Privacy Policy

1. About this policy

Nextaura LLC is a Kentucky limited liability company. We offer website, software, design, and related services to individuals and businesses internationally.

Company address: 212 N 2nd St Ste 100, Richmond, KY 40475-1408, United States.

For privacy questions or requests, email info@nextaura.dev. For a new project inquiry, use contact@nextaura.dev.

This policy covers nextaura.dev and service inquiries. Separate client-project processing, such as access to a client’s customer database, must be addressed in the relevant agreement and privacy information.

2. Information we collect

The inquiry form requires your name, email address, service selection, and project outline. A company name is optional. We also receive information included in your related correspondence.

The form does not accept attachments, subscribe you to marketing, or send an automatic reply. Please do not submit passwords, access tokens, payment-card information, identity documents, sensitive personal information, or confidential client records.

Anti-abuse checks use keyed identifiers derived from the connection IP address and submitted email address. The form’s rate-limit storage does not keep the raw IP address. These identifiers are not the same as anonymous data. Separate website access logs include the client address, timestamp, requested URL, status, referrer, and browser user agent. Mail logs can include sender and recipient addresses, delivery status, connection addresses, and mailbox-login details.

3. Why we use information

We use inquiry details to understand and respond to your request, discuss requirements, prepare a proposal where appropriate, and maintain relevant correspondence. Technical checks help prevent repeated or abusive submissions and support website operation.

Where EU or UK data-protection rules apply, necessary steps you request toward a contract are based on pre-contractual or contractual necessity. Managing inquiries from business representatives and protecting the site are based on our legitimate interests, subject to the protections required by law. Processing necessary to comply with a relevant legal obligation is based on that obligation.

The inquiry form is not used to make solely automated decisions with legal or similarly significant effects. Any separate use requiring consent would need its own appropriate notice and consent process; sending an inquiry is not consent to unrelated marketing.

4. Storage and access

Submissions are stored as private inquiry records in our WordPress installation. Authorized WordPress administrators can access them; they are not published as website content.

A notification containing the submitted details and an internal reference is sent to our own contact mailbox. The supplied name and email address are used as the reply contact. Both the website and our self-hosted mail system run on company-controlled infrastructure hosted by OVH in Canada. OVH supplies the hosting infrastructure; the inquiry form and mailbox are operated by Nextaura LLC.

Nextaura is a United States company and its website and mailbox data are hosted in Canada. If you are elsewhere, this means your information is processed outside your country. Authorized administrators may access the systems to handle inquiries and maintain them. Contact info@nextaura.dev for questions about these arrangements and any applicable data-transfer protections.

5. Retention

Inactive inquiries that do not become projects, together with their related email correspondence, will be retained for no more than 12 months after the last substantive contact. They may be removed earlier where an applicable deletion right requires it.

If an inquiry becomes part of an agreed project, relevant records move to the retention arrangements for that engagement. A documented legal retention obligation or a specific dispute may require particular records to be held longer; an exception is not a reason to keep unrelated inquiry information.

We manage the inquiry retention period through a documented manual review process covering the website records and related email. The form and mailbox do not automatically delete inquiry messages after a fixed period. Documented legal or dispute holds are considered separately during review.

Operational logs and anti-abuse records are separate from inquiry correspondence. Website logs rotate by size, not after a fixed number of days. Mail server logs currently have no fixed-time expiry and remain until removed through administration. Anti-abuse checks use short enforcement windows, but their cleanup is separate, so the end of a window is not a guaranteed deletion time.

You may contact us to ask for a retention review or deletion of your information, subject to applicable law.

6. Cookies and tracking

The public inquiry form does not use third-party analytics, advertising trackers, or an external form provider. Its script does not set cookies or use browser storage. The public interface uses locally served assets, system fonts, and inline graphics rather than remote font services or embedded media.

Form security checks are used to prevent misuse. Administrative sign-in and other technical sessions can have separate cookie requirements; this policy does not claim that every administrator or authenticated session is cookie-free.

7. Your choices and rights

Contact info@nextaura.dev to ask about your information or make a privacy request. Depending on applicable law, you may have rights to access, correct, delete, restrict, object to, or obtain a portable copy of personal information. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing.

We may need reasonable information to verify a request. Please do not send identity documents in your first message. Requests will be handled under the deadlines and conditions of the law that applies.

Where applicable, you may complain to your local data-protection authority. Individuals in the United Kingdom may contact the Information Commissioner’s Office; individuals in the European Economic Area can find their authority through the European Data Protection Board.

8. Security and updates

No website or communication method can be guaranteed completely secure. Keep sensitive records and credentials out of ordinary inquiry messages.

We update this policy when our information-handling practices change. Any additional notice or other step required by applicable law will apply to a material change.