Privacy Policy — NexCloudX v1.0 (Draft)
| Field | Value |
|---|---|
| Product | NexCloudX |
| Company | NexCloudX |
| Website | https://nexcloudx.com |
| Version | NexCloudX v1.0 |
| Platform | NexCloudX Business Operating System |
| Audience | Customers · Legal · Users |
| Status | Draft — requires counsel review |
| Last updated | 2026-07-14 |
Purpose
Draft notice of how NexCloudX processes personal data.
Scope
Website and product processing outlines for v1.0. Not a full GDPR Article 13/14 notice until counsel completes.
Features
Categories of data, purposes, subprocessors overview, retention outline, security pointer, contact for privacy requests.
Architecture
Technically, tenant CRM data resides in tenant databases with landlord metadata isolation — see SECURITY.md.
Configuration
Publish finalized policy URL; set privacy contact email (privacy@nexcloudx.com placeholder).
Screens
https://nexcloudx.com/legal/privacy (recommended).
Permissions
Data subject requests handled by Company privacy contact / Customer (controller) as role dictates.
Dependencies
Security practices; optional DPA.
Related ADRs
None.
Troubleshooting
Tenant Customer is often the controller of CRM contact data; NexCloudX (cloud) may be processor — counsel must confirm per deployment model (cloud vs self-hosted).
Known Limitations
Draft; missing transfer mechanisms, cookie table, and retention schedules.
Future Enhancements
Regional addenda; subprocessors register.
Draft body (summary)
- Who we are. NexCloudX — https://nexcloudx.com — [registered address TBD].
- Data we process. Account data, CRM records entered by Customers, usage logs, support communications, payment metadata via processors.
- Purposes. Provide and secure the Service, support, billing, improve reliability (not selling personal data).
- Legal bases. Contract, legitimate interests, consent where required (counsel).
- Sharing. Hosting, email, voice, and analytics providers under contract; legal requirements.
- International transfers. [TBD].
- Retention. While account active + legal retention (TBD schedule).
- Security. Technical/organizational measures aligned with Security documentation.
- Rights. Access, correction, deletion, portability, objection where applicable — contact [privacy contact TBD].
- Contact. [privacy contact TBD].