Who is responsible for your data
The controller is НЕКСУВОУЛТ ЕООД, a Bulgarian single-member limited liability company with the registered foreign-language name NexuVault and Unified Identification Code (UIC) 207967394. Registered office: 21 Ohrid, floor 4, apartment 8, Yuzhen district, 4000 Plovdiv, Bulgaria.
For privacy questions and requests concerning your personal data, write to dzaimov01@gmail.com or to НЕКСУВОУЛТ ЕООД at the address above. Do not include passwords, identity documents or confidential customer documents in your initial request.
Inquiries and follow-up
The form requires your name, email, organisation and task description so we can review and answer your inquiry. You can optionally provide your industry, organisation size, preferred deployment, timeline and budget. We also store the language, inquiry type and source, date, processing status, working notes and version of this notice. The form cannot be submitted without its required fields.
We handle business inquiries on the basis of our legitimate interest in responding to requested communications and discussing suitable services under Article 6(1)(f) GDPR. Where you personally would be a party to a contract and request steps before entering into it, Article 6(1)(b) applies to the data necessary for those steps.
Acknowledging this notice is not marketing consent. The form does not subscribe you to a newsletter. Do not include health information, other sensitive personal data, secrets or real customer documents.
Public demonstration
The demo searches prepared synthetic documents and returns excerpts with their sources. Its current configuration does not send questions to an external language model. The database stores questions, answers, sources, selected scenario, language and query count within the session. Use non-confidential example questions only.
This processing provides the demonstration you request and protects against abuse, based on our legitimate interest under Article 6(1)(f) GDPR. We do not use the demo for decisions producing legal or similarly significant effects on you, or for advertising profiles.
Technical protection and optional statistics
We process an IP address and technical request information to serve the connection and limit abuse. Quota counters use a hashed key derived from the IP address and time window; this is not attached to inquiries or statistical aggregates. Hashing does not necessarily make data anonymous. Application request logs contain a request identifier, method, outcome and duration, without form contents or questions. A separate audit log records access and processing actions. Our legitimate interest in service security and reliability is the basis for this processing.
Only if you allow aggregate statistics in “Privacy settings” do we count page views, submitted inquiries and demo questions by day and language. This is based on your consent under Article 6(1)(a) GDPR. The counters contain no name, email, question or visitor identifier. There are no external analytics trackers. You can withdraw your choice at any time through the same settings.
Access, providers and location
Inquiries are accessible to authorised NexuVault personnel through protected administration. The website and database are hosted on Amazon Web Services (AWS Lightsail) in the Frankfurt, Germany region. Submitting a form saves the inquiry in that database; automatic email and CRM forwarding are not enabled.
We use the Gmail address above for correspondence. When you email us or receive an email reply, the message is also processed through Google's service. Google uses infrastructure in different countries, including outside the European Economic Area. Google's published privacy policy describes its applicable international-transfer mechanisms. The website server's location does not guarantee that every related service processes data only in the EU. Contact us for information about the particular providers and arrangements concerning your data.
Storage and deletion
The current cleanup procedure covers new and closed inquiries created more than 90 days earlier. Deletion requires that procedure to run; reaching 90 days does not itself remove the record. Inquiries at other stages of handling are not deleted by this procedure. You can request erasure without waiting for that period; we consider your request under the applicable rights and obligations.
Access to a demo session expires after one hour. While the session remains accessible, its delete button removes the conversation from the active database. Expired sessions are removed during cleanup; closing or refreshing the page does not delete them. Expired quota counters are cleaned up on subsequent requests. Audit logs and backups are not automatically deleted with an individual inquiry or conversation. An erasure request also covers those copies, subject to applicable obligations and limitations.
Requests and rights
Subject to the GDPR's conditions, you can request access, correction, erasure or restriction of processing, and portability where applicable. You may object to processing based on legitimate interests on grounds relating to your particular situation. Withdrawing consent does not affect the lawfulness of earlier processing.
Send your request to dzaimov01@gmail.com, explaining what you need and including the inquiry reference where relevant. A proportionate identity check may be necessary. The GDPR generally requires a response within one month; we will notify you of the reasons for any permitted extension. You can complain to Bulgaria's Commission for Personal Data Protection (cpdp.bg) or another competent supervisory authority.