Privacy policy.
What this policy covers and who we are.
Nexibis Studio is the agency arm of Nexibis, Inc. ("Nexibis", "we", "us"). This policy explains what information we collect when you visit nexibis.com, contact us about a project, or work with us on an engagement, and how we handle that information.
If you only ever read our marketing pages and never get in touch, the short version is: we collect very little about you, we do not sell it, and you can ask us to delete what we do have at any time.
The categories of data we touch.
Information you give us directly
When you email us, fill out a contact form, or schedule a call, we receive whatever you choose to send: typically your name, work email, the company you represent, and a description of what you're building. If we move into an engagement together, we also receive whatever access or material the project requires (design files, repositories, codebase credentials, internal documentation).
Information collected automatically
When you visit our site, our hosting provider receives standard HTTP request data: IP address, browser type and version, operating system, referring URL, pages visited, and timestamps. We use this for security monitoring and to understand which pages people actually read.
Information from third parties
We do not buy contact lists or enrich your data from data brokers. The only third-party data we receive is what comes through tools you actively use to reach us (for example, a scheduling service you choose to book a call through).
What we do with what we hold.
- Respond to enquiries:answer your questions, send scoping documents, schedule calls, send proposals.
- Deliver engagements:operate the project we've agreed to, communicate with your team, deliver work product, invoice you.
- Maintain our site:keep it online, fix bugs, protect against abuse, understand which pages are useful.
- Meet legal obligations:keep accounting records, respond to lawful requests, enforce our contracts.
We do not use your information for advertising, behavioural profiling, or to train machine-learning models.
What we set in your browser.
We use only strictly necessary cookies needed to keep the site working. Never advertising cookies, cross-site trackers, or behavioural profiling.
Where we use analytics to understand which pages are read, we choose tools that record only anonymised, aggregated information, with no persistent cookies and no individual identification. We honour the Do Not Track signal sent by your browser.
Who else sees what we hold.
We share information only with the parties needed to operate Nexibis Studio:
- Service providers:our email host, cloud and hosting provider, payment processor, and similar vendors, each under a confidentiality and data-processing agreement.
- Project subcontractors:occasionally a specialist who is bound by the same confidentiality terms we are bound to under our engagement letter with you.
- Legal & safety:where required by law, court order, or to protect rights and safety.
- Successor entities:in the event of a merger, acquisition, or sale of assets, your information would transfer to the successor, subject to this policy.
We do not sell or rent personal information.
How we protect what we hold.
We take security seriously because our clients ask us to. TLS in transit, encryption at rest where supported, principle-of-least-privilege access, MFA on every team account, regular review of who has access to what. Project-specific credentials live in a vault, not in chat or email.
No system is invulnerable. If we ever experience a breach affecting your information, we will notify you and the relevant authorities promptly and in accordance with applicable law.
How long we keep things.
- Enquiries that don't become projects:12 months, then deleted.
- Active engagement records:duration of the engagement plus the retention period required by our contract with you.
- Accounting & tax records:as long as required by law in our operating jurisdictions (typically 7 years).
- Server logs:30 days, then rotated.
You can ask us to delete your information at any time, subject to legal retention requirements above.
What you can ask us to do.
Depending on where you live (GDPR in the EU/UK, CCPA in California, and equivalents elsewhere), you have rights including:
- Access:receive a copy of the information we hold about you.
- Correction:ask us to fix inaccurate or incomplete information.
- Deletion:ask us to delete information we no longer need to keep.
- Portability:receive your information in a structured, machine-readable format.
- Restriction & objection:ask us to stop or limit certain processing.
- Withdraw consent:where processing is based on consent, withdraw it at any time.
To exercise any of these, email hello@nexibis.com. We respond within 30 days. You also have the right to complain to your local data-protection authority.
Where your data is processed.
Some of our service providers process data outside your country of residence. Where applicable law requires it, we rely on Standard Contractual Clauses, adequacy decisions, or equivalent mechanisms to lawfully transfer personal data internationally.
We don't knowingly collect data about children.
Our services are aimed at businesses, not individuals under 16. We do not knowingly collect personal information from children. If you believe we have, please contact us and we will delete it.
How we tell you when this changes.
We may update this policy as the business evolves or as the law requires. The "Effective" date at the top of this page always reflects the current version. For material changes that affect how we handle existing data, we will notify you by email where we have one on file and by a prominent notice on this page.
Where to reach a human.
For privacy questions, requests, or complaints:
Email:hello@nexibis.com
Business enquiries:business@nexibis.com
If you're contacting us about a privacy matter specifically, please put "Privacy" in the subject line so it routes to the right person quickly.