Privacy Policy

1. Scope

This Privacy Policy describes how BGSM LLC ("Nexora") processes personal data in connection with the Nexora platform.

2. Roles Under Data Protection Law

• Customer acts as the Data Controller
• Nexora acts as the Data Processor with respect to customer-provided data

3. Categories of Data Processed

• Account identifiers
• Technical metadata
• Security event metadata
• Machine identity attributes

Nexora does not intentionally collect sensitive personal data.

4. Lawful Basis for Processing

Processing is based on:

• Contractual necessity to provide the Services
• Legitimate interests related to cybersecurity risk management

5. Data Retention

Customer data is retained for the duration of the subscription and for up to thirty (30) days following termination, unless otherwise required by law.

6. International Transfers

Where data is transferred internationally, Nexora relies on lawful transfer mechanisms, including Standard Contractual Clauses.

7. Sub-Processors

Nexora may engage vetted sub-processors for infrastructure, monitoring, email delivery, and support. Categories of sub-processors are available upon request.

8. Data Subject Rights

Where applicable, individuals may request access, rectification, erasure, restriction, portability, or objection in accordance with applicable law.

9. Children's Data

The Services are not intended for individuals under eighteen (18) years of age.

10. Regional Compliance Statement

Nexora is designed to support compliance with global data protection requirements, including GDPR, CCPA, and Saudi Arabia's Personal Data Protection Law, subject to customer deployment and configuration choices.

11. Contact

For privacy-related inquiries, data subject requests, or to exercise your rights under this Privacy Policy, please contact: