Enterprise Privacy Commitment
At NEXNUV, trust and data privacy are foundational to our enterprise solutions. We are committed to transparency in our data processing practices, maintaining rigorous security standards, and adhering to global data protection regulations including GDPR, CCPA/CPRA, and relevant privacy frameworks.
Introduction & Scope
This Privacy Policy describes how NEXNUV (“NEXNUV,” “we,” “our,” or “us”) collects, uses, protects, and discloses information obtained from visitors, enterprise clients, authorized users, and partners through our website (nexnuv.com), customer portals, SaaS platforms (including NEXNUV HRMS, NEXNUV CRM, NEXNUV ERP, NEXNUV LMS, NEXNUV Recruitment, and NEXNUV O-Dialer), API endpoints, and associated cloud-native services (collectively, the “Services”).
Please read this policy carefully. By accessing or using our Services, you acknowledge that you have read and understood the practices described herein. If you do not agree with our policies and practices, your choice is not to use our Services.
Information We Collect
We collect information that identifies, relates to, describes, or is reasonably capable of being associated with an individual or organization:
- Full name and professional title
- Corporate email address and telephone number
- Company name, division, and industry vertical
- Billing and mailing address
- Usernames, single sign-on (SSO) credentials
- Tenant identifiers and access role permissions
- Multi-factor authentication (MFA) tokens
- Audit logging of authorized actions
- Internet Protocol (IP) address and geographic region
- Browser type, version, and device operating system
- Request timestamps, referrers, and network latency
- Diagnostic telemetry and crash reports
- Customer database records hosted under contract
- Workflow configurations, tickets, and communications
- Documents uploaded by authorized tenant users
- Processed solely on behalf of our enterprise clients
How We Collect Information
We gather data through three primary avenues:
- Direct Submissions: When you submit consultation forms, request a live software demonstration, download whitepapers, subscribe to newsletters, or correspond with our engineering and support representatives.
- Automated Logging & Cookies: As you navigate through our digital surfaces, automated logging mechanisms and industry-standard cookies record device metadata, navigation behavior, and system performance metrics.
- Client Tenant Administrators: Enterprise client administrators may provision user credentials and upload personnel or operational data to enable SaaS module functionality under their Master Services Agreement (MSA).
Purposes of Processing
NEXNUV processes collected data exclusively for clear, legitimate commercial and operational purposes:
- Provision & Maintenance: To operate, manage, host, and maintain our enterprise cloud applications, custom software deployments, and platforms.
- Customer Support: To troubleshoot technical issues, fulfill Service Level Agreement (SLA) obligations, and deliver customer success advisory.
- Security & Authentication: To verify user identities, enforce role-based access boundaries, detect fraudulent activities, and defend against cyber threats.
- Enterprise Invoicing: To process payments, manage enterprise license subscriptions, and fulfill statutory accounting requirements.
- Product Evolution: To evaluate usage trends, performance bottlenecks, and UX responsiveness to iteratively refine our digital architectures.
- Direct Communications: To send critical administrative announcements, security advisories, release notes, and relevant business inquiries.
AI & Proprietary Data Governance
When client organizations utilize NEXNUV’s Artificial Intelligence or Data Analytics modules, all customer queries, document embeddings, workflow prompts, and proprietary data remain strictly isolated. NEXNUV never uses your proprietary enterprise data or uploaded documents to train public, multi-tenant, or foundational AI models.
Legal Basis for Processing (GDPR & International Frameworks)
For individuals residing in the European Economic Area (EEA), United Kingdom, or jurisdictions requiring a specified legal basis, our processing is justified under the following grounds:
- Contractual Performance: Processing is required to perform our contractual obligations under client agreements or terms of service.
- Legitimate Interests: Necessary for our legitimate interests in securing our infrastructure, improving services, and conducting B2B marketing, provided your fundamental rights do not override those interests.
- Legal Compliance: Where statutory laws necessitate records retention (e.g. tax, auditing, and corporate reporting mandates).
- Explicit Consent: Where you have granted explicit consent, such as opting into non-essential tracking cookies or marketing bulletins.
Cross-Border Data Transfers
NEXNUV serves international clients across multiple geographic regions. If personal data originating in the EEA, UK, or Switzerland is transferred outside these territories, we ensure adequate protection through standard mechanisms, including European Commission approved Standard Contractual Clauses (SCCs), certified adequacy decisions, and supplementary cryptographic safeguards.
Data Retention & Archival
We retain personal information only for the duration necessary to fulfill the purposes outlined in this Privacy Policy, satisfy our contractual commitments with enterprise customers, resolve disputes, and comply with mandatory legal, tax, and auditing requirements. Upon termination of service agreements, customer tenant data is securely decommissioned and purged in accordance with our documented data retention schedule.
Security Safeguards
We employ defense-in-depth technical, administrative, and physical security measures to safeguard customer information against unauthorized access, destruction, loss, alteration, or disclosure:
Your Privacy Rights & Choices
Depending on your jurisdiction (e.g. EU GDPR, UK GDPR, California CCPA/CPRA), you possess distinct privacy rights concerning your personal data:
- Right to Know & Access: The right to request confirmation and copies of personal data we hold about you.
- Right to Rectification: The right to correct inaccurate, obsolete, or incomplete personal data.
- Right to Erasure (“Right to be Forgotten”): The right to request deletion of personal information where no statutory retention basis applies.
- Right to Data Portability: The right to receive your data in a structured, machine-readable format.
- Right to Restrict or Object: The right to object to specific processing grounds or restrict certain data utilization.
- Non-Discrimination: You will never receive retaliatory or degraded service for exercising your legal privacy rights.
To submit a privacy rights request, email our compliance team at privacy@nexnuv.com. You may also initiate an automated account and data erasure request directly using our dedicated Account Deletion Request Form. We verify all identity requests before executing permanent data purges.
Children’s Privacy
NEXNUV Services are intended exclusively for commercial enterprise organizations, business professionals, and adult users. We do not knowingly solicit, collect, or process information from children under the age of 16 (or relevant age of majority). If we learn that such data has been mistakenly gathered, we will take prompt steps to delete it immediately.
Changes to This Policy
We may revise this Privacy Policy periodically to reflect technological enhancements, operational changes, or evolving regulatory requirements. The updated version will be indicated by an updated “Last Updated” date at the top of this page. In the case of material alterations, we will provide conspicuous notice via email or via an administrative notice within client application dashboards.
Contact Information
If you have questions, feedback, or concerns regarding this Privacy Policy or our data protection practices, please contact us:
