Privacy Statement

1. Who we are

Nexron Solutions Limited, trading as Nexron Solutions, provides business automation, software development and related services from New Zealand. Our company number is 9402726 and our NZBN is 9429053420862.

Jack is our privacy officer. Email him at nexronsolutions@gmail.com about your personal information or a privacy concern.

Business correspondence address: 23 Trent Avenue, Palmerston North, New Zealand.

This statement covers our website, enquiries, business relationships, public tools and release lists. A client service may have its own collection notice and data schedule.

2. Information you give us

We collect the information needed for the action you request:

• Enquiries and consultations: Your name, contact details, business details, service interest and message, so we can respond and discuss the work
• Call bookings: Your contact and appointment details, so we can arrange and manage the booking
• Nex: Your current question, recent successful chat context and the page you are viewing, so OpenAI can generate a response using selected public Nexron information
• Vision: The images, product choices, generated previews and session or activity details needed to provide the visualisation. A separate lead form may ask for contact details and identifies the business that receives the enquiry
• Paid work: Business contact, account, agreement, support and billing information needed to deliver the agreed work and manage the relationship
• Synesis release list: Your name, email, consent and preference records, so we can acknowledge your signup and send Synesis pilot, availability and launch updates
• Emails to Nexron: When you email us, an automated system reads your email and sorts it into a category, such as an enquiry, a booking or a receipt. An AI assistant may then summarise the email or prepare a draft reply. We check every reply before we send it. The system does not send, delete or accept anything on its own, except that it moves clear junk mail to the bin.

You can choose whether to provide information. We mark required fields on each form. We cannot complete the requested action without those fields. Optional contact or marketing choices remain optional.

3. Information from clients and connected systems

A business may ask us to handle information about its staff, customers or suppliers while we deliver a service. We follow the agreed instructions and access limits. We do not treat access to one system as permission to use that information for Nexron marketing or another client's work.

We may also receive business contact details from a referral or another authorised source. Where required, we give you a notice explaining that collection and its purpose, subject to the exceptions allowed by law.

4. Website activity, cookies and analytics

Our website and infrastructure providers process technical information such as IP addresses, browser or device details, page requests and security signals to deliver the site and protect it from abuse. Some forms use Cloudflare Turnstile checks.

Google Analytics uses cookies or similar identifiers to measure page activity, device and browser information, approximate location and actions such as enquiry submissions. This information can relate to a particular browser or device.

The Google Analytics property keeps event data for two months and user data for 14 months. New activity resets the user-data period. These settings do not cover all standard aggregate reports.

You can control cookies in your browser or use the Google Analytics Opt-out Browser Add-on. Blocking cookies may affect some features.

5. Nex AI chat

Nex provides general information about Nexron. Each request sends your current question, recent successful chat context, the page identifier and selected public Nexron context to OpenAI.

Your open page displays the conversation. The widget stores recent successful chat exchanges in browser session storage, tied to the session token, its expiry and the remaining question count for that tab. The chat clears when the 30-minute session expires or the tab closes. Nexron's Nex service does not store a transcript database.

A Nex session remains valid for 30 minutes. Session expiry does not delete all related metadata at that moment. Nexron keeps limited session digests and hashed abuse, usage and cost records, and later activity triggers cleanup under the applicable expiry or accounting rules.

We ask OpenAI not to store the conversation for later retrieval. OpenAI may retain API inputs and outputs for up to 30 days for abuse monitoring, unless it must retain them longer for legal reasons.

Nex is for business use by adults aged 18 or over. Do not send passwords, confidential records or unnecessary personal information.

6. Vision images and previews

Vision sends submitted images and product choices to Google Gemini to create an AI-generated preview. Nexron stores generated images in Cloudflare R2 object storage and stores related metadata in its database. We use those records to provide the preview and support the relevant session, lead, share, usage, security and service functions.

We keep Vision records for the relevant preview, enquiry or agreed service, and for applicable security and legal needs. The period depends on the record and its purpose. Contact us for the current retention arrangements for a particular preview or service.

Email nexronsolutions@gmail.com if you want us to assess deletion of a Vision image or related personal information. We check the request against the relevant purpose, agreement and legal obligations.

7. Synesis release list

Nexron Synesis (V1 coming soon) is a planned managed business AI operating layer designed to connect company knowledge, approved AI capabilities, automations and human decisions in one place.

Joining the list does not create a customer account, purchase, reservation, guaranteed pilot place, launch date or obligation for Nexron to release a roadmap item. You can unsubscribe at any time.

We delete an active release-list record 1,095 days after its latest consent unless you renew that consent. If you unsubscribe, our daily cleanup process deletes the name, email and delivery state after 30 days. We may keep a limited pseudonymous recipient hash and consent evidence for the applicable suppression, audit and dispute purposes. Provider-held copies and backups follow their own cycles.

8. Messages and marketing

We use enquiry and booking details to respond and manage the action you requested. Sending an enquiry does not subscribe you to general marketing.

Synesis signup covers an acknowledgement and Synesis pilot, availability and launch updates. Each release update provides an unsubscribe route. We honour a commercial-email unsubscribe within five working days.

You may still receive account, payment or service messages needed for an active relationship.

9. Service providers and overseas handling

We share only the information needed for each provider's role:

• Cloudflare: Website and API delivery, security checks and image storage
• Supabase: Databases and account services for the relevant application
• OpenAI: Public Nex AI responses
• Google Gemini: Nexron Vision image generation and other features that use Gemini
• Resend: Service messages and release updates that you request
• Google Calendar and Gmail: Scheduling and business correspondence
• TypeSafe (Jev): Sorting incoming email to our business inbox into categories
• Anthropic (Claude): Summarising incoming email and preparing draft replies for us to check
• Google Analytics: Website usage measurement
• Stripe: Payment processing where a service uses Stripe

These providers can process information outside New Zealand through international infrastructure or support teams. We assess the safeguards required by the New Zealand Privacy Act 2020 for each arrangement. Your use of this website is not blanket consent to overseas disclosure.

A client service may name other providers in its data schedule. Describing a possible integration on a roadmap does not mean that provider receives your information.

10. How long we keep information

We keep personal information while we need it for the purpose we collected it for. We also consider legal record-keeping, security, complaints, disputes and an agreed client service. We then delete the information or remove identifying details.

The periods stated above distinguish Analytics retention, Nex session validity, OpenAI abuse monitoring and Synesis release-list records. A provider, email inbox, security log, invoice or backup may follow a different period for its separate purpose.

Deleting an application record may not remove a required invoice, provider-held copy or isolated backup at the same time. A client service schedule explains retention and exit arrangements for information we handle for that client.

11. Access, correction and deletion requests

You can ask whether we hold personal information about you and request access or correction. We may need to check your identity or authority. We normally decide within 20 working days. If the law allows an extension, we will tell you the reason and revised date within the required period.

If we decline a correction, you can ask us to attach a statement of the correction you sought. We will explain any lawful reason for refusing access or correction and your complaint options.

You can ask us to delete information. We assess the request against the reason we hold it and any legal or contractual duty to retain it. New Zealand law does not provide an unconditional right to deletion.

12. Security and privacy incidents

We use access controls, encryption in transit, validation, rate limits and service-specific database or storage protections where they apply. No internet service can guarantee absolute security.

We investigate privacy incidents and notify the Office of the Privacy Commissioner and affected people when the Privacy Act 2020 requires us to do so.

13. Changes to this statement

We will show the effective date when we update this statement. We will use appropriate notice for a material change to how we handle information. A change applies to future handling after its effective date and does not give us retrospective permission for an unrelated use.

14. Contact and complaints

Email nexronsolutions@gmail.com to make a privacy request or complaint. If your request concerns another business that uses our service, we will explain its role and help the appropriate organisation respond.

You can complain to the Office of the Privacy Commissioner.