Privacy policy

Nexorio s.r.o., Company ID 55 918 263, Tax ID 2122130065, VAT ID SK2122130065, with its registered office at Palánok 1, 949 01 Nitra, Slovak Republic, operates nexorio.io. Contact: agency@nexorio.io.

We are the controller of data collected through this website, email and business communications. For our client’s customer data processed in automations, we act as a processor and the client is the controller. See section 4.

We are not VAT payers. Our VAT ID is registered for receiving cross-border services. Prices shown are final and invoices do not include VAT.

• Email to agency@nexorio.io. Email address, name and message content. Legal basis: steps before entering into a contract and performance of a contract, if you contact us about a quote or a job.
• Booking a call through Google. You can choose a time in Google Calendar from any page, including audit results. You enter your details with Google. Google provides us with the appointment and contact details so the call can take place. Legal basis: steps before entering into a contract.
• Audit. Answers, email address and optionally your name, company, phone number and Company ID. We use the Company ID to retrieve public details from the Register of Legal Entities of the Statistical Office of the Slovak Republic. We send the result by email. An Anthropic model may prepare the report text if connected. The record may also include an IP address. Legal basis: steps before entering into a contract, because you requested the audit.
• The Job Journey PDF. Your email address so we can send the document. Marketing tips are sent only if you tick the consent box. Consent is not required to download the document. We store the consent wording with your address. Legal basis for the document: steps before entering into a contract. Legal basis for tips: consent.
• Traffic and cookies. Vercel Web Analytics measures visits without analytics cookies. We enable Google Analytics 4 only after consent. It measures visits to public pages, device type and traffic source. We do not send it audit content, emails or tokens. We enable Meta Pixel only after separate marketing consent, and only if configured on the website. Legal basis for Vercel analytics and technical logs: our legitimate interest in operating and protecting the website. Legal basis for Google Analytics and Meta: consent.
• Accounting documents. Invoice details. Legal basis: a legal obligation.

We may contact companies by email, Instagram or Messenger to offer the services on this website. We prepare LinkedIn messages manually. Messages include a name, contact details and conversation content. The legal basis is our legitimate interest in contacting a company with an offer relevant to its business.

Send an objection to agency@nexorio.io. We will stop further business outreach. You can also unsubscribe from tips you opted into when requesting a PDF with one click in an email or on the unsubscribe page. We retain your address and unsubscribe date to avoid contacting you again. Unsubscribing does not prevent delivery of an audit result or PDF you requested.

For packages P1 to P6 and the Bundle, we process our client’s customer data according to the client’s instructions. The client is the controller of that data; we are the processor. Before launch, we enter into a data processing agreement if the package processes such data.

Depending on the package, this may include:

• P1: contact details and enquiry text, and possibly a draft reply for the client
• P2: a review request and reminder
• P3: an appointment and customer reminder
• P4: a phone number and SMS after a missed call
• P5: chat messages on the client’s website and contact details passed on
• P6: approved material for a post and review text for which we prepare a response

The client determines the legal basis for processing its customers’ data. The list of subprocessors for a specific automation is not provided on this website. We include it in the data processing agreement for the package. We do not launch automations on this website.

We do not sell personal data. Depending on what is actually used on the website:

• Supabase — audit records, PDF requests, consent and unsubscribe records, and business communications. The project region is not specified in this website.
• Resend — emails relating to the audit, PDF and business email messages.
• Vercel — website hosting and traffic measurement without analytics cookies.
• Google — Calendar and Meet for bookings. Analytics 4 only after consent. Policy: policies.google.com/privacy, opens in a new tab.
• Meta Platforms Ireland Limited — marketing pixel after marketing consent, if the pixel is configured. Policy: facebook.com/privacy/policy, opens in a new tab.
• Ecomail — only if you consent to tips when downloading the PDF. Requests go to api2.ecomailapp.cz.
• Statistical Office of the Slovak Republic — public details for the Company ID you enter in the audit.
• Anthropic — audit text or a draft business message, if the service is connected. The request may contain content you provided to us.
• Notion — an audit record, if connected. It may contain your email address, name, company, answers and IP address.

We use Ecomail, Notion and Anthropic only when the relevant integration is configured in production. No request is sent without a key.

We contact Ecomail at a Czech address. The Statistical Office of the Slovak Republic is based in Slovakia. The Supabase region is not specified in this website. Google, Meta, Vercel, Resend, Notion and Anthropic may also process data outside the EU. Transfers are governed by the provider’s contractual terms. We do not hold our own standard contractual clauses agreement in this website and therefore make no claim to one here. Google’s and Meta’s policy links are in section 5. Email agency@nexorio.io to request further information.

• Audit, PDF, booking and business communication records: 36 months from the last contact.
• Tips subscription: until you unsubscribe. We retain your address and unsubscribe date to prevent the subscription from restarting.
• Accounting documents: 10 years under the Accounting Act.
• Google Analytics event and user data: 2 months. Aggregate reports may remain longer.
• We set Google analytics cookies for a maximum of 180 days. We store your consent choice in the browser for 180 days.

Retention of our client’s customer data in an automation is set out in the data processing agreement. We do not specify a duration on this website because the automation does not run here.

We remember your chosen currency for indicative prices in your browser (localStorage, nx_currency_v1). This functional preference changes the price display; it does not change your order and is not sent to analytics.

We store your consent choice in the browser, not as a third-party cookie. We do not load Google Analytics or Meta Pixel before the relevant consent. Analytics consent is separate from marketing consent. You can change your choice through “Cookie settings” in the footer. If you withdraw consent, we delete accessible analytics and marketing cookies and reload the page.

• Access to your data
• Correction of inaccurate data
• Erasure
• Restriction of processing
• Data portability where processing is automated and based on consent or a contract
• Objection to processing based on legitimate interests, including business outreach
• Withdrawal of consent. Withdrawal does not affect processing carried out before it
• A complaint to the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk, opens in a new tab

Write to agency@nexorio.io. We will reply within 30 days. For data where we act only as a processor, we will forward the request to the client acting as controller, or handle it in accordance with our agreement with them.

agency@nexorio.io — Nexorio s.r.o., Palánok 1, 949 01 Nitra