Privacy Policy

Account & Profile Data: When you register, we collect your name, email address, job title, profile photo, and organization details. This information is necessary to create and manage your workspace account.

Workspace & Usage Data: We collect data you create within the platform — tasks, projects, comments, messages, attachments, and activity logs. We also collect usage metadata such as feature interactions, login timestamps, and session duration to improve our Services.

Device & Technical Data: We automatically collect IP address, browser type, operating system, device identifiers, and referring URLs to ensure platform security and performance.

Payment Data: Billing information is collected and processed by our third-party payment processors. NexaVite does not store full credit card numbers on its servers.

Communications: If you contact our support team or respond to surveys, we retain those communications to resolve issues and improve our Services.

We use the information we collect to:

• Provision, operate, and maintain the Services
• Authenticate users and enforce security controls
• Process transactions and send billing-related communications
• Send product updates, feature announcements, and operational notices
• Analyze usage patterns to improve performance, features, and user experience
• Detect, investigate, and prevent fraudulent or unauthorized activity
• Comply with legal obligations and enforce our Terms of Service
• Respond to support requests and provide customer assistance

We do not sell your personal data to third parties. We do not use Customer Data to train AI models without explicit consent.

For users in the European Economic Area (EEA) and UK, we process your personal data under the following legal bases:

• Contractual necessity — to fulfill our obligations under the Terms of Service
• Legitimate interests — for security, fraud prevention, and product improvement
• Legal compliance — to meet applicable regulatory requirements
• Consent — for marketing communications, where required

We may share your information with:

• Service Providers: Trusted vendors who process data on our behalf (e.g., cloud hosting, email delivery, analytics) under strict data processing agreements
• Your Organization: Company Administrators in your Workspace can access member activity data within the platform
• Legal Authorities: When required by law, court order, or to protect the rights and safety of NexaVite, its users, or the public
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred with appropriate notice

We do not share personal data with advertisers or data brokers.

• TLS encryption for all data in transit, enforced via Cloudflare
• Role-based access controls (RBAC) with granular permission levels across all API endpoints
• OTP-based device verification for suspicious or new login attempts
• Secure password hashing using industry-standard algorithms (bcrypt)
• Session management with token expiry and revocation support
• Dependency vulnerability scanning as part of our development process

While we take all reasonable precautions, no system is completely immune to security risks. We encourage users to use strong, unique passwords. Additional security features such as two-factor authentication are on our roadmap.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Correct inaccurate or incomplete personal data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Portability: Receive your data in a machine-readable format
• Restriction: Request that we limit how we process your data
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw previously given consent at any time

To exercise any of these rights, contact us at nexavitesolutions@gmail.com. We will respond within 30 days.

• Essential cookies: Required for the platform to function (authentication, security tokens)
• Analytics cookies: Used to understand how users interact with the platform (anonymized)
• Preference cookies: Store UI preferences such as theme and language settings

You can manage cookie preferences through your browser settings. Disabling essential cookies may impair platform functionality.

For privacy-related questions, requests, or concerns, please contact us:

If you are located in the EU/EEA and are unsatisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.