Privacy Policy
Reference translation. This text is a draft translation that has not been legally reviewed. If there is any difference, the Spanish version prevails. View the Spanish version.
Draft: legal review is recommended before the commercial launch. This text describes how NXCBusiness works today, but it is not legal advice or the final version.
This policy explains what personal information NXCBusiness processes, for what purpose, with whom it is shared and what rights you have. It applies to NXCBusiness’s public site, application and forms.
1. Who operates NXCBusiness
NXCBusiness is operated by [LEGAL_NAME_REQUIRED] ([TAX_ID_REQUIRED]), with registered address at [LEGAL_ADDRESS_REQUIRED], [LEGAL_COUNTRY_REQUIRED]. Privacy contact: [email protected].
For the data each organization enters in NXCBusiness (its customers, employees, applicants, documents), the organization decides how to use it and NXCBusiness processes it on its behalf.
2. Information we collect
Only what is described in the following sections. We do not buy data from third parties.
3. Account information
Name, email address, preferred interface language and the role you have in each organization you belong to.
4. Organization information
- Company details: legal name, tax identification, currency, country, time zone and logo.
- What the organization records: customers and contacts, opportunities, quotes, sales, internal invoices, payments, suppliers, purchases, inventory and, in NXCBusiness People, employment data of employees and documents.
- Applications to job openings published by an organization: contact details, cover letter and CV, sent with your authorization and visible to that organization.
5. Usage information
- Activity history within the organization (who created or changed a record and when), for auditing.
- Notifications inside the application.
- Usage counters per organization (for example, volume of uploaded files) to apply plan limits.
- Product metrics aggregated by day, plan, customer type and country, without identifying people or organizations.
- Messages you send from “Help and feedback”, with your name, email, organization and the page you wrote from.
- Early-access requests and contact form messages, with the details you enter.
6. Technical information
To limit abuse of the public forms we use your IP address temporarily in the server’s memory; we do not store it in our database. Our hosting and network providers process IP addresses and request logs to provide and protect the service. The application’s technical logs contain paths and internal identifiers to diagnose errors.
8. What we use the information for
- Providing the service and applying each plan’s permissions and limits.
- Answering early-access requests, contact and support messages.
- Maintaining security, preventing abuse and auditing changes.
- Improving the product with aggregated metrics.
We do not sell personal data or use it for advertising.
9. Service providers
We use these providers, each only for its function:
- Railway: hosting of the web application, the API, the database and private file storage.
- Cloudflare: DNS, delivery and protection of the site’s and the API’s traffic.
- Google Workspace: email, for example the messages you send to our support address.
- Resend: sending automatic emails. Today: the confirmation of your early-access request or contact message, and the internal notice to the team with the details you sent in the form. Later, account emails (welcome, verification, recovery and invitations). It receives the recipient’s address and the message content.
10. Artificial intelligence providers
Today NXCBusiness does not send information to external artificial intelligence providers: its AI service is internal and does not offer features to customers yet. Before enabling AI features we will state which categories of information they process and with which provider.
11. Hosting providers
Data is hosted with Railway in the region: [HOSTING_REGION_REQUIRED]. Files (logos, images, documents and CVs) are kept in private storage and only delivered through temporary links after checking permissions.
12. Payment providers
Subscription payments are processed by Paddle.com, our reseller (Merchant of Record). Paddle processes transaction and payment method data under its own privacy policy; NXCBusiness receives only what it needs to maintain your subscription (status, plan, dates and amounts) and never your full card details.
13. Analytics providers
We do not use third-party analytics tools. Product metrics are calculated inside NXCBusiness and in aggregate.
14. Data retention
We keep each organization’s information while its account is active; business records are not physically deleted, to preserve traceability. Early-access requests and contact messages are kept until you request their deletion. Retention periods per data type will be defined in the reviewed version of this policy.
15. Security
Each organization is isolated in the database with row-level security, permissions are validated on the server, traffic travels encrypted over HTTPS, files are private and the AI service is not exposed to the internet. No system is completely infallible; if we detect an incident affecting your data we will notify you as required by applicable law.
16. International transfers
Our providers may host or process information outside your country (see the hosting region stated above). We will apply the safeguards that applicable law requires for those transfers.
17. Your rights
You can request access, rectification, cancellation or objection to the processing of your data, and any other rights granted by applicable law (for example, in Peru, Personal Data Protection Law No. 29733). Write to [email protected] or use the contact form with the topic “Privacy”. If your data was recorded by an organization (for example, as an employee or customer), you can also contact that organization.
Some country-specific capabilities may require additional notices; they will be published when those capabilities exist.
18. Account deletion
You can request the deletion of your account or of your early-access request through the channels above. Deleting the account is different from cancelling a subscription or requesting a refund: cancelling only stops renewals.
19. Changes to this policy
Each version states its number and date. We will announce relevant changes before they take effect.
20. Contact
Privacy: [email protected]. Support: [email protected]. You can also use the contact form.