1. Who we are
NexFlow provides AI automation, workflow automation, system integration, dashboard, portal and custom software services. NexFlow is the controller of the personal data described in this statement unless a separate agreement identifies another controller.
You can contact us about privacy at hello@nexflowautomate.com.
2. When this statement applies
This Privacy Statement applies when you visit nexflowautomate.com, submit a contact or Automation Scan request, communicate with us, request a proposal, become a customer or otherwise interact with NexFlow.
When we process personal data solely on a customer's instructions as part of an automation or software service, that customer is normally the controller and NexFlow acts as a processor. That processing is governed by the customer agreement and, where required, a data processing agreement.
3. Personal data we collect
Information you provide may include your first and last name, business email address, telephone number, preferred contact time, selected service, language, message, company information and any other details you choose to share with us.
When you submit a form, our systems receive technical connection information such as your IP address. We use IPinfo to derive an approximate country and city. We store the resulting country and city with your request, but our contact database does not store the IP address used for that lookup.
Our website and hosting providers may process standard technical records such as IP address, browser information, requested URL, timestamps and security logs to deliver and protect the website.
The English pricing page can store your selected currency in your browser's local storage. This preference remains on your device and is not submitted with the contact form.
4. Why we use personal data
We use personal data to respond to enquiries, provide an Automation Scan, arrange calls, prepare proposals, deliver and support services, manage customer relationships, send requested confirmations, maintain business records, secure our systems, prevent misuse and meet legal obligations.
We do not use contact-form data to send unrelated marketing messages unless we have a valid legal basis and provide any choices required by law.
5. Our legal bases
Depending on the situation, we process personal data because it is necessary to take steps at your request before entering into a contract or to perform a contract; because we must comply with a legal obligation; or because we have a legitimate interest in responding to business enquiries, operating and securing our website, improving our services and maintaining appropriate business records.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before it was withdrawn.
6. Who receives personal data
Access within NexFlow is limited to people who need the information for the purposes described above. We may also use carefully selected service providers that process data on our behalf.
These currently include Google Cloud for application hosting and database infrastructure, Resend for transactional email delivery, IPinfo for approximate country and city lookup, Google Analytics for consent-based website usage analytics, and Meta for consent-based advertising measurement through the Meta Pixel. Providers may process limited information needed to provide their services and are subject to their own security and compliance obligations.
We may disclose information to professional advisers, authorities or other parties where required by law, necessary to protect legal rights, or connected with a business reorganisation. We do not sell personal data.
7. International transfers
Some service providers may process data outside the European Economic Area. Where personal data is transferred to a country without an applicable adequacy decision, we use an appropriate transfer mechanism where required, such as the European Commission's Standard Contractual Clauses, together with supplementary safeguards where appropriate.
8. How long we keep data
We keep personal data only for as long as it is reasonably needed for the purpose for which it was collected, to maintain business and financial records, to resolve disputes, to enforce agreements and to meet legal requirements.
The exact period depends on whether an enquiry becomes a customer relationship, the nature of the service, ongoing support needs and applicable statutory retention periods. When data is no longer required, we delete or anonymise it unless continued storage is legally required.
9. Security
We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or destruction. Measures include access controls, secure hosting, encrypted connections, secret management and limiting access according to operational need.
No online service can guarantee absolute security. If you believe information has been exposed or misused, contact us promptly at hello@nexflowautomate.com.
10. Your privacy rights
Subject to the GDPR and applicable exceptions, you may have the right to request access to your personal data, correct inaccurate data, request erasure, restrict processing, object to processing based on legitimate interests, and receive certain data in a portable format.
You can exercise these rights by emailing hello@nexflowautomate.com. We may need to verify your identity before completing a request. You also have the right to submit a complaint to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, or another competent supervisory authority.
11. Automated decisions
We do not use personal data submitted through our website to make decisions based solely on automated processing that produce legal or similarly significant effects for you.
12. Cookies and browser storage
Essential hosting or security technology may be used where necessary to provide and protect the website. The pricing currency preference uses local storage rather than a tracking cookie.
We use Google Analytics to understand how visitors use the website and improve its content and performance. After you accept analytics, it may process information such as viewed pages, approximate location, device and browser details, interactions, referral source and configured IP information. We do not load Google Analytics or grant analytics storage before you accept.
With your consent, we also load the Meta Pixel (ID 1746521123282310) and send a PageView event to Meta to measure advertising results. Meta may process page URLs, device and browser information, IP addresses and cookie identifiers. The Meta Pixel is not loaded before you accept analytics and marketing tracking.
You can accept, reject or later reconsider your choice through the website's privacy settings button. Rejecting analytics and marketing tracking does not prevent you from using the website or submitting a contact request.
13. Changes to this statement
We may update this Privacy Statement when our services, providers or legal obligations change. The effective date at the top of this page shows when it was last updated. Material changes will be highlighted where appropriate.
14. Contact us
For questions, requests or concerns about this statement or our use of personal data, email hello@nexflowautomate.com or use our contact page.