Privacy Policy
Last updated: September 2026
1. Data controller
Nexostrat Technologies Inc. ("Nexostrat"), a company incorporated under the laws of the state of Wyoming, United States, with registered address at 1908 Thomes Ave Ste 77077, Cheyenne, Wyoming 82001, United States, is responsible for processing the personal data it collects through nexostrat.com, the "Assess Your Business" test, the contact form, WhatsApp and the client portal.
Privacy contact: contacto@nexostrat.com | Telephone and WhatsApp: +52 663 441 0315.
This policy applies in compliance, as applicable, with Mexico's Federal Law on the Protection of Personal Data Held by Private Parties, Colombia's Law 1581 of 2012 and its implementing regulations, and applicable United States law.
2. Data we collect
- Contact form: name, email address, your company's website and your message.
- "Assess Your Business" test: your answers, the test result and score, full name, email address and, if provided, company, website and industry.
- WhatsApp: telephone number, profile name and messages you send us.
- Client portal: email address, access credentials and information you share as part of a project.
- Browsing: technical data such as IP address, browser, device, pages visited and analytics identifiers.
- Visit source: the page you came from, the landing page and campaign parameters (UTM), which are stored together with your request.
We do not request sensitive personal data. Please do not include it in your messages.
3. Purposes
a) Necessary to address your request:
- Respond to your inquiries and communicate with you.
- Show you the test result and schedule and conduct the free diagnostic.
- Analyze public information from the website you provide, your test answers and your message to identify improvement opportunities, including through artificial intelligence tools (section 5).
- Prepare proposals and, if you hire us, provide the service and manage the client portal.
- Maintain the security and operation of the website.
b) Optional, only with your consent:
- Send you commercial information, news, content and invitations from Nexostrat by email.
You may decline the optional purposes by leaving the corresponding box unchecked, using the unsubscribe link in each email or writing to contacto@nexostrat.com. Declining does not affect how we address your request.
4. Authorization
We process your data with the authorization you provide by accepting this policy in our forms, and to the extent necessary to address the request or relationship you initiate. We retain proof of your authorization (date and version of the policy accepted).
5. Use of artificial intelligence
We use Claude, by Anthropic, to analyze public information from the website you provide, your test answers and the content of your message, in order to prepare the diagnostic and our recommendations.
6. Service providers and transfers
We do not sell or rent your data. To operate the website and provide our services, we share data with service providers that process it on our behalf:
- Lovable: website development, hosting and analytics.
- Supabase: database for forms, tests and portal accounts.
- Odoo: contact, opportunity and client management (CRM).
- Anthropic (Claude): artificial intelligence analysis described in section 5.
- Email, productivity and communications service providers.
These providers may store or process data in the United States or other countries, which involves an international transfer. We work with providers that offer contractual security and confidentiality commitments.
When you use third-party services such as WhatsApp (Meta), YouTube (Google), LinkedIn or Instagram, or when the website loads Google Fonts, those third parties process your data under their own policies.
We may also disclose data when required by law or a competent authority.
7. Retention
- Individuals who do not become clients: up to 24 months from the last contact; the data is then deleted.
- Clients: for the duration of the contractual relationship and the additional period required by legal, accounting or tax obligations, or to address potential claims.
- Consent for commercial communications: until you withdraw it.
8. Your rights
At any time, you may:
- Know, access, update and correct your data.
- Request its cancellation or deletion.
- Object to its processing or limit its use or disclosure.
- Withdraw your authorization.
- Request proof of the authorization granted and be informed about how we use your data.
- File a complaint with the competent authority: in Mexico, the Secretariat of Anti-Corruption and Good Government; in Colombia, the Superintendency of Industry and Commerce, after completing the inquiry or complaint procedure with Nexostrat.
9. How to exercise your rights
Write to contacto@nexostrat.com with the subject "Privacy" and include: your name, a means to respond to you, a document proving your identity or that of your representative, a clear description of your request and, if you request a correction, the correct information.
We will respond to inquiries within a maximum of 10 business days and to requests for correction, deletion, objection or withdrawal within a maximum of 15 business days after receipt. If we need more time, we will notify you before the deadline, explain the reason and remain within the extensions permitted by law.
10. Cookies and similar technologies
The website uses a language preference cookie (nx_lang, which lasts one year), browser local storage and similar technologies necessary for its operation (for example, maintaining the client portal session), and the hosting provider's analytics tool (Lovable), which records website usage data. We do not use advertising cookies. YouTube videos load in privacy-enhanced mode and only when you press play. You may delete or block these technologies through your browser; some features may stop working.
"Do Not Track" signals: the website does not currently respond to these signals because it does not track users across websites for advertising purposes. Third parties such as YouTube may collect information about your activity on other websites under their own policies.
11. Security
We apply reasonable technical and organizational measures to protect your data against loss, misuse or unauthorized access. No system is completely secure.
12. Minors
The website is intended for businesses and professionals. We do not knowingly collect data from anyone under 18.
13. Changes to this policy
We will publish any changes on this page with the update date. If the change is material and we have your email address, we will notify you by email.
14. Effective date and language
This policy is effective as of September 2026. It is published in Spanish and English; in the event of any discrepancy, the Spanish version shall prevail.
