Legal
Privacy Policy
This privacy policy explains what ApexGenTech collects, why we use it, and the rights you have over your data.
Privacy policy summary
Effective date: 1 January 2026 · Last updated: 1 August 2026
In short: for our website, ApexGenTech Inc. is the data controller. For data your organisation’s users put into the Nexora platform, your organisation is the controller and ApexGenTech is the processor acting on your instructions. See section 3 for what that means.
1. The basics
The data controller for this website is ApexGenTech Inc., [registered company address and registration number]. To contact us about privacy, write to privacy@apexgentech.com. This policy has an effective date and a last updated date, both shown above; we will update the “last updated” date and, where changes are material, notify you by a notice on this page and, where we hold your email address, by email at least 14 days before the change takes effect.
2. What we collect
Information you give us directly: contact form and demo request details, account information, and support messages. Information collected automatically: device and browser information, IP address, pages visited, and referring site. Cookies and similar technology, described fully in our Cookie Policy. For platform customers, the data your own users enter into Nexora: incident records, permits, training records and the like.
3. Controller and processor: a distinction that matters
For visitors to this website, ApexGenTech decides why and how personal data is used, and is the controller. For data your organisation’s users put into the Nexora platform, your organisation is the controller: it decides what’s collected and why, and ApexGenTech is the processor, acting only on your organisation’s instructions under our agreement with you and, where applicable, a data processing agreement referencing the standard contractual clauses.
4. Why we use it
To respond to enquiries and demo requests (based on your consent or our legitimate interest in answering you), to provide and support the Nexora service (to perform our contract with you), for billing (contractual necessity and legal obligation), for security (legitimate interest), to improve our product and website (legitimate interest), and for marketing where permitted (consent, where required by law).
5. Sharing and subprocessors
We share data with service providers who support our operations: hosting and infrastructure providers, email delivery services, and analytics providers. Each is bound by a written agreement requiring confidentiality and appropriate security. A current subprocessor list is available on request at privacy@apexgentech.com, and we will notify existing customers of any new subprocessor with a reasonable opportunity to object before it goes live.
6. International transfers
Data may be transferred to and processed in countries other than your own, including outside the European Economic Area and the United Kingdom. Where this happens, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, and we select hosting infrastructure providers that maintain recognised international security certifications.
7. How long we keep it
We keep personal data only as long as needed for the purposes described above, or as required by law. Enquiry and demo request data is kept for up to 24 months if no customer relationship results. Platform data is retained for the life of your subscription and for up to 90 days after termination to allow export, after which it is deleted or anonymised, per your organisation’s agreement with us and section 9 below.
8. Security
We use encryption in transit and at rest, role based access controls, and mandatory two factor authentication for every Nexora user. Backups run automatically and offsite, in a separate region, with periodic restore testing. We do not publish infrastructure details such as server locations at address level, as a matter of security practice.
9. Your rights, by region
EU and UK (GDPR): you have the right to access, rectify, erase, restrict, port, and object to processing of your data, and to withdraw consent at any time. You can complain to your supervisory authority. Our data protection contact can be reached at privacy@apexgentech.com.
UK specific: you may also complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
California (CCPA/CPRA): you have the right to know what’s collected, to delete it, to correct it, to opt out of sale or sharing, and to limit use of sensitive personal information, without discrimination for exercising these rights. We do not sell personal information, and we do not share it for cross context behavioural advertising. Do Not Sell or Share My Personal Information.
Other US states (Virginia, Colorado, Connecticut, Utah, Texas and similar): you generally have rights to access, correct, delete and opt out of certain processing of your personal data under your state’s law; contact us using section 12 below to exercise them.
Australia (Privacy Act / APPs): you can request access to and correction of your information, and complain to us or, if unresolved, to the Office of the Australian Information Commissioner (OAIC).
Canada (PIPEDA): we rely on your consent where required, and you can access your information and complain to us or to the Office of the Privacy Commissioner of Canada.
10. Children
Our website and Nexora are not intended for children, and we do not knowingly collect personal data from children under 16.
11. Automated decision making
ApexGenTech does not use personal data to make any decision with a legal or similarly significant effect on you without human involvement. Some Nexora screens offer suggestions to help a user work faster; these are informational only and every decision remains with your organisation’s own staff.
12. Exercising your rights
To exercise any of the rights above, contact us at privacy@apexgentech.com. We aim to respond within 30 days. We may need to verify your identity before acting on a request, and where you are a user of a customer’s Nexora account, we may direct your request to that organisation as the data controller.
In plain language
This policy in plain language
Legal documents are written to be precise, which does not always make them easy to read. This short guide explains the main ideas in everyday words. If this guide and the numbered sections above ever differ, the numbered sections are the binding text.
We collect the information you give us, such as your name, email address, company and message when you contact us or book a call, plus basic technical information that your browser sends automatically. We use it to answer you, to run and secure our website and services, and to improve them. We do not sell your personal data.
If you or your organisation use Nexora, there are two different roles. For our website, we decide why and how personal data is used. For the information your own users enter into Nexora, your organisation decides what is collected and why, and we handle it only on your instructions. That is why we keep each customer’s data separate from every other customer’s.
Your rights
What you can ask us to do
Depending on where you live, the law gives you rights over your personal data. We honour them for everyone, wherever you are, to the extent we reasonably can.
To use any of these, write to privacy@apexgentech.com. We will confirm that it is really you, answer within the time the law requires, and tell you if we cannot do something and why. If you are not happy with our answer, you may also complain to your local data protection authority.
Six things you can ask for:
- See it: ask what personal data we hold about you and how we use it.
- Correct it: ask us to fix anything that is inaccurate or incomplete.
- Delete it: ask us to erase your data, unless we need to keep it for a legal or contractual reason.
- Limit or object: ask us to restrict how we use it, or to stop using it for marketing.
- Take it with you: ask for a copy in a common format.
- Withdraw consent: change your mind at any time where we rely on your consent, including cookie choices.
Protection
How we protect personal data
Protecting data is part of how we build, not a paragraph added to a policy. The platform runs on secure servers with encrypted connections. Each customer is a private tenant, separated from every other at the database layer. Two factor authentication is mandatory for every Nexora user. Stored credentials are encrypted, administrator actions on sensitive features are recorded, and backups are encrypted and stored offsite in a different region.
Within ApexGenTech, access to personal data is limited to the people who need it to do their work. If we ever suffer a data breach that affects you, we will tell you and the relevant authorities as the law requires. For more detail, see our security and data page.
Making a request
How to make a privacy request
- 1
Write to us
Email privacy@apexgentech.com and say what you would like us to do.
- 2
We confirm it is you
A simple check so that your data is never given to the wrong person.
- 3
We look into it
We search our systems and our service providers, where relevant.
- 4
We reply in time
Within the period the law requires, with a clear answer.
- 5
We follow up
If anything cannot be done, we explain why and what your options are.
Related: Related policies: our Cookie Policy explains the cookies on this site, our Terms of Service set out the agreement with customers, and our security and data page describes how Nexora protects information.
FAQ
Privacy policy FAQs
Do you sell my personal data?
No. We do not sell personal data. We share it only with service providers who help us run our operations, under written agreements that require confidentiality and appropriate security.
Who is responsible for data entered into Nexora?
Your organisation is the controller of the data its users enter into Nexora, and ApexGenTech acts as the processor on your instructions. For our own website, ApexGenTech is the controller.
How do I ask you to delete my data?
Email privacy@apexgentech.com. We will confirm your identity, delete what we can, and tell you if we need to keep anything for a legal or contractual reason.
Can I stop receiving marketing messages?
Yes. You can unsubscribe at any time using the link in a message, or write to privacy@apexgentech.com, and we will stop.
Where is my data stored?
Hosting and infrastructure are provided by trusted service providers, and data may be processed outside your country with appropriate safeguards, as described in section 6 above. A current list of providers is available on request.