Privacy Policy

1. Data controller

The controller of your personal data is "SunVolt Energy" UAB, trading as NEXUS AI Company, registered in the Register of Legal Entities of the Republic of Lithuania under company code 307557122, with its registered office at Beržų al. 1, Laumėnų k., Samylų sen., Kauno r. sav., LT-53118, Lithuania.

For any question about this policy or your personal data, write to support@nexuscompany.ro.

2. Data we collect

We collect personal data only when you provide it to us or when it is technically necessary to operate the website:

• Contact form: your name, email address, company or organization (optional), project type, project description, existing website (optional) and indicative timeline (optional), together with your consent to be contacted.
• Support AI chat: the questions you type into the chat on the website and the answers generated for them. We do not store these conversations on our servers.
• Correspondence: the content of emails and messages you send us, and any information you choose to include.
• Business relationship: contact details of client representatives, contractual, billing and project communication data.
• Technical data: server logs processed by our hosting provider, such as IP address, browser type, date and time of access, which are necessary for security and the proper functioning of the website.

3. What we do not collect

The website does not use analytics tools, advertising pixels, tracking cookies or social media plug-ins. The Support AI chat only answers questions; it does not identify or track you, and you should not type personal data into it. We do not ask for, and you should not send, passwords, API keys, payment card details, special categories of personal data (such as health data) or confidential documents through the contact form.

4. Purposes and legal bases

• To respond to your inquiry and assess a potential project: taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and your consent to be contacted (Art. 6(1)(a) GDPR).
• To perform an engagement and manage the client relationship: performance of a contract (Art. 6(1)(b) GDPR).
• To comply with accounting, tax and other legal obligations: legal obligation (Art. 6(1)(c) GDPR).
• To secure the website, prevent abuse and fraud, keep business records and establish, exercise or defend legal claims: our legitimate interests (Art. 6(1)(f) GDPR), which we balance against your rights.

5. What we do not do with your data

• We do not sell or rent your personal data.
• We do not use your data for profiling or for automated decision-making that produces legal or similarly significant effects.
• We do not send marketing communications without your prior consent.
• We do not publish client names, projects or data without explicit authorization.

6. Who receives your data

We share personal data only where necessary and only with:

• service providers acting as processors on our behalf, such as hosting, email and document storage providers, under written data-processing agreements. The website is hosted by Hetzner Online GmbH on servers in Germany;
• our AI provider, Anthropic, PBC (United States), which receives the questions typed into the Support AI chat only to generate the answers, acting as our processor;
• professional advisors such as accountants, auditors and lawyers, who are bound by confidentiality;
• public authorities, courts or other bodies where we are required to do so by law;
• a successor entity in the event of a merger, acquisition or reorganization, subject to equivalent protection.

7. International transfers

We prefer providers that store data within the European Economic Area. Where a transfer outside the EEA is necessary, we ensure it is protected by an adequacy decision of the European Commission, Standard Contractual Clauses or another safeguard recognized by the GDPR. This applies to the Support AI chat, whose questions are processed by our AI provider in the United States.

8. How long we keep your data

• Inquiries that do not lead to an engagement: up to 24 months after our last communication, so that we can follow up on the same conversation, after which they are deleted.
• Client and contract data: for the duration of the engagement and afterwards for the period required by accounting and tax law, and for the applicable limitation periods for legal claims.
• Server logs: for a limited period set by our hosting provider, typically not exceeding 90 days, unless needed to investigate a security incident.
• Support AI chat: not stored by us. To prevent abuse, we keep a counter of requests per IP address in memory for at most 24 hours.
• Consent-based data: until you withdraw your consent, unless another legal basis applies.

9. Security

We apply technical and organizational measures proportionate to the risk, including encrypted connections, access limited to people who need it, strong authentication and careful selection of providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we will notify you and the supervisory authority of a personal data breach where the law requires it.

10. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• request rectification of inaccurate or incomplete data;
• request erasure of your data, where the law allows;
• request restriction of processing;
• receive your data in a portable format, where applicable;
• object to processing based on our legitimate interests;
• withdraw your consent at any time, without affecting the lawfulness of prior processing;
• lodge a complaint with the Lithuanian supervisory authority, the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija), or with the authority in your country of residence.

11. How to exercise your rights

Send your request to support@nexuscompany.ro. We may ask you to confirm your identity before acting on it. We respond within one month of receipt; this period may be extended by two further months for complex or numerous requests, in which case we will inform you. Requests are free of charge, unless they are manifestly unfounded or excessive.

12. Children

Our services are intended for businesses and professionals. The website is not directed at children under 16, and we do not knowingly collect their personal data.

13. Changes to this policy

We may update this Privacy Policy to reflect changes in our services, providers or legal requirements. The current version is always available on this page with its "Last updated" date. Where changes are significant, we will inform affected clients directly.