Privacy Policy

NEXLORA LTD (“Nexlora”, “Nexlora Solutions”, “we”, “us” or “our”) is a company registered in England and Wales under company number 16625881, with its registered office at 128 City Road, London, United Kingdom, EC1V 2NX. We trade publicly under the brand Nexlora Solutions.

Nexlora builds and operates its own digital products and also provides software engineering, AI and product development services to organisations. For the processing described in this policy, NEXLORA LTD is the data controller.

You can contact us about privacy matters at info@nexlora.app.

This policy covers the Nexlora Solutions corporate website at nexlorasolutions.com, including the contact form, the Nexlora Labs and Nexi learning experience published on this website, and the private investor and administration area of this website.

Nexlora-operated products distributed elsewhere — for example through their own websites or through mobile app stores — may involve different data practices and are covered by their own product-specific privacy notices. Where a product is software we designed or built for a client, that client operates the service and is responsible for its own privacy notice; this policy does not apply to it.

Depending on how you interact with us, you may provide:

• Enquiry details submitted through the contact form: your name, email address, company or organisation (optional), project type, indicative budget range (optional) and the content of your message.
• Account details, where we have issued you access to the private area of this website: your email address and password credentials, which are handled by our authentication provider.
• Profile information held about account holders: full name, email address, company, country and phone number, together with relationship records such as status and internal notes.
• Support and business communications you send us by email.
• Content you enter into the Nexi assistant or the interactive Nexlora Labs exercises, including questions, instructions and code you submit.

Please do not send us special category data or confidential third-party information through the contact form or the Nexi assistant.

Public visitors do not need an account. Accounts on this website exist only for the private investor and administration area, and are created by us rather than through public self-registration.

For those accounts we process authentication data (email address, password credentials, sign-in timestamps and session tokens), the profile fields listed above, the role assigned to the account, and the records made available to that account, such as documents, investment records, payout records, internal messages and updates.

This website does not sell anything and contains no checkout. We do not operate a payment integration on nexlorasolutions.com and we do not collect card numbers, bank details or billing addresses through it.

Where a separately distributed Nexlora product does offer paid features in the future, payment details would be handled by the relevant payment provider or app store rather than stored by us, and the applicable product notice would identify that provider and the data it processes, such as payment method, billing details, transaction identifiers, amount, currency and payment status.

Fees for client engagements are invoiced and settled outside this website under the applicable contract.

We do not currently operate subscriptions, one-time purchases, course purchases, digital credits or content packs on this website, and no such data is processed here.

If we introduce paid functionality, we will update this policy before it becomes available and describe the purchase-related information processed.

Nexlora Labs is our software engineering learning experience, guided by Nexi, our AI teaching assistant.

Your learning state on this website — pathway and module progress, completed chapters and exercises, assessment answers, project milestones, experience points and generated certificates — is stored locally in your own browser using local storage. It is not uploaded to a Nexlora learner database, so clearing your browser storage removes it and it does not follow you to another device or browser.

When you ask Nexi a question or request feedback, your message, the relevant learning context and the page you are on are sent to our server function and on to the AI provider described in the next section so that a response can be generated. We do not sell this information and we do not use it to build advertising profiles.

We cannot guarantee how every underlying model provider configures training on service data; our AI requests are routed through Lovable's AI gateway to Google Gemini models under those providers' terms. If you would like assurance on model training for a specific use case, contact us before submitting sensitive material.

Some Nexlora features use artificial intelligence. On this website, that is the Nexi assistant and the Nexlora Labs copilot.

Prompts you submit, and the limited context needed to answer them, are processed by Nexlora's server-side functions and by Lovable's AI gateway, which routes the request to Google Gemini models. Responses are returned to your browser. Nexlora does not store your AI conversations in a database on this website; providers may retain requests transiently for delivery, abuse prevention and reliability under their own terms.

Please do not submit personal data about other people, credentials or confidential material to AI features.

This website does not request or use precise GPS location. Your browser will not prompt you for location permission here, and we do not use background location.

For language selection only, our server may read a coarse country hint provided by our content delivery network from your network connection, together with your browser language settings. This is an approximate, country-level signal used to choose an initial language; it is not GPS data and it is not stored as a location record.

Nexlora products that genuinely use precise location, such as location-based mobile experiences, request permission in the app itself and explain that processing in their own product privacy notice.

When you use the website, our infrastructure processes technical data such as:

• IP address and a coarse country derived from it, used for delivery, security and language selection;
• browser type, device characteristics and operating system reported by your browser;
• requested pages, referring page, timestamps and response status recorded in server and platform logs;
• language preferences;
• security and abuse-prevention events, such as repeated form submissions.

Contact form submissions are stored with a one-way hashed representation of the sending IP address, used solely for rate limiting and abuse prevention. We do not run analytics, advertising or cross-site tracking technologies on this website.

We use only essential storage technologies:

• NEXLORA_LOCALE cookie — remembers the language you selected so the site is not re-detected on every visit.
• Authentication storage — when you sign in to the private area, your session token is kept in browser storage so you stay signed in.
• Local storage for Nexlora Labs — keeps your learning progress and certificates on your own device.
• Language preference mirror in local storage — supports the same purpose as the language cookie.

We do not set analytics, advertising, profiling or third-party marketing cookies, and there is therefore no consent banner. Because only essential and preference storage strictly requested by you is used, no separate cookie consent interface is required today. If we ever introduce non-essential tracking, we will publish a cookie notice and implement a consent mechanism first.

You can clear cookies and local storage at any time through your browser settings; doing so resets your language preference and any locally stored learning progress.

We use personal information to:

• respond to enquiries and provide the information or proposal you asked for;
• deliver, maintain and secure the website and the private investor area;
• provide Nexi and Nexlora Labs functionality, including AI-generated guidance;
• provide support and manage our relationship with clients and account holders;
• detect, prevent and investigate abuse, fraud and security incidents;
• improve reliability, content and usability;
• send service and relationship communications relating to your enquiry or engagement;
• comply with legal, accounting and regulatory obligations.

Where UK GDPR or EU GDPR applies, we rely on:

• Performance of a contract, or steps taken at your request before entering one — responding to enquiries, providing account access and delivering agreed services.
• Legitimate interests — operating and securing our website, preventing abuse, keeping business records and improving our services, balanced against your rights.
• Consent — where we ask for it specifically, for example optional marketing messages. You may withdraw consent at any time.
• Legal obligation — accounting, tax and responding to lawful requests.

Not all processing relies on consent; most of it is contractual or based on legitimate interests.

We share personal information only with service providers acting on our instructions, and only as needed:

• Lovable — application hosting, managed database, authentication and transactional email infrastructure for this website.
• Cloudflare — edge delivery and network-level protection for requests to the website.
• Lovable AI gateway and Google (Gemini models) — processing of prompts submitted to Nexi and the Labs copilot.
• Professional advisers, such as accountants and lawyers, where necessary and confidential.

We may also disclose information where required by law, to enforce our terms, or in connection with a corporate transaction. We do not sell personal information and we do not share it for third-party advertising.

Our providers may process information outside the United Kingdom or European Economic Area, including in the United States.

Where that happens, we rely on the transfer safeguards offered by those providers, such as the UK International Data Transfer Agreement or Addendum and the European Commission's Standard Contractual Clauses, together with appropriate technical measures. You can ask us for further information about the safeguards applied.

We keep personal information only for as long as reasonably necessary for the purpose it was collected, and then delete or anonymise it.

• Contact enquiries are kept while we evaluate and respond, and afterwards for a reasonable period as a record of our business communications.
• Account and profile records are kept for the duration of the relationship and for as long as needed afterwards for legal, accounting and dispute-resolution purposes.
• Infrastructure and security logs are kept for short operational periods determined by our providers.
• Nexlora Labs progress and certificates remain on your own device until you clear your browser storage.

Where UK accounting and tax law requires records to be retained, we keep the relevant records for the statutory period.

We apply appropriate technical and organisational measures, including encryption in transit, access controls and role-based restrictions on the private area, database-level access rules, server-side validation, rate limiting on public forms and hashing of IP addresses used for abuse prevention.

No online service can be guaranteed completely secure. We do not promise absolute security, and you are responsible for keeping any credentials we issue confidential.

Subject to applicable law, you may have the right to:

• access the personal information we hold about you;
• have inaccurate information corrected;
• request deletion of your information;
• request restriction of processing;
• object to processing based on legitimate interests;
• receive certain information in a portable format;
• withdraw consent where processing is based on consent.

To exercise these rights, email info@nexlora.app. We may need to verify your identity. If you are in the United Kingdom you may complain to the Information Commissioner's Office; if you are in the EEA you may complain to your national supervisory authority.

This website, including the Nexlora Labs learning experience and the private investor area, is intended for adults and for professional and business use. It is not directed at children, and we do not knowingly collect personal information from children through it.

Nexlora products distributed through app stores state their own age ratings and requirements in the store listing and in their product notices. If you believe a child has provided personal information to us, contact info@nexlora.app and we will delete it.

Our website links to third-party websites and products, including product websites in our portfolio and services operated by our clients. We are not responsible for their content or privacy practices; please read their notices.

We may update this policy as our services, providers or legal obligations change. The “Last updated” date above shows the current version, and we will take reasonable steps to highlight material changes.

NEXLORA LTD · Company No. 16625881

128 City Road, London, United Kingdom, EC1V 2NX

Email: info@nexlora.app