Privacy Notice

Who we are

This notice explains how NEXOGEN S.R.L. (Societate cu Răspundere Limitată (S.R.L.)) — the controller — processes personal data for NEXOGEN account holders and visitors to our website. Controller: NEXOGEN S.R.L., Bucureşti Sectorul 6, Calea Giulești, Nr. 42, camera 2, Bl. 8, Scara c, Etaj 3, Ap. 81, RO (reg. J2026025947001, tax id 54516729). Privacy contact: contact@nexogenautomation.com. We have not appointed a Data Protection Officer, as we are not required to; contact@nexogenautomation.com handles privacy questions and requests.

What this notice covers

It covers the data we control: your account and our website. It does not cover the business records you enter about your own customers — for those you are the controller and NEXOGEN S.R.L. is your processor under the Data Processing Agreement. The providers we rely on are listed on the Subprocessors page.

What we collect, why, and our legal basis

• Account and sign-in: your email address, and a password stored only as a secure hash by our authentication provider. We use these to create and secure your account, sign you in, and confirm your email. Legal basis: performance of our contract with you (GDPR Art. 6(1)(b)).
• Organisation and team: an organisation name you choose and the roles you assign. If you invite colleagues, we process the email addresses you provide in order to send the invitation. Legal basis: performance of the contract and our legitimate interest in providing team collaboration (Art. 6(1)(f)).
• Security and abuse prevention: we process your IP address transiently, in memory, to enforce rate limits and protect the service; we do not store it in our database. We keep minimal security records. Legal basis: our legitimate interests in the security and integrity of the service (Art. 6(1)(f)).
• Cookies and similar storage: strictly-necessary and functional first-party storage only (sign-in, language, theme, and your cookie choice). Optional analytics and marketing categories exist in settings but nothing runs in them. Legal basis: necessity / legitimate interest for strictly-necessary storage, and your consent for any optional category (none is active today). See the Cookie Policy.

What we do not do

• No advertising or marketing profiling, and no third-party analytics or tracking.
• We do not sell your personal data.
• No automated decision-making that produces legal or similarly significant effects about you (Art. 22).

Who we share it with

We use service providers that process personal data on our behalf and on our instructions — infrastructure today, and payments and AI features only when you enable them. Each is listed, with its role, on the Subprocessors page. We disclose personal data to public authorities only where the law requires it.

Where your data is processed (international transfers)

Your account data is stored in the European Union, in the EU region of our database, authentication and file-storage provider. Some subprocessors may process data outside the European Economic Area; where they do, we rely on appropriate safeguards, such as the provider's data-processing agreement and the European Commission's standard contractual clauses. AI features do not process real customer data until those safeguards are confirmed with the provider.

How long we keep it

We keep your account data for as long as your account is open. After you close it, we delete or anonymise the data within a limited period, except where a law — for example accounting rules — requires us to keep specific records longer. Security records are kept only as long as needed for their purpose.

Your rights

You have the right to access, rectify, erase, restrict and port your personal data, and to object to processing based on our legitimate interests. Where processing is based on consent, you may withdraw it at any time. To exercise any of these, contact contact@nexogenautomation.com.

You also have the right to lodge a complaint with the Romanian supervisory authority — the National Supervisory Authority for Personal Data Processing (ANSPDCP, dataprotection.ro).

Is providing data required?

Providing your email address is necessary to create and use a NEXOGEN account; without it we cannot provide the service. NEXOGEN is a business product and is not directed to children.

Changes to this notice

We may update this notice as the product changes. The version and effective date are shown with the document, and we announce material changes to account holders.