Privacy Policy

1. Information We Collect

We collect different categories of information depending on how you interact with us:

1.1 Information You Provide Directly

When you fill out a contact form, request a quote, apply for a position, or otherwise communicate with us, you may provide:

• Full name
• Email address
• Phone number
• Company name and professional role
• Service interests (selected from our service categories)
• Project details and messages describing your requirements
• Any other information you voluntarily include in your communications

1.2 Information Collected Automatically

When you visit our Website, certain information is collected automatically through cookies and similar tracking technologies:

• Device information: browser type, operating system, device type, and screen resolution.
• Usage data: pages visited, time spent on pages, click patterns, referring URLs, and navigation paths.
• IP address and approximate geographic location.
• Analytics identifiers generated by Google Analytics and Vercel Analytics.

1.3 Information from Third-Party Services

We may receive information about you from third-party platforms and services, including:

• Social media platforms (such as Facebook/Meta, Instagram, LinkedIn) if you interact with our pages, ads, or content on those platforms.
• Google reCAPTCHA, which collects hardware and software information (such as device and application data) to verify that you are a human user.
• AI Chat Assistant: our website features an AI-powered chat widget that may collect conversational data, questions, and any information you voluntarily share during chat interactions.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your inquiries: processing your contact form submissions, emails, and support requests.
• To provide our services: delivering AI engineering, blockchain development, web/mobile development, and consulting services as agreed upon.
• To communicate with you: sending project updates, service-related announcements, and responding to your questions.
• To improve our Website: analyzing usage patterns, diagnosing technical issues, and optimizing content and performance.
• To ensure security: detecting and preventing fraud, abuse, spam, and unauthorized access through measures such as rate limiting and reCAPTCHA verification.
• To comply with legal obligations: fulfilling regulatory requirements and responding to lawful requests from authorities.
• For marketing: with your consent, sending newsletters or promotional communications about our services. You may opt out at any time.

3. Cookies and Tracking Technologies

Our Website uses cookies and similar tracking technologies to enhance your experience and analyze usage. The following types of cookies may be used:

3.1 Essential Cookies

Required for the basic functionality of our Website, such as security features and form submissions.

3.2 Analytics Cookies

We use the following analytics services to understand how visitors use our Website:

• Google Analytics (GA4): collects anonymized usage data including page views, session duration, and user demographics. Google may use this data in accordance with its own privacy policy. You can opt out via the Google Analytics Opt-Out Browser Add-on.
• Vercel Analytics: collects privacy-friendly, aggregated performance and usage metrics.

3.3 Third-Party Cookies

Third-party services integrated into our Website, such as Google reCAPTCHA, may set their own cookies. These are governed by the respective third party's privacy policy.

You can control cookies through your browser settings. Disabling certain cookies may limit the functionality of our Website.

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

• Service providers: we share data with trusted third-party service providers who assist us in operating our Website and delivering our services (e.g., email delivery via SMTP, hosting via Vercel, analytics providers). These providers are contractually obligated to protect your data.
• Legal requirements: we may disclose your information if required to do so by law, regulation, legal process, or governmental request.
• Business transfers: in the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change.
• With your consent: we may share your information for any other purpose with your explicit consent.

5. AI and Data Processing

As an AI and blockchain engineering company, we take additional care with data processing:

• Our AI-powered chat assistant processes your messages to provide relevant responses. Chat data may be stored to improve service quality.
• Data used for AI model training or improvement is anonymized and aggregated where possible.
• We adhere to ethical AI practices, including fairness, transparency, and data minimization.
• Client-specific data is isolated, encrypted, and protected under strict confidentiality agreements.
• We do not use your personal data to train AI models without your explicit consent.

6. Blockchain Transparency

For blockchain-related services, please note that transactions recorded on public blockchains are inherently immutable and transparent. While we implement privacy-preserving technologies such as Zero-Knowledge Proofs where applicable and requested, data written to public blockchains cannot be modified or deleted. We advise against including personal data on public blockchains unless absolutely necessary.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including:

• Contact form submissions are retained for the duration of the business relationship and a reasonable period thereafter for follow-up purposes.
• Analytics data is retained in accordance with the policies of Google Analytics and Vercel Analytics (typically 14-26 months).
• Chat interaction data is retained for service improvement and may be deleted upon request.
• We may retain certain data longer if required by applicable law or for legitimate business purposes (e.g., dispute resolution).

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS protocols.
• Server-side input validation and sanitization to prevent injection attacks.
• Rate limiting on API endpoints to prevent abuse.
• reCAPTCHA verification to prevent automated spam submissions.
• Regular security reviews and updates of our systems.

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to promptly addressing any data breaches in accordance with applicable laws.

9. Your Rights and Choices

Depending on your location and applicable laws (including GDPR, CCPA, and other data protection regulations), you may have the following rights regarding your personal data:

• Right to Access: you may request a copy of the personal data we hold about you.
• Right to Rectification: you may request that we correct any inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten): you may request the deletion of your personal data, subject to legal retention requirements.
• Right to Restrict Processing: you may request that we limit how we use your data.
• Right to Data Portability: you may request your data in a structured, commonly used, machine-readable format.
• Right to Object: you may object to processing of your data for direct marketing or certain other purposes.
• Right to Withdraw Consent: where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: you may file a complaint with a supervisory authority if you believe your data protection rights have been violated.

To exercise any of these rights, please contact us at info@nextchainx.io. We will respond to your request within 30 days.

10. International Data Transfers

NextChainX operates from Pakistan, the United States, and the United Kingdom. Your information may be transferred to, stored, and processed in any of these countries or other locations where our service providers maintain facilities. By using our Website and services, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence. We take steps to ensure that your data receives an adequate level of protection in the jurisdictions in which we process it.

11. Third-Party Links and Services

Our Website may contain links to third-party websites, services, or platforms (including but not limited to Facebook, Instagram, LinkedIn, GitHub, and other social media). We are not responsible for the privacy practices or content of these third-party sites. We encourage you to read the privacy policies of any third-party site you visit. This Privacy Policy applies only to information collected by NextChainX through our Website and services.

12. Children's Privacy

Our Website and services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected personal data from a child under 16, we will take steps to delete such information promptly. If you believe we have collected information from a child under 16, please contact us immediately at info@nextchainx.io.

13. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, disclose, and sell.
• The right to request deletion of your personal information.
• The right to opt out of the sale of your personal information. We do not sell your personal information.
• The right to non-discrimination for exercising your CCPA rights.

To exercise your CCPA rights, please contact us at info@nextchainx.io.

14. European Residents (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) and UK GDPR apply to our processing of your personal data. Our legal bases for processing include:

• Consent: where you have given explicit consent (e.g., subscribing to communications).
• Contractual necessity: where processing is necessary to fulfill a contract or take pre-contractual steps at your request.
• Legitimate interests: where processing is necessary for our legitimate business interests (e.g., improving our services, Website security) and does not override your rights.
• Legal obligation: where processing is required by applicable law.

15. Social Media and Platform Data

We maintain presences on social media platforms including Facebook (Meta), Instagram, LinkedIn, and others. When you interact with our social media pages or content:

• We may receive information about your interaction (e.g., likes, comments, messages) as provided by the platform.
• Any information you share publicly on these platforms is subject to the platform's own privacy policy.
• If you send us a message through a social media platform, we may use the information you provide to respond to your inquiry.
• We may use aggregated, anonymized insights provided by these platforms to understand audience engagement and improve our content.

We encourage you to review the privacy policies of the respective social media platforms for details on how they handle your data.

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Website and services after any changes constitutes your acceptance of the updated Privacy Policy.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: