (bcrypt)
• Two-factor authentication available on all accounts
• Role-based access controls and audit logging
• Regular security reviews and dependency updates

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we continually work to improve our security practices.

Depending on your location, you may have the following rights regarding your personal data:

• Access. Request a copy of the personal data we hold about you.
• Rectification. Request correction of inaccurate or incomplete data.
• Erasure. Request deletion of your personal data ("right to be forgotten").
• Portability. Request your data in a structured, machine-readable format.
• Restriction. Request that we limit how we process your data in certain circumstances.
• Objection. Object to processing based on legitimate interests or direct marketing.
• Withdraw consent. Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

We use cookies and similar tracking technologies to operate our platform. For detailed information, please see our Cookie Policy.

nsxia operates globally. Your information may be transferred to and processed in countries other than your own, including the United States, where data protection laws may differ. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, where applicable.

nsxia is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our website at least 14 days before changes take effect. Your continued use of nsxia after the effective date constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact: