NXGN Software
  • Home
  • Privacy Policy
  • Terms of Use

Privacy Policy

NXGN Software

Effective Date: January 4, 2026 | Last Updated: January 4, 2026

1. Introduction

NXGN Software ("NXGN," "we," "us," or "our") is a technology consultancy specializing in mobile application development, artificial intelligence solutions, and cloud-native services built on modern infrastructure platforms. This Privacy Policy explains how we collect, use, disclose, and protect information in connection with our website (nxgnsoftware.com), our professional services, and the platforms and solutions we develop and operate.

We are committed to protecting the privacy of our clients, their end users, and visitors to our digital properties. This policy applies to:

  • Visitors to our website and digital properties
  • Prospective and current clients engaging our professional services
  • End users of platforms and applications we build and operate on behalf of clients
  • Partners and vendors who interact with our systems

For information specific to our consumer mobile applications distributed through app stores, please see our Mobile Application Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

Business Contact Information: When you inquire about our services, request a consultation, or engage us for professional services, we collect business contact information including name, email address, phone number, company name, job title, and business address.

Contractual Information: When entering into agreements with us, we collect information necessary to establish and maintain the business relationship, including billing information, authorized contacts, and project requirements.

Communications: We retain communications you send to us, including emails, support requests, and feedback.

2.2 Information Collected Automatically

Website Analytics: When you visit our website, we automatically collect information about your device and browsing activity, including IP address, browser type and version, operating system, referring URLs, pages viewed, time spent on pages, and clickstream data.

Technical Logs: Our infrastructure generates logs that may include IP addresses, request timestamps, API endpoints accessed, response codes, and performance metrics.

2.3 Information from Third Parties

We may receive information about you from third parties, including:

  • Business intelligence and lead generation services
  • Identity verification services
  • Our technology partners and sub-processors
  • Publicly available sources

2.4 Client Data and End User Data

In the course of providing professional services, we may process data on behalf of our clients ("Client Data"). This may include personal information about our clients' customers, users, or employees ("End User Data"). Our processing of Client Data is governed by our agreements with our clients, and our clients remain the data controllers for such data.

3. How We Use Information

We use the information we collect for the following purposes:

Service Delivery:

  • Providing consulting, development, and managed services
  • Building, deploying, and maintaining applications and platforms
  • Responding to support requests and technical inquiries
  • Processing payments and maintaining accounts

Business Operations:

  • Communicating about our services, updates, and opportunities
  • Analyzing and improving our services and operations
  • Ensuring security and preventing fraud
  • Complying with legal obligations

Website and Marketing:

  • Operating and improving our website
  • Analyzing website traffic and usage patterns
  • Sending marketing communications (with your consent where required)

4. Infrastructure and Sub-Processors

4.1 Cloud Infrastructure

NXGN Software builds solutions primarily on Cloudflare's global cloud platform. Our infrastructure utilizes:

  • Cloudflare Workers: Serverless compute at the edge
  • Cloudflare Pages: Static site and JAMstack hosting
  • Cloudflare D1: Distributed SQL database
  • Cloudflare Durable Objects: Stateful serverless coordination
  • Cloudflare R2: Object storage
  • Cloudflare Stream: Video delivery and processing
  • Cloudflare Access & Tunnel: Zero Trust security services
  • Cloudflare KV: Key-value storage

By using our services, you acknowledge that data may be processed on Cloudflare's global network, which operates data centers in 310+ cities across 100+ countries. Cloudflare acts as a sub-processor for data we process on behalf of clients.

For information about Cloudflare's privacy practices and data processing, please see:

  • Cloudflare Privacy Policy: https://www.cloudflare.com/privacypolicy/
  • Cloudflare GDPR Compliance: https://www.cloudflare.com/trust-hub/gdpr/
  • Cloudflare Data Processing Addendum: https://www.cloudflare.com/cloudflare-customer-dpa/

4.2 Sub-Processor List

We engage the following categories of sub-processors:

CategoryPurposeLocation
Cloud InfrastructureHosting, compute, storage, CDNGlobal (Cloudflare)
Payment ProcessingBilling and invoicingUnited States
AnalyticsWebsite and service analyticsUnited States
CommunicationEmail delivery and supportUnited States
SecurityIdentity verification, threat detectionUnited States/Global

A detailed list of sub-processors is available upon request for clients under contract. We will notify clients of material changes to our sub-processor list in accordance with our agreements.

4.3 Data Localization

For clients with data residency requirements, we can configure certain services to process and store data in specific geographic regions. Data localization options are available as part of our enterprise service agreements.

5. Legal Bases for Processing (GDPR)

For individuals in the European Economic Area (EEA), United Kingdom, or Switzerland, we process personal data under the following legal bases:

Contractual Necessity: Processing necessary to perform our contractual obligations or take steps at your request before entering into a contract.

Legitimate Interests: Processing for our legitimate business interests, such as improving our services, marketing, and security, where these interests are not overridden by your rights.

Legal Obligation: Processing necessary to comply with legal requirements.

Consent: Where you have provided explicit consent to specific processing activities.

6. Data Sharing and Disclosure

We do not sell personal information. We may share information in the following circumstances:

Service Providers and Sub-Processors: We share information with third-party service providers who perform services on our behalf, subject to contractual obligations to protect the information.

Clients: For End User Data processed on behalf of clients, we share information as directed by and in accordance with our agreements with those clients.

Legal Requirements: We may disclose information when required by law, legal process, or government request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, information may be transferred as part of that transaction.

With Your Consent: We may share information with your consent or at your direction.

7. International Data Transfers

NXGN Software is based in the United States. Information we collect may be transferred to, stored, and processed in the United States or other countries where we or our service providers operate.

For transfers of personal data from the EEA, UK, or Switzerland to countries not deemed adequate by relevant authorities, we rely on:

  • Standard Contractual Clauses (SCCs): EU-approved contractual terms for data transfers
  • Data Processing Agreements: Incorporating appropriate safeguards
  • Supplementary Measures: Technical and organizational measures to ensure protection

Cloudflare, our primary infrastructure provider, maintains compliance with EU-US Data Privacy Framework, EU Standard Contractual Clauses, and the EU Cloud Code of Conduct.

8. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including:

  • Client Data: For the duration of the client relationship plus the period required by our contractual obligations and applicable law
  • Business Contact Information: Until you request deletion or we determine the information is no longer needed
  • Website Analytics: Typically 26 months, unless a shorter period is required
  • Legal and Compliance Records: As required by applicable law and regulation

Client Data is retained and deleted in accordance with our agreements with clients and their instructions.

9. Data Security

We implement appropriate technical and organizational measures to protect information, including:

  • Encryption of data in transit (TLS 1.3) and at rest
  • Access controls and authentication requirements
  • Regular security assessments and monitoring
  • Incident response procedures
  • Employee security training

Our infrastructure leverages Cloudflare's enterprise security capabilities, including DDoS protection, Web Application Firewall (WAF), and Zero Trust access controls.

While we strive to protect your information, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security.

10. Your Rights and Choices

10.1 General Rights

You may:

  • Access: Request information about the personal data we hold about you
  • Correction: Request correction of inaccurate personal data
  • Deletion: Request deletion of your personal data, subject to legal retention requirements
  • Opt-Out: Unsubscribe from marketing communications

10.2 EEA, UK, and Swiss Residents

If you are located in the EEA, UK, or Switzerland, you have additional rights under GDPR/UK GDPR:

  • Right to data portability
  • Right to restrict processing
  • Right to object to processing
  • Right to withdraw consent
  • Right to lodge a complaint with a supervisory authority

10.3 California Residents (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act and California Privacy Rights Act:

  • Right to know what personal information is collected, used, and disclosed
  • Right to delete personal information
  • Right to opt-out of sale/sharing of personal information (we do not sell personal information)
  • Right to non-discrimination for exercising privacy rights
  • Right to correct inaccurate personal information
  • Right to limit use of sensitive personal information

10.4 Exercising Your Rights

To exercise your rights, please contact us at privacy@nxgnsoftware.com. We will respond to requests within the timeframes required by applicable law. We may need to verify your identity before processing your request.

For End User Data processed on behalf of our clients, please contact the relevant client directly to exercise your rights, as they are the data controller for such data.

11. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to:

  • Enable website functionality
  • Analyze website traffic and usage
  • Remember your preferences

You can control cookies through your browser settings. Note that disabling cookies may affect website functionality.

We do not respond to Do Not Track signals at this time, as there is no industry standard for such signals.

12. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

13. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take steps to delete such information.

14. Data Processing Agreement

Enterprise clients may request execution of a Data Processing Agreement (DPA) that governs our processing of personal data on their behalf. Our standard DPA incorporates:

  • EU Standard Contractual Clauses
  • UK International Data Transfer Addendum
  • GDPR Article 28 processor obligations
  • Security measures and audit rights
  • Sub-processor management procedures

To request a DPA, please contact legal@nxgnsoftware.com.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a revised effective date. For clients under contract, we will provide notice in accordance with our agreements.

16. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

NXGN Software
Email: privacy@nxgnsoftware.com
Legal Inquiries: legal@nxgnsoftware.com

For data protection inquiries from the EEA or UK, you may also contact our designated representative (details available upon request).

17. Additional Disclosures

17.1 Cloudflare Partner Program

NXGN Software participates in Cloudflare's partner programs. As a partner, we build, deploy, and manage solutions using Cloudflare's platform on behalf of our clients. Our participation in these programs does not change our obligations to protect your information or our clients' data.

17.2 AI and Machine Learning

Some of our solutions incorporate artificial intelligence and machine learning capabilities. When we process personal data using AI/ML technologies:

  • We maintain human oversight of automated decisions that significantly affect individuals
  • We implement appropriate safeguards against bias and errors
  • We provide transparency about AI/ML use in our service documentation
  • We do not use Client Data to train general-purpose AI models without explicit authorization

17.3 Security Incident Response

In the event of a security incident affecting personal data:

  • We will notify affected clients within 72 hours of becoming aware of a breach
  • We will cooperate with clients in their notification obligations
  • We will document incidents and remediation measures
  • We will provide information necessary for clients to comply with their legal obligations

This Privacy Policy constitutes part of NXGN Software's commitment to transparency and data protection.

© 2026 NXGN Software. Engineering Excellence for Mobile & Web.

Privacy PolicyTerms of Use