Legal
Privacy notice
Last updated 16 October 2026
Draft. Awaiting legal review.
This page is a working draft and is not yet legal advice. If you have a signed order, agreement or DPA with us, that document takes precedence.
What we collect
What you give us: name, work email, company and message when you book a demo or contact us. What the website records: pages visited and referrer, through privacy-friendly analytics. What the platform processes for you as a customer: asset inventories, findings, policies, logs and the evidence you connect.
Why we collect it
To answer you and arrange the demo you asked for, to understand which pages help visitors, and to deliver the service you bought: testing, fixing and proving your security and compliance. We do not sell personal data.
How long we keep it
Lead records are kept for 24 months after the last contact. Customer data is kept for the life of the subscription, and deleted once the 30-day export window after termination closes. Audit logs are kept for 180 days and backups roll off within 35 days.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, or object to a use, including under GDPR, CCPA and India’s DPDP Act. Write to lakshay@nexusvoidai.com and we will respond within 30 days.
Cookies
The website does not use advertising cookies. The product uses cookies to keep you signed in and remember your settings.
International transfers
Aegis stores compliance data and files in India. Some processors, including AI providers, process data in the US or EU; the list is available on request. Where data crosses a border, we rely on contractual safeguards.
Changes to this policy
We post the new version here and change the date at the top. If a change affects how we handle your data, account owners get an email before it takes effect.
How to contact us
Write to lakshay@nexusvoidai.com about anything in this notice, or to security@nexusvoidai.com for questionnaires and vulnerability reports. A person reads both.