Privacy Policy

Nexora Software Solutions ("Nexora", "we", "our", or "us") values your privacy and is committed to handling personal information in a transparent and responsible manner. This Privacy Policy explains how we collect, use, store, disclose, and protect your information when you visit our website, submit enquiries, communicate with us, or use our website design, website development, web application, business system, content management system (CMS), AI assistant, and technical support services.

This Privacy Policy applies to our website, related digital platforms, and services provided by Nexora Software Solutions. By using our website or providing us with personal information, you acknowledge that you have read and understood this policy. If you are acting on behalf of a company or organization, you confirm that you are authorized to provide such information.

We only collect information that is reasonably necessary to provide our services, respond to enquiries, maintain business relationships, and improve our website. The type of information we collect depends on how you interact with us.

• Name, email address, phone number, and WhatsApp contact number
• Company name, job title, industry, and business location
• Information submitted through contact forms, quotation forms, or project briefs
• Emails, WhatsApp messages, and related attachments you send to us
• Project materials, brand assets, system accounts, or technical information required for project delivery
• Login account and authentication information for client portals, CMS platforms, or admin systems
• IP address, browser type, device type, access time, page views, and referring pages
• Usage data generated through cookies, analytics tools, and similar technologies
• If online payment features are enabled in the future, we may collect transaction status, billing details, and payment confirmation records. Full payment card information is usually processed directly by compliant payment service providers.

We use personal information for legitimate business purposes, including providing services, fulfilling contractual obligations, responding to your requests, maintaining system security, and improving our business operations.

• Respond to enquiries, arrange meetings, provide quotations, and evaluate project requirements
• Design, develop, test, deploy, and maintain websites, web applications, CMS platforms, and business systems
• Configure AI assistants, automation workflows, and related business features
• Improve the quality, reliability, and accuracy of our AI-assisted services
• Provide project updates, technical support, and service notifications via email or WhatsApp
• Manage customer relationships, invoices, payment records, and future online payment processes
• Monitor website performance, analyze traffic trends, and improve user experience
• Detect abuse, fraud, unauthorized access, and other security risks
• Comply with applicable laws, regulatory requirements, and lawful government or enforcement requests

We do not use confidential project information to train public AI models unless this is clearly stated and your consent has been obtained.

Our website may use cookies and similar technologies to support basic functionality, remember user preferences, understand website usage, and improve performance. Cookies are small text files stored on your device.

Some cookies are necessary for the website to function properly. Analytics cookies help us understand visitor numbers, popular pages, and how users navigate the website. We do not use cookies to access other files on your device.

• Essential cookies: support security, forms, and basic website functionality
• Preference cookies: remember language or interface preferences
• Analytics cookies: measure website traffic and usage trends
• Third-party cookies: may be set by analytics tools, embedded content, or future payment service providers

You may delete or block cookies through your browser settings, but some website features may not function properly as a result.

To operate our website and deliver our services, we may use trusted third-party services such as cloud hosting, domain and DNS services, website analytics, email services, WhatsApp communication tools, error monitoring, content delivery networks, database backups, and future online payment platforms.

These service providers may process information only to the extent necessary to provide their services and are subject to their own privacy policies, contractual obligations, and applicable laws. Where reasonably possible, we select providers with appropriate security and privacy measures.

We apply reasonable technical and organizational measures to protect personal information from loss, misuse, unauthorized access, disclosure, alteration, or destruction. While no internet transmission or storage system can be guaranteed to be completely secure, we continuously improve our protection measures based on the nature and risk of the information we handle.

• Use HTTPS encryption for communication between browsers and servers
• Apply access controls for admin systems, hosting platforms, and business tools
• Use strong passwords, multi-factor authentication, and role-based permissions where applicable
• Regularly update software, dependencies, and security patches
• Limit access to customer information to employees or service providers who need it for their work
• Use backups, logs, and monitoring to support recovery and security investigations
• Perform security reviews and vulnerability checks where appropriate

We retain personal information only for as long as necessary to fulfill the purposes described in this policy, provide ongoing support, perform contractual obligations, handle disputes, and meet accounting, tax, or legal requirements.

General enquiry information may be deleted or anonymized once it is no longer needed. Client project records, invoices, contracts, and support history may be retained for a longer period due to business and legal obligations. Once the retention period expires, we will securely delete, anonymize, or destroy the information.

We do not sell or rent your personal information. We only share information when necessary to provide services, operate our business, protect security, or comply with legal obligations.

• Service providers that support hosting, development, analytics, communication, backups, or payment processing
• Professional consultants or project partners where required and properly authorized
• Relevant authorities where disclosure is required by law, court order, or lawful regulatory request
• Relevant parties involved in a company restructuring, merger, or business transfer, subject to confidentiality obligations
• Parties involved in emergency situations where disclosure is necessary to protect the rights and safety of clients, the public, Nexora, or others

Depending on the laws applicable in your region, you may have the right to understand, access, correct, restrict, object to, obtain a copy of, or request deletion of the personal information we hold about you.

• Request confirmation of whether we process your personal information
• Request access to or correction of inaccurate or incomplete information
• Request deletion of information that is no longer needed or has no lawful basis for processing
• Withdraw consent that you previously provided
• Choose to stop receiving non-essential marketing communications
• Raise questions or complaints about how we process your information

To submit an access, correction, or deletion request, please email us at support@nexorastack.com. To protect your information, we may need to verify your identity. Some requests may be limited due to contractual obligations, legal requirements, security needs, or legitimate business record-keeping purposes.

Our services are intended for businesses and individuals who are legally capable of entering into contracts. They are not designed for children. We do not knowingly collect personal information from individuals under the age of 18. If you believe that a child has provided information to us without the consent of a parent or guardian, please contact us and we will review the matter and take appropriate deletion steps as soon as reasonably possible.

Some of the cloud hosting, analytics, communication, or technology service providers we use may process or store information outside Malaysia. Data protection rules in those countries may differ from those in your location.

Where cross-border transfers occur, we take reasonable steps to ensure that personal information receives appropriate protection. This may include using trusted service providers, contractual safeguards, access limitations, encryption, and industry best practices.

We may update this Privacy Policy from time to time due to changes in our services, technology, business needs, or legal requirements. The updated version will be published on this page with a new “Last Updated” date.

If changes materially affect how we use your personal information, we will provide notice where reasonably possible through our website, email, or other appropriate communication channels. We recommend reviewing this page periodically.

If you have questions about this Privacy Policy, our privacy practices, or the way we collect, use, store, or protect personal information, you may contact Nexora Software Solutions at support@nexorastack.com.

You may also contact us to request access to or correction of your personal information, ask us to review a privacy concern, or exercise any rights available to you under applicable data protection laws. Please provide enough information for us to understand and respond to your request.

We may ask you to verify your identity before processing a request involving personal information. We will review legitimate requests and respond within a reasonable period, subject to any legal, contractual, security, or record-keeping obligations that apply.