Privacy Policy — Nexxt Intelligence
Effective Date: March 8, 2025
Introduction
At Nexxt Intelligence we are committed to safeguarding your personal information while you interact with our services. This Privacy Policy details how we collect, use, disclose, and protect your personal information on our public website (https://www.nexxt.in), our inca Platform (https://inca.nexxt.in), the inca API (https://api.inca.chat), and any other applications or websites operated by Nexxt Intelligence. Collectively, we will refer to these as the “Services.”
Definitions
Nexxt Intelligence: the operating name of Nexxt Intelligence Inc., a market research technology company registered in Canada. Terms like “we”, “us”, and “our” also refer to Nexxt Intelligence.
Customer: any individual or organization holding a Service license with us.
Authorized User: refers to any user who has been issued a service account associated with a Customer’s license.
Survey Participant: any user interacting with a survey hosted or powered by Nexxt Intelligence’s Services.
Visitor: any individual visiting our website(s) or signing up to our newsletter(s).
Personal Data: information relating to an identifiable living individual, either on its own or in conjunction with other information. Terms like “personal information,” “information,” and “data” also refer to Personal Data.
Device and Browser Data: information collected from the device and application used to access our Services, including IP address, operating system, device type and identifiers, browser type and configuration, and inferred geographic location.
Survey Data: information inputted by Authorized Users and Survey Participants specific to a Customer’s license, as well as the derivative data specifically generated for the provisioning of our Services to said Customer.
How we use the Personal Data we collect
All the data that we collect is for three main purposes:
Fulfilling our contractual obligations to provide Services to our Customers;
Legitimate interest in improving our Services by using anonymized/aggregated data;
Legal obligations.
The specific data that we collect, and how we use it, will depend on what type of user you are.
Authorized Users
| Data Collected | Example | Purpose |
|---|---|---|
Account and customer support information | First name, last name, email address, job title. | We use your account data to manage your services, process billing, resolve disputes, and provide necessary communications. |
Cookies | Session id. | We use cookies and local storage for authentication purposes. Please see our Cookie Notice for more information. |
Usage information | Actions taken on AI Coding app. | We analyze service usage to meet contractual obligations, improve user experience, and make personalized recommendations. |
Device and browser data | User agent and IP address of authorized user. | Used for troubleshooting, service improvement, and enforcing security policies. |
Integration data | IP address of server making request to inca SmartProbe API. | Collected to facilitate and troubleshoot third-party integrations made with our Services. |
Survey data | Questions and analyzed responses from an inca survey. | Survey data is collected and used for the facilitation and processing of surveys by our Services. |
Aggregated and/or de-identified survey data | Anonymized survey data. | For clients who have consented to use anonymized survey data to improve our Services, we may use their survey data for machine learning or for other product improvement purposes. We have contractual agreements in place to prevent our data subprocessors from using data that we process for this purpose. |
Survey Participant
| Data Collected | Example | Purpose |
|---|---|---|
Contact information | Name and email address. | We only use contact information to respond to an inquiry on behalf of a Customer if you, as a Survey Participant, contact us. |
Cookies | Session id. | We use local storage for survey data collection. Please see our Cookie Notice for more information. |
Usage information | Features used. | We study usage information to better understand how users interact with our surveys, and we use these insights to improve our Services. |
Device and browser data | IP address, inferred geographic location. | We use device data both to troubleshoot problems with our services and to make improvements to it. We provide your device and browser data as part of our Services to our Authorized Users, including preventing multiple survey completes or fraud detection. |
Survey data | Responses which you provide to a survey, which may include personal data you have shared such as voice or video recordings. | Your responses to surveys are collected, stored, analyzed, and shared with Authorized Users of our Services for market research purposes. |
Aggregated and/or de-identified survey data | Survey responses with personal information removed. | Anonymized survey data may be used for the purpose of product improvement including via machine learning. |
Visitor
| Data Collected | Example | Purpose |
|---|---|---|
Contact information | Name and email address. | If you send us a message or subscribe to our newsletter, we will use your contact information to respond to your inquiries and/or to send you information about our services. You may opt out of marketing materials at any time. |
Cookies | Session id. | We use cookies for website analytics. Please see our Cookie Notice for more information. |
Usage information | Pages visited. | We study usage information to better understand how users interact with our website, and we use these insights to improve our Services. |
Device and browser data | IP address, inferred geographic location. | We use device and browser data to troubleshoot problems with our website and to understand usage patterns. |
How we share or disclose Personal Data
Information you share
Be mindful that public surveys can be indexed by search engines. Our services offer options for sharing and deleting content, but we cannot remove content from search engines.
Information we share
We share your data exclusively for the following purposes:
With Authorized Users with the relevant permissions;
With trusted data subprocessors for Service provision and support (you can see our full list of subprocessors here);
To comply with legal obligations, protect rights, or in case of company changes like mergers.
We may also share aggregated and/or de-identified survey data in publications when consent has been obtained from the relevant parties.
Data Retention
We retain Survey Data and other Customer data as long as you are a client. Upon request or termination of your agreement, data may be deleted within 30 days, barring legal restrictions.
We also describe the expiry periods for cookies on our websites in our Cookies Notice.
Security
We process your data following standard security best practices aligned with ISO-27001. Please refer to our Technical Overview for information on the security procedures in place to protect your data.
Safety of Minors
Our Services (including creating and responding to surveys) are not intended for and may not be used by minors except in special circumstances. “Minors” are individuals under the age of 16 (or under a higher age as provided in certain countries or territories). Nexxt Intelligence does not knowingly collect Personal Data from Minors or allow them to register for our services. If it comes to our attention that we have collected Personal Data from a Minor, we may delete this information without notice. If you have reason to believe that this has occurred, please contact customer support. In special circumstances, our Services may be used if it is ensured that no personally identifying information is being collected, that subjects and/or their legal guardians provide opt-in consent, and that any other relevant jurisdictional and ethical requirements: please contact dpo@nexxt.in to inquire for more information.
Data Transfers
We are committed to safeguarding your personal data when it is transferred internationally. Below, we outline how we handle data transfers to ensure compliance with data protection regulations.
International Transfers
Unless specified otherwise, all personal data collected through our Services is transferred to, processed, and stored in the United States. The United States may not have the same data protection laws as your country, but we take measures to ensure that your privacy rights continue to be protected.
Legal Basis for Transfers
For transfers of personal data from the European Economic Area (EEA) to the United States, we rely on Standard Contractual Clauses (SCCs) as the legal basis for such transfers. These clauses are designed to ensure that your data receives the same level of protection as it would within the EEA.
Third-Party Processors
We engage with several data subprocessors located in the United States to support the delivery of our Services. Each subprocessor is subject to a rigorous vendor assessment process to ensure compliance with our data protection standards. For more information on our subprocessors, please refer to our list of authorized subprocessors.
Data Protection Measures
We implement industry-standard security measures to protect your personal data during transfer and storage. These measures are detailed in our Technical Overview and are aligned with best practices, including encryption and access controls.
User Rights and Information
We are committed to transparency regarding our data transfer practices. You have the right to contact us for more information about the safeguards we have in place for data transfers. If you have any concerns about our data transfer practices or wish to exercise your rights, please contact our Data Protection Officer at dpo@nexxt.in.
By using our Services, you consent to the transfer of your personal data to the United States and the application of the safeguards described above.
Who is my data controller?
If you are a Survey Participant, then the Customer managing the survey you participated in is the controller of your data, and Nexxt Intelligence is the processor of that data. In some cases, Nexxt Intelligence may directly manage surveys, in which case we are the data controller.
For Customers, your organization is the Controller for basic account level information which you input when setting up your account like name and email address. For any other personal information collected, such as your IP address, Nexxt Intelligence. is the processor.
Your Rights
At Nexxt Intelligence, we respect your rights concerning your personal data and are committed to facilitating the exercise of these rights as provided under applicable data protection laws, including the GDPR for users in the European Economic Area (EEA). Below is a summary of your rights and how you can exercise them:
Right to Access
You have the right to request access to the personal data we hold about you. This includes information on how your data is being used, the purposes of processing, and any third parties with whom your data has been shared.
Right to Rectification
If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update this information.
Right to Erasure
Also known as the "right to be forgotten," you can request the deletion of your personal data, subject to certain conditions. We will comply with such requests unless we are required to retain the data for compliance with legal obligations or other legitimate purposes.
Right to Restrict Processing
You may request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to its processing.
Right to Data Portability
Where applicable, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that we transmit this data to another data controller where technically feasible.
Right to Object
You have the right to object to the processing of your personal data if such processing is based on legitimate interests or for direct marketing purposes. We will cease processing your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms.
Right to Withdraw Consent
If you have provided consent for the processing of your personal data, you have the right to withdraw your consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
Right to Lodge a Complaint
If you believe that your rights concerning your personal data have been violated or if you are unsatisfied with how we have handled your data, you have the right to lodge a complaint with a supervisory authority, particularly in the EEA country where you reside or work, or where the alleged infringement occurred.
Exercising Your Rights
To exercise any of your rights, please contact our Data Protection Officer at dpo@nexxt.in. We may need to verify your identity before processing your request, and we will respond to your request in accordance with applicable data protection laws.
We are committed to ensuring that your rights are upheld and that your personal data is handled with the utmost care and respect. Your privacy is important to us, and we are here to help you with any inquiries or concerns you may have regarding your data.
Additional Jurisdictional Rights
California Consumer Privacy Act (CCPA)
For residents of California, USA, the California Consumer Privacy Act (CCPA) provides additional rights:
Right to Know: You have the right to request information about the categories and specific pieces of personal data we have collected about you, the sources of that data, the purpose for collecting it, and the third parties with whom we share it.
Right to Deletion: Similar to the GDPR, you can request the deletion of your personal information, subject to certain exceptions.
Right to Opt-Out: You have the right to opt-out of the sale of your personal data. Note that we do not sell personal data.
Right to Non-Discrimination: Exercising your rights under the CCPA will not result in any discriminatory treatment.
To exercise these rights, please contact us at dpo@nexxt.in.
Personal Information Protection and Electronic Documents Act (PIPEDA)
For individuals in Canada, the Personal Information Protection and Electronic Documents Act (PIPEDA) provides rights similar to the GDPR, including:
Right to Access and Correction: You can request access to and correction of your personal data.
Right to Withdraw Consent: You can withdraw consent to the processing of your personal data at any time.
Please contact us at dpo@nexxt.in to exercise your rights under PIPEDA.
Brazilian General Data Protection Law (LGPD)
For individuals in Brazil, the Lei Geral de Proteção de Dados (LGPD) provides rights such as:
Right to Confirmation and Access: You can request confirmation of the existence of processing and access to your data.
Right to Anonymization, Blocking, or Deletion: Similar to GDPR, you can request the anonymization, blocking, or deletion of unnecessary or excessive data.
Right to Information: You have the right to information about public and private entities with which we have shared your data.
To exercise these rights, please contact our Data Protection Officer at dpo@nexxt.in.
Other Jurisdictions
We are committed to complying with data protection laws applicable in other jurisdictions where we operate. If you are located outside the EEA, California, Canada, or Brazil, and have questions about your rights, please contact us at dpo@nexxt.in for more information.
Contact
Nexxt Intelligence’s Data Protection Officer (DPO) is Josh Seltzer. You can contact the DPO at dpo@nexxt.in.