- Last reviewed
- 12 September 2026
- Applies to
- nexvix.com and Nexvix engagements
- Contact
- [email protected]
Who we are
Nexvix (“Nexvix”, “Company”, “us” or “we”) is a software company registered in Dhaka, Bangladesh, building custom AI systems and web applications. We respect and protect the privacy of visitors to www.nexvix.com and the other websites under Nexvix.
For the purposes of data protection law Nexvix is the controller of the data described in clause 3 and, when operating a system on a client’s behalf, a processor acting on that client’s documented instructions.
What “personal information” means
In this notice, “personal information” refers to information that identifies, or could be used to identify, an individual directly or indirectly. Nexvix does not give, sell, rent or loan personal information to any third party for its own marketing purposes.
Usage data means information about how this site is used, such as pages viewed, referrers and device type. It is collected through Google Analytics 4 (clause 13) and read by Nexvix in aggregate to understand how the site is used. Because it is linked to a cookie identifier, it is treated in this notice as personal information.
What we collect
Only what a conversation or an engagement needs.
- When you contact us or request an audit: your name, work email, company, and whatever you choose to write. Nothing beyond a name, an email and a description of the workflow is required.
- When you visit this site: pages viewed, referrer, device and approximate location, collected by Google Analytics 4 using first-party cookies. Your IP address also reaches Google Fonts when the site’s fonts load. Nexvix runs no advertising pixels and does not use this data for advertising.
- When you use the site assistant: what you type into the chat, processed by Voiceflow to produce the answers.
- When you book a call or apply for a role: the details you enter into the scheduling calendar (provided by Cal.com) or the careers application form (provided by Notion).
- During an engagement: the documents, exports and system access a client provides so the work can be done, held for the duration of that engagement under its terms.
- If you register for a service: billing details, and information the system records about your use of it.
We do not buy contact lists, we do not enrich what you give us from third-party data brokers, and an enquiry is never added to a mailing list.
Why we collect it
To reply to you, to run an engagement you have asked for, to meet accounting and contractual obligations, and to understand which pages of this site are read. The lawful bases relied on are performance of a contract, legitimate interests in responding to a business enquiry, and legal obligation for financial records.
AI providers and your data
This clause exists because most privacy notices leave it out. Systems Nexvix builds may send data to third-party model providers in order to function. Where that happens, four things are true.
- The providers are named in writing during the design stage, before anything is built, with the region their processing runs in and their retention policy.
- Providers are configured, where the provider supports it, so that submitted data is not used to train their models.
- Personal data is minimised before it leaves a client system: fields the model does not need in order to answer are removed rather than passed through.
- Where a client’s policy prohibits data leaving a jurisdiction, that constraint is a design input and changes which providers are eligible. It is not something to discover at launch.
Information we may receive from third parties
If you access a service through a third-party connection, for example by signing in with another account, that provider may pass us information such as your user ID and the details that connection allows. We use it only to provide the service you asked for.
We also share personal information with service providers so we can operate this site and our services. For this site they are: Google (Google Analytics 4 and Google Fonts), Voiceflow (the site assistant), Cal.com (scheduling on the booking and home pages), Notion (careers applications), and our hosting and email providers. Each processes the data under its own terms and privacy policy.
Application integration and credentials
If you integrate third-party applications with a Nexvix system, we may need to store access credentials for those applications. They are encrypted and used solely to provide the integration you asked for.
Nexvix is not responsible for the privacy practices of third-party applications you choose to connect.
How long we keep it
Enquiries that do not become engagements are deleted after twelve months. Engagement records are kept for the period required by contract and accounting law, currently six years for financial records. Client-supplied source data is returned or deleted at handover, at the client’s election, and that election is recorded in the handover pack.
Protection of information
Nexvix uses encryption in transit and at rest, role-based access and time-limited credentials. No system is entirely secure, so if you believe your data has been compromised, write to us immediately.
We will never email you to ask for account credentials. If you receive such a message, report it to us.
Your rights
You can ask for a copy of the personal data we hold about you, ask for it to be corrected or deleted, object to processing based on legitimate interests, and ask for the reasoning behind an automated decision that affects you. Requests are answered within thirty days and there is no charge.
Where Nexvix acts as a processor for a client, requests about that client’s data are forwarded to the client and answered by them. We will tell you who they are.
Children’s personal information
Nexvix does not knowingly collect personal information from children under 13. If you are under 13, please do not submit personal information. If you believe a child has provided us with personal information, contact us and it will be deleted.
Changes, transfers and contact
Material changes are dated at the top of this page and, for active clients, notified by email. Previous versions are available on request. In the event of a merger, acquisition or business transfer, personal information may transfer as part of the transaction, subject to this notice.
Write to [email protected] and a founder will answer. This is not a ticketing queue. If you are not satisfied you may complain to the data protection authority in your jurisdiction, and doing so does not affect any other right you have.
Nexvix, 438 Road-07, DOHS Baridhara, Dhaka-1206, Bangladesh. Registered 2023. Published in English; a translation may be requested.