Privacy Policy

1. Who this policy covers

This Policy explains how Nexaltra processes personal information when you visit nexaltra.com, contact us or use a Nexaltra product, including Calisy. Nexaltra is the commercial brand responsible for operating these services and can be contacted at soporte@nexaltra.com.

For account and website information, Nexaltra generally acts as the data controller. For employee, instrument, certificate and operational records uploaded by a customer organization, that organization decides why the information is used and Nexaltra processes it to provide the service.

2. Information we process

• Website and contact data: name, professional email, company, country and the content of messages sent to us.
• Account data: email, name, organization, role, language, authentication records and consent history.
• Subscription data: plan, billing status, customer and subscription references, payment status and invoice-related metadata. Nexaltra does not store full payment-card details.
• Customer operational data: instrument records, calibration dates, certificates, photos, suppliers, locations, requests, users and audit history submitted to products such as Calisy.
• Technical and security data: IP address, browser information, timestamps, service logs, error records and events needed to protect and operate the services.
• Communication preferences: language and whether you separately agreed to receive promotional communications.

3. Why we use information

• Provide, secure, support and improve Nexaltra products.
• Create and administer accounts, organizations, roles, trials and subscriptions.
• Process contact requests and provide customer support.
• Generate alerts, backups, exports and audit trails requested by users.
• Prevent fraud, abuse and unauthorized access.
• Comply with contractual, tax, accounting and legal obligations.
• Send marketing only where valid consent or another lawful basis applies.

4. Essential and optional communications

Security, account recovery, billing, subscription, material service, legal and possible service-discontinuation notices are essential to the service and do not depend on marketing consent. News, promotions and other commercial communications are optional and may be disabled at any time.

5. Service providers and international processing

Nexaltra does not sell customer or operational data. We may use specialized service providers only as needed for cloud infrastructure, authentication, transactional communications, customer support and payment processing.

These providers may process information in countries other than yours. Nexaltra limits the information shared to what is necessary and relies on provider safeguards and applicable contractual or legal transfer mechanisms.

6. Cookies and local technology

Nexaltra websites and applications may use cookies or browser storage required for authentication, language, security and core functionality. If optional analytics or advertising technologies are introduced, this Policy and any required consent controls will be updated before they are enabled.

7. Retention and deletion

We retain information only for as long as needed to provide the service, maintain security and auditability, resolve disputes and meet legal obligations. Retention varies by data type and product.

In Calisy, cancellation currently provides an approximately 60-day recovery window after access ends before organization data becomes eligible for permanent deletion, unless law, a security need or an agreed contract requires a different period. Generated complete-backup files are currently available for seven days. Billing, consent, security and legally required records may be retained separately for the applicable period.

8. Security

Nexaltra applies reasonable technical and organizational controls such as authenticated access, role-based permissions, tenant isolation, restricted privileged operations, encrypted transport, logging and controlled infrastructure secrets. No system is completely risk-free, and users must also protect their credentials and devices.

9. Your choices and rights

Subject to applicable law, you may request information about your personal data and ask for access, correction, updating, deletion or withdrawal of optional marketing consent. If your account belongs to a customer organization, some requests should first be directed to that organization as the controller of its workspace data.

To make a request, write to soporte@nexaltra.com. We may need to verify your identity and authority before acting. Certain records may be retained where required by law or necessary to establish, exercise or defend legal claims.

10. Children

Nexaltra products are intended for organizations and professional users, not children. We do not knowingly offer accounts directly to minors.

11. Policy changes and contact

We may update this Policy to reflect legal, product or operational changes. Material changes will be communicated through an appropriate channel and, when required, renewed acceptance will be requested.

Privacy questions and requests may be sent to soporte@nexaltra.com.