Privacy policy

1. Who is responsible?

The website is operated by Nexora AI. Privacy contact: [Add a monitored privacy contact email or contact method before publication.] Do not publish this policy as final until this contact is completed.

2. Information submitted in project enquiries

If you submit a project enquiry, the form may process your name, email address, optional business or project name, selected service, optional budget and deadline, project goal, optional HTTPS reference URL, your consent choice and timestamp, and a submission timestamp. The service also uses a one-way hash of the connection IP address for abuse prevention; it is designed not to store the raw IP address in the enquiry record. Do not submit passwords, API keys, payment card data, identity documents, or other sensitive information.

The enquiry form includes a hidden honeypot field to help detect automated submissions. The intake service validates submitted values, limits request size, and applies a rate limit. These controls do not guarantee that every spam submission will be blocked.

3. Why information is used

• To receive, review, and respond to project enquiries.
• To understand the service requested and any deadline or reference link supplied.
• To record consent and help prevent abuse or excessive submissions.
• To operate, secure, and troubleshoot the website and submission service.

4. Hosting and service providers

The public website is hosted at nexora-ai-public.onrender.com. The online enquiry path uses a Cloudflare Worker and Cloudflare D1 database when configured. If notification settings are configured, enquiry notifications may be sent using Resend to the operator's notification inbox. These providers process information as needed to deliver their services under their respective terms and privacy policies. Confirm current account settings and any cross-border processing before publication.

5. Google Analytics and cookies

The website includes consent-gated analytics code intended to use Google Analytics 4 (GA4) only after the visitor chooses “Allow analytics.” The analytics Measurement ID is supplied through server configuration; if it is missing or invalid, GA4 remains inactive. The consent control offers “Only necessary” and “Allow analytics,” and visitors can reopen “Cookie settings” to change their choice. Global Privacy Control and Do Not Track signals prevent optional analytics from loading in the current implementation.

If enabled after consent, Google Analytics may process online identifiers, device/browser information, page views, approximate location derived from network information, traffic source, and engagement information according to Google's configuration and policies. The form implementation should not send names, email addresses, project goals, or other enquiry fields as analytics event parameters. Review the GA4 property settings, retention controls, Google Signals and advertising settings before publication.

Analytics is optional. Choosing “Only necessary” keeps optional GA4 analytics disabled. Necessary storage may be used to remember the visitor's analytics choice and support basic site security or functionality.

6. Who receives information?

Enquiry data is available to the authorised Nexora AI operator and the service providers described above where they are configured. The website code is designed not to publish enquiry records publicly or sell them. Information may also be disclosed if required by law or to protect the service and its users. Confirm actual access permissions and vendor configurations before publication.

7. Retention and security

Keep enquiries only as long as reasonably necessary to respond, manage a proposed engagement, resolve disputes, and meet applicable record-keeping obligations. The exact retention period must be set by the operator: [Specify the retention period and deletion schedule.] Deleting a database record may not remove email copies already delivered to an inbox; those copies must be handled separately. Reasonable technical and organisational safeguards are used, but no internet transmission or storage system can be guaranteed completely secure.

8. Your choices and requests

You can choose not to submit the enquiry form and can decline optional analytics. To request access, correction, or deletion of an enquiry, contact [Add privacy contact] and provide the submission reference if available. Do not send passwords or sensitive documents. Applicable rights depend on your location and the law that applies.

9. International processing and updates

Service providers may process information in countries other than your own. Confirm the applicable transfer safeguards and vendor terms. This policy may be updated when the website, providers, or processing practices change. The date above indicates the last review date, not a guarantee that every legal requirement has been assessed.