At Nexo Tech, we value your privacy and are firmly committed to safeguarding your personal data. This Privacy Policy outlines how we collect, use, store, and protect the information provided through our website (nexotechx.com) and our Client Portal.
1. Information We Collect
We only collect information necessary to deliver exceptional technical and commercial services:
- Contact & Quote Forms: Full name, email address, phone number, physical project location, and service requirements (CCTV, IT Networks, Drone Missions, Access Control).
- Client Portal & Accounts: Full name, email address, cryptographically hashed credentials (
password_hashwith Bcrypt), two-factor authentication (2FA) tokens, and audit logs. - Technical Diagnostics: Anonymized IP addresses, browser user-agents, and connection country solely for DDoS mitigation, fraud prevention, and session security.
2. Purpose of Data Processing
Your information is processed strictly for legitimate business purposes:
- To process and respond to quote inquiries and technical estimates.
- To execute installations, IT infrastructure maintenance, drone missions, and billing.
- To manage secure client portal access, work orders, and support tickets.
- To maintain application cybersecurity and protect against unauthorized access.
3. Secure Processing & Webhook Automation
To ensure rapid and dependable communication, contact inquiries are processed via secure automated workflows (n8n / dedicated internal CRM) over encrypted HTTPS/TLS 1.3 channels.
We do not sell, rent, or trade your personal data to any third parties for marketing purposes.
4. Protection of Minors (COPPA Compliance)
Our services are directed exclusively at business entities, property owners, and adult individuals. In strict adherence to the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from individuals under 13 years old. Account registration requires explicit age verification.
5. Your Rights (GDPR & CCPA)
In accordance with the General Data Protection Regulation (GDPR) and applicable consumer privacy frameworks, you hold the right to:
- Access: Request a copy of your stored personal data.
- Rectification: Request correction of inaccurate or incomplete records.
- Erasure: Request permanent deletion of your account and associated records when no longer needed for regulatory or contractual duties.
- Portability: Receive your data in a portable, standard machine-readable format.
6. Cookies & Local Storage
We do not utilize invasive tracking cookies or third-party marketing pixels. We strictly rely on essential client storage (localStorage and secure session tokens) to:
- Remember your visual interface theme (Dark Mode / Light Mode).
- Maintain active, CSRF-protected authentication sessions in the Client Portal.
- Preserve your preferred browsing language (English / Spanish).
7. Privacy Contact & Data Officer
To exercise your privacy rights or submit any inquiry regarding our data practices, contact our security officer at any time via: