Privacy Policy

This Privacy Policy explains how NEXORAA Inc. ("Nexoraa", "we", "us" or "our") collects, uses, shares and protects personal information when you visit nexoraa.ai (the "Website"), contact us, request a demonstration, subscribe to our communications, or otherwise interact with us in a business context.

Nexoraa Inc. is a Wyoming corporation with offices at 511 E John Carpenter Freeway, Suite 580, Irving, Texas 75062, United States, and engineering operations in Hyderabad, India. Nexoraa is the controller of the personal information described in this policy for the purposes of the EU General Data Protection Regulation ("GDPR") and the UK GDPR, and the data fiduciary for the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act").

This policy does not cover data that our customers process through Nexoraa Studio. That processing is governed by the agreement between Nexoraa and the relevant customer, under which Nexoraa acts as a processor on the customer's behalf.

We collect only the personal information needed for the purposes described in Section 3.

We do not intentionally collect sensitive or special category personal information through the Website, and we ask that you do not submit it.

We use personal information only for the purposes below. Where the GDPR or UK GDPR applies, each purpose relies on the legal basis shown.

Where the DPDP Act applies, we process personal information on the basis of your consent or for legitimate uses permitted under that Act. You may withdraw consent at any time, and withdrawal does not affect processing carried out before it.

We do not sell personal information, and we do not use it for automated decision-making that produces legal or similarly significant effects.

The Website uses cookies and similar technologies. Essential cookies are always active because the Website cannot function without them. Analytics and marketing cookies are used only with your consent where the law requires it, and you can change your choices at any time through the cookie settings on the Website. Full details are set out in our Cookie and Website Data Policy.

We share personal information only as described below.

• Service providers. Hosting, email, customer relationship management, analytics, scheduling and recruitment providers that process information on our behalf under written contracts requiring confidentiality and appropriate security.
• Group and affiliated operations. Nexoraa personnel and operations in the United States and India, where needed to respond to you or manage our relationship.
• Partners and marketplaces. Cloud marketplaces, resellers or event partners, where you have engaged with us through them or asked us to share information with them.
• Professional advisors. Lawyers, auditors, accountants and insurers, under duties of confidentiality.
• Legal and safety reasons. Courts, regulators, law enforcement or other authorities where required by law, or where necessary to protect our rights, property or safety, or those of others.
• Business transactions. A purchaser, investor or successor in connection with a merger, acquisition, financing or sale of assets, subject to equivalent confidentiality and protection.

We do not sell personal information or share it for cross-context behavioral advertising as those terms are defined under US state privacy laws.

Nexoraa operates in the United States and India, and our service providers may process information in other countries. Personal information may therefore be transferred to countries whose data protection laws differ from those of your country.

Where we transfer personal information from the European Economic Area, the United Kingdom or Switzerland to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or another lawful transfer mechanism, together with supplementary measures where appropriate. Transfers from India are made in accordance with the DPDP Act and any restrictions notified under it. You may request a copy of the relevant safeguards by contacting us.

We keep personal information only for as long as necessary for the purpose for which it was collected, or as required by law.

We protect personal information through administrative, technical and organizational measures appropriate to the risk, including encryption in transit and at rest, access restricted on a need-to-know basis, multi-factor authentication, and logging and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you have some or all of the rights below. We will not discriminate against you for exercising them.

European Economic Area and United Kingdom. You may request access to your personal information, its correction or erasure, restriction of its processing, and its transfer to you or another organization in a portable format. You may object to processing based on legitimate interests, and you may object at any time to direct marketing. Where we rely on consent, you may withdraw it at any time. You may also lodge a complaint with your local supervisory authority, or, in the United Kingdom, with the Information Commissioner's Office.

India. Under the DPDP Act, you may request a summary of the personal information we process about you and the parties with whom it has been shared, and you may request its correction, completion, updating or erasure. You may withdraw consent, nominate another person to exercise your rights in the event of death or incapacity, and raise a grievance with our Grievance Officer named in Section 10. If your grievance is not resolved, you may approach the Data Protection Board of India.

United States. Residents of certain US states may, under applicable state law, request to know the categories and specific pieces of personal information we hold, and request its correction or deletion. Because we do not sell personal information or share it for cross-context behavioral advertising, no opt-out of sale or sharing is required. Where state law provides it, you may appeal a decision on your request by replying to our response.

How to exercise your rights. Email privacy@nexoraa.ai with the subject line "Privacy Request". We will verify your identity before acting on a request and respond within the period required by applicable law, normally within one month. An authorized agent may submit a request on your behalf with proof of authorization.

Children. The Website is intended for business users and is not directed at anyone under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

Third-party links. The Website may link to websites operated by others, including cloud marketplaces and partners. Their privacy practices are governed by their own policies, and we are not responsible for them.

Changes to this policy. We review this policy at least annually and may update it to reflect changes in our practices or the law. The date at the top of this page shows when it was last updated. Where a change is material, we will provide notice on the Website or by email where appropriate.

For questions about this policy or to exercise your rights, please contact: