Privacy Policy

1. Scope

This Privacy Policy explains how Nexbt Technology LLC (“Nexbt”, “we”, “us”) handles personal information collected through our website, communications and professional services engagements.

It applies to prospective clients, clients, website visitors and business contacts. It does not alter the data-processing terms of a signed services agreement, which take precedence where they conflict.

2. Information we collect

• Contact details you submit voluntarily: name, company, business email, telephone number and country.
• Engagement information: the nature of your requirement and correspondence relating to it.
• Technical information: IP address, browser type, device characteristics and pages viewed.
• Cookie and consent records where you have interacted with our cookie banner.

3. How we use information

We do not sell personal information, and we do not use enquiry data for unrelated marketing without a separate opt-in.

• To respond to enquiries and provide requested information.
• To deliver, administer and improve contracted professional services.
• To maintain the security, availability and integrity of our systems.
• To comply with legal, regulatory, tax and accounting obligations.

4. Legal bases

Where data protection law requires a legal basis, we rely on the performance of a contract, our legitimate interest in operating and securing our business, compliance with legal obligations, or your consent where consent is the applicable basis.

5. Service providers

We use vetted third-party providers for hosting, email delivery, analytics and business administration. Providers are engaged under contractual confidentiality and security obligations and may only process information on our documented instructions.

6. International transfers

Nexbt operates from the United States. Where information is transferred across borders, we apply appropriate safeguards consistent with applicable law and with the terms of the relevant services agreement.

7. Retention

We retain personal information only for as long as necessary for the purpose for which it was collected, or for the period required by legal, contractual, tax or accounting obligations, after which it is deleted or anonymised.

8. Security

We apply administrative, technical and organisational safeguards including encryption in transit, least-privilege access control, multi-factor authentication and logging. No method of transmission or storage is entirely secure, and we cannot guarantee absolute security.

9. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal information, object to or restrict certain processing, or withdraw consent where processing relies on consent. Requests can be sent to our business email address and will be handled within the timeframes required by applicable law.

10. Connected social platforms (Meta, Instagram, LinkedIn, X)

Where you choose to connect a social platform account to a Nexbt application or service — including Meta (Facebook), Instagram, LinkedIn and X — we access only the data categories you explicitly authorize through that platform's consent screen.

• Meta / Instagram: basic profile information, pages or business assets you manage, and content or insights data strictly limited to the permissions you grant.
• LinkedIn: profile information and organization page data within the scopes you approve.
• X (Twitter): account profile and post data within the scopes you approve.

11. OAuth tokens and credential security

Access tokens and refresh tokens issued by connected platforms are never stored in your browser or on end-user devices. Tokens are transmitted over TLS and stored exclusively on our servers using encryption at rest, with access restricted on a least-privilege basis.

We use platform data solely to provide the functionality you connected the account for. We do not sell connected-platform data, do not use it for advertising profiles, and do not share it with third parties except the service providers required to operate the feature, under contractual confidentiality obligations.

12. Retention and deletion of connected-platform data

Data obtained from connected platforms is retained only while the connection remains active and only for the purpose it was collected for. When you disconnect an account, associated platform data and stored tokens are deleted or anonymised within 30 days, except where a longer retention period is required by law or a signed services agreement.

You may also request deletion at any time by emailing our business address; verified requests are completed within the timeframes required by applicable law.

13. How to disconnect a platform

• In the Nexbt application: open Settings → Connected Accounts and select Disconnect for the relevant platform. This revokes our access and triggers deletion of stored tokens.
• Meta / Instagram: visit facebook.com/settings → Business Integrations (or Apps and Websites), find the Nexbt application and remove it.
• LinkedIn: visit linkedin.com/psettings/permitted-services and remove the Nexbt application.
• X: visit x.com/settings/connected_apps and revoke access for the Nexbt application.
• Revoking access on the platform side is effective immediately; residual data on our systems is removed within the 30-day window described above.

14. Children

Our services are directed to businesses and organizations. We do not knowingly collect personal information from children.

15. Changes

We may update this Policy to reflect changes in our practices or legal requirements. The effective date above indicates the most recent revision.