This Privacy Policy explains how Nxcept (“Nxcept,” “we,” “us,” or “our”) handles personal information in connection with our website at nxcept.com (the “Site”) and the AI consultancy and product studio services we provide (the “Services”). By using the Site or contacting us, you agree to the practices described here.
1. Who We Are
Nxcept is an AI consultancy and product studio that helps small businesses, vendors, founders, and B2B teams plan, build, and launch practical AI websites, apps, agents, assistants, receptionists, and workflow automations. For any privacy question, you are the data controller of your own business data; Nxcept acts as a controller for Site visitors and inquiries, and as a processor for client data handled during an engagement.
2. Information We Collect
We collect the following categories of information:
- Information you provide. When you submit our contact form or email us, we collect your name, email address, phone number and country code, company name, country or region, preferred language, business type, service interest, budget, timeline, current website or app link, how you heard about us, the contents of your message, and your consent choice.
- Information collected automatically. Like most websites, our hosting provider records basic technical data such as your IP address, approximate location, browser and device type, referring pages, and the dates and times of requests, for security, reliability, and analytics.
- Cookies and local storage. We use minimal browser storage to remember preferences, such as your selected language. We do not use third-party advertising or cross-site tracking cookies.
- AI assistant conversations. When you ask our website assistant a question, we process the question and a limited amount of recent conversation history to generate a reply. Names and email addresses collected during the separate consultation handoff are not sent to the language model.
- Client project data. During an engagement you may share business data, documents, credentials, or sample content. We handle this only to deliver the agreed Services.
3. How We Use Your Information
- To respond to your inquiry and provide the information or proposal you requested.
- To deliver, maintain, and improve our Services and the Site.
- To communicate with you about projects, scheduling, and next steps.
- To protect the Site against spam, abuse, fraud, and security threats.
- To comply with legal, tax, and accounting obligations.
4. Legal Bases for Processing
Where applicable law (such as the GDPR or UK GDPR) requires a legal basis, we rely on: your consent (which you may withdraw at any time); the performance of a contract with you; our legitimate interests in operating and securing our business; and compliance with legal obligations.
5. How We Share Your Information
We do not sell your personal information. We share it only with trusted service providers who process it on our behalf under appropriate safeguards, including:
- Hosting and delivery — our website and serverless functions are hosted on Vercel.
- Email delivery — inquiry notifications are sent using Resend.
- Database storage — inquiries may be stored using Supabase for follow-up and record-keeping.
- AI response generation — website assistant questions are routed through OpenRouter to an eligible language model using a provider-level no-data-collection restriction.
- Abuse prevention — Upstash may process a one-way hash of an IP address for short-term request rate limiting.
We may also disclose information when required by law, to enforce our agreements, to protect the rights, safety, and property of Nxcept or others, or in connection with a business transfer such as a merger or acquisition.
6. AI Projects and Your Data
When we build AI features, we may process your data through third-party AI and infrastructure providers strictly to deliver the agreed work. We do not use client or inquiry data to train publicly available AI models, and we do not authorize our subprocessors to do so, unless you give us explicit written permission. Specific data-handling terms for an engagement are set out in the applicable proposal or statement of work.
For the Site assistant, Nxcept restricts routing to providers OpenRouter identifies as not collecting user data. OpenRouter and the selected provider still process the conversation to generate a reply, so do not enter passwords, financial details, health information, or other sensitive data. You can use the consultation handoff when you are ready to share contact details with our team.
7. Data Retention
We keep personal information only as long as necessary for the purposes described above, including responding to your inquiry, fulfilling a contract, and meeting legal or accounting requirements. When it is no longer needed, we delete or anonymize it.
8. International Data Transfers
Nxcept provides Services globally, and our providers may process data in countries other than yours. Where required, we use appropriate transfer mechanisms (such as standard contractual clauses) to protect your information.
9. Data Security
We use reasonable technical and organizational measures, including encryption in transit and access controls, to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
10. Your Privacy Rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to the processing of your personal information, to receive a portable copy, and to withdraw consent. Residents of the EEA/UK (GDPR) and California (CCPA/CPRA), among others, have specific rights. To exercise any right, email us at nxcept@gmail.com. We will respond within the timeframe required by applicable law and will not discriminate against you for exercising your rights.
11. Children’s Privacy
The Site and Services are intended for businesses and individuals aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.
12. Third-Party Links
The Site may link to third-party websites or services we do not control. Their privacy practices are governed by their own policies, and we encourage you to review them.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be highlighted on this page.
14. Contact Us
If you have questions about this Privacy Policy or how we handle your information, contact us at nxcept@gmail.com or through our contact page.