Privacy notice

We collect the minimum we need to reply to you and run the site. We do not sell or rent personal information, we do not run advertising trackers, and we do not add you to a mailing list because you filled in a contact form.

If you would like a copy of what we hold about you, or you would like it deleted, email hello@nexa.com and we will action it within 30 days.

Information you give us: your name, email address, organization, budget range and message when you use the contact form, or the contents of an email or call with us.

Information collected automatically: aggregate, privacy-preserving analytics about page views and performance. We do not use cookies for advertising or cross-site tracking, and we do not build behavioural profiles.

Recruitment information: if you apply for a role, whatever you send us — CV, portfolio links, and notes from interviews.

To reply to your inquiry and, if it goes further, to scope and deliver work for you.

To assess applications and run our hiring and mentorship programmes.

To keep the site secure, fast and working — including diagnosing errors.

To meet legal, accounting and contractual obligations.

Where GDPR or UK GDPR applies, we rely on legitimate interests (responding to inquiries, running the site securely), performance of a contract (delivering work you have engaged us for), consent where we ask for it, and legal obligation where the law requires retention.

We share personal information only with service providers who help us operate — hosting, email delivery, error monitoring and accounting — under contracts that limit them to processing on our instructions.

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under US state privacy laws.

We may disclose information where required by law, or to establish or defend legal claims.

Inquiry records: 24 months from last contact, unless they become part of a client engagement.

Client project records: for the life of the engagement plus seven years, to meet contractual and tax obligations.

Unsuccessful applications: 12 months, so we can contact you about future roles — tell us if you would prefer we delete them sooner.

Depending on where you live, you may have the right to access, correct, delete, port or restrict the processing of your personal information, and to object to certain processing. Residents of California, Colorado, Connecticut, Texas, Virginia and other states with comprehensive privacy laws have specific rights, including the right not to be discriminated against for exercising them.

To exercise any of these, email hello@nexa.com. We will verify your identity in a way proportionate to the request, and we will not charge you for it.

Nexa Labs, Inc. is based in the United States and processes information there. Where information is transferred from the EEA or UK, we rely on Standard Contractual Clauses or another approved transfer mechanism.

We use encryption in transit, least-privilege access, and hosted infrastructure with independent security certification. No system is perfectly secure, but we will tell you promptly and honestly if something goes wrong that affects you.

This site is not directed at children under 16, and we do not knowingly collect their personal information.

If we make a material change to this notice, we will update the date at the top and, where the change is significant, tell affected people directly.

Questions, requests or complaints: hello@nexa.com, or write to Nexa Labs, Inc., Austin, TX, United States.