1. Controller
The controller for personal data collected through this website is “Nexus Atlas” Ltd, a single-member limited liability company registered in the Republic of Bulgaria — Commercial Register UIC (tax ID) 208756891 — reachable at office@nexusatlas.io.
2. Information we collect
- What you type into a form: name, work email, company, and the inquiry, deployment or region description you choose to give.
- Security and technical records needed to protect the website and diagnose failures: timestamps, request metadata, and abuse signals.
- Nothing else rides along: the forms carry a honeypot field instead of a tracking script, there is no marketing list, and reading this site sends no data to third parties. Hosted traversal relays never collect decrypted application payloads — that boundary is described on the security page.
3. Purposes and legal basis
We process inquiries in order to answer them, assess pilot or customer fit, and prepare the services you ask about — as steps taken at your request prior to a contract (GDPR Art. 6(1)(b)) and on our legitimate interest in responding (Art. 6(1)(f)). Security and abuse records rest on our legitimate interest in keeping the site working (Art. 6(1)(f)). Where a service moves under contract, processing rests on that contract.
Please keep sensitive or classified operational details out of public web forms — the forms say the same.
4. Recipients and international transfers
Data is handled by authorized Nexus Atlas personnel and by processors bound by data-processing agreements: Google Cloud (hosting, EU region) and Twilio SendGrid (delivery of form submissions to our inbox). SendGrid and Google may process data in the United States; those transfers rest on the EU–US Data Privacy Framework and standard contractual clauses.
We do not sell personal information and do not provide inquiry data to advertisers.
5. Retention and security
Inquiry correspondence is kept as long as the conversation and any engagement that follows require — as a rule no longer than 24 months after the last exchange, unless a contract or a legal obligation keeps it. Security and abuse records are kept up to 12 months. Access controls, authentication, encryption in transit and deletion procedures are proportionate to the information held; no website can promise absolute security.
6. Your rights
You may request information, access, correction, erasure, restriction, portability, or object to processing based on legitimate interest; where processing rests on consent, you may withdraw it. Requests may require identity verification.
You may also lodge a complaint with the Bulgarian supervisory authority — the Commission for Personal Data Protection, cpdp.bg — or with the authority in your own country of residence.
7. Contact and changes
Privacy questions and rights requests go to office@nexusatlas.io. Material changes to this notice are reflected by an updated effective date on this page.
For general EU data-protection information, see the European Commission’s information for individuals.