Privacy policy.

Nexaflow (“Nexaflow”, “we”, “our”) provides AI engineering, automation and cloud-infrastructure services. This policy explains what we collect when you visit our site, contact us, or engage us — and how we use it.

We try to keep this readable. If something is unclear, email ravitatmiya@gmail.com and a human will reply.

We collect only what we need to operate the site, respond to inquiries and deliver engagements. Specifically:

• Contact informationName, work email, company and message contents when you submit our contact form or email us.
• Project informationStated interest, budget range, timeline and brief — used solely to scope the engagement.
• Usage analyticsAggregate, non-identifying analytics (page views, referrer, device class) collected to improve the site.
• Client data during engagementsOnly what you explicitly share to deliver the project. We never use client data to train shared models.

We use the information described above to:

• Reply to your inquiry and scope a possible engagement.
• Deliver, support and improve the services we’re building for you.
• Operate the site, including site analytics and security monitoring.
• Meet our legal and contractual obligations.

We do not sell or rent your data. We do not use it for advertising, profiling or model-training without explicit written consent.

We use a small set of trusted sub-processors to operate. Each is bound by a data-processing agreement and reviewed before onboarding:

• Cloud infrastructure — Amazon Web Services and Google Cloud.
• Email & calendaring — Google Workspace.
• Analytics — privacy-respecting, cookieless analytics.
• Model providers — only when you’ve approved them for your engagement.

We disclose information only when required by law, to defend our rights, or to a successor entity in the event of a merger or acquisition (with equivalent protections).

Production systems we build are deployed inside your own cloud account with least-privilege IAM, KMS-managed secrets, encrypted storage and audit logging. Our own systems follow the same standard.

No system is perfectly secure. If you discover a vulnerability, please email ravitatmiya@gmail.com with details and we will respond promptly.

Contact inquiries are kept for up to 24 months unless you ask us to delete them sooner. Engagement records (contracts, invoices, technical documentation) are retained for the period required by applicable law (typically 7 years) and then deleted.

You can request access to, correction of, or deletion of the personal data we hold about you. Where required by law (GDPR, CCPA and similar), you also have rights to data portability, restriction of processing and to object to processing.

To exercise any of these rights, email ravitatmiya@gmail.com. We’ll respond within 30 days.

We use a minimal set of cookies, described in our Cookie Policy. You can disable cookies in your browser settings without affecting core site functionality.

Our team operates across multiple regions and the providers we use are based primarily in the United States and the European Union. Where required, transfers are protected by Standard Contractual Clauses or equivalent safeguards.

We may update this policy from time to time. Material changes will be communicated at the top of this page and, where appropriate, by email to active clients.

For privacy questions, write to ravitatmiya@gmail.com. A human responds — usually within four hours during the work week.