Privacy policy

NEXORA operates as NEXORA Technologies Corp., a digital systems consultancy based in Calgary, Alberta, Canada. We respect your privacy and handle personal information in accordance with Alberta's Personal Information Protection Act (PIPA) and the federal Personal Information Protection and Electronic Documents Act (PIPEDA).

This policy covers this public marketing website (nexorayyc.io). Commercial client engagements, enterprise software pilots, and custom application deployments are governed by separate, signed agreements.

When you contact us through our website form, we collect your name, email address, company name (if provided), and the content of your message.

To prevent spam and denial-of-service abuse, we record your IP address in a cryptographically hashed format (SHA-256) to monitor request frequency. Our cloud hosting infrastructure also generates standard, temporary technical server logs (including timestamp, browser user agent, and requested URL).

This public marketing website does not use tracking cookies, advertising pixels, or third-party web analytics. On the /capital-os sandbox page only, we set a functional, strictly necessary HttpOnly; Secure quota cookie (nx_cap_demo_used) to enforce the one-search evaluation limit.

When a visitor executes a single evaluation search on /capital-os, our server queries public commercial business listing information (such as business name, category, published telephone number, website URL, and public rating counts via Google Maps / Places). We do not crawl third-party business websites to harvest email addresses, and we do not maintain or resell a permanent database warehouse of Google Maps business listings.

Brokers who subscribe to NEXORA Capital OS act as independent data controllers for their own deal pipeline and outreach activities and are contractually required to comply with Canada's Anti-Spam Legislation (CASL), PIPEDA, Alberta PIPA, and National Do Not Call List (DNCL) rules.

We use your information solely to review your enquiry, communicate with you about your request, and maintain an accurate business record of communications. We do not sell, rent, or trade your personal information, and we do not add your details to marketing email lists without express consent.

When you submit an enquiry, an artificial intelligence service (Groq API) may process your message text and name solely to assist in drafting an immediate automated acknowledgement. A human representative from NEXORA reviews your message and conducts all follow-up correspondence. Under our service agreement, your submission is not used to train public AI models.

We use trusted cloud infrastructure providers to operate this website:

• Vercel Inc.: Website hosting and edge content delivery.
• Supabase Inc. (AWS): Cloud database storage for contact enquiries.
• Upstash Inc.: Rate limiting and anti-spam verification.
• Groq Inc.: Automated acknowledgement generation.
• Hostinger: Transactional email transmission.
• Google LLC (Google Maps Platform / Places API): Public business listing lookups in the Capital OS sandbox.

Some of these providers maintain infrastructure located in the United States. Consequently, your personal information may be stored or processed outside Canada and may be subject to the lawful access requests of courts, law enforcement, and national security authorities in those jurisdictions.

We retain business enquiry records only as long as necessary to address your request and satisfy basic corporate record-keeping requirements. You may request the permanent deletion of your enquiry records at any time by contacting us.

We employ administrative and technical safeguards, including HTTPS encryption in transit, strict rate limiting, and restricted internal access, to protect your personal information against unauthorized access, collection, use, disclosure, or disposal. If a security incident occurs that creates a real risk of significant harm, we will promptly notify affected individuals and the relevant privacy commissioner in compliance with PIPA and PIPEDA.

Under Alberta PIPA and Canadian privacy law, you have the right to request access to the personal information we hold about you, request corrections to inaccurate details, or withdraw your consent. To exercise any of these rights, contact our Privacy Officer:

We may update this policy periodically to reflect changes in our technology or legal requirements. Material updates will be posted to this page with an updated revision date.