NXCLOUD PRIVACY POLICY

Last updated: 2026-03-20

NXCLOUD places great importance on your privacy. Please read this Privacy Policy (hereinafter referred to as “this Policy”) carefully to understand how we collect, use, store, and protect your personal information. This Policy applies to NXCLOUD websites, products, and services that display a link to or explicitly reference this Policy.

We collect information generated during your use and purchase of our services, as well as any information you voluntarily provide during your interactions with NXCLOUD. For example, when you submit a service inquiry, register an account, or activate a service, you may be required to provide personal information such as your name and contact details.

We fully recognize the importance of privacy to you and regard it as a core responsibility in our business operations. This Policy explains how we process your personal data when you use our products, services, and websites, including what information we collect, why we collect it, and how we use it. We encourage you to review this Policy carefully to gain a comprehensive understanding of our data processing practices.

This Policy covers the following topics:

Section 1: Who We Are

Section 2: How We Collect and Use Your Personal Data

Section 3: Disclosure of Personal Data

Section 4: How to Access and Control Your Personal Data

Section 5: How We Protect and Retain Your Personal Data

Section 6: Processing of Minors’ Personal Data

Section 7: Third-Party Service Providers and Their Services

Section 8: Where We Store Personal Data and Whether Cross-Border Transfers Occur

Section 9: Use of Cookies

Section 10: Governing Law and Dispute Resolution

Section 11: Updates to This Policy

Section 12: How to Contact Us

Section 1: Who We Are

Welcome, and thank you for your interest in the suite of online services provided by NXCLOUD, including our websites, networks, applications, other services, and supporting documentation (collectively, the “Services”).

NXCLOUD ASIA PTE. LTD. (together with its affiliates, hereinafter referred to as “NXCLOUD”, “we”, or “our”) is a global cloud communications service provider committed to delivering a range of communications solutions. We offer fully configured, integrated communications systems to enable end-to-end service delivery. We also provide modular communications services via APIs and SDKs, allowing customers to embed communications capabilities into their own applications to serve their end users.

This Privacy Policy applies to our customers, prospective customers, customers’ end users (both direct and indirect), visitors to our corporate websites, and recipients of our email communications.

By using our Services or accessing our websites, you acknowledge and understand that NXCLOUD may collect, use, and share your information in accordance with this Privacy Policy.

If you do not agree with the terms of this Privacy Policy, you should not use our Services.

The Privacy Policy applies only to the processing of your personal data when you use NXCLOUD and the services they provide. The relevant services are governed by the Terms of Service.

Section 2: Personal Data We Collect and Purposes of Use

We act as a data controller only in the following two scenarios when collecting and using your personal data. The relevant data fields and their purposes of use are as follows:

1. When you register for an account

When you register to use our Services, we collect the following information:

Name

Email address

Company name

Country/region

Account password

This information is used to create and manage your account, complete the registration process, provide access to the Services, and send you service-related notifications and security alerts.

2. When you communicate with our customer support

When you contact us through our customer support channels, we may request the following information:

Name

Email address

Company name

Country/region

We use this information to identify and respond to your inquiries, assist in problem resolution, and provide necessary support communications. This processing is based on our legitimate interests and is intended to address your proactive request.

We do not use the above information for marketing or personalized advertising purposes. If we intend to expand the scope of use in the future, we will obtain your consent separately in accordance with applicable laws.

Section 3: Disclosure of Personal Data

We take the security of your personal data seriously and commit that we will not disclose your personal data to any third party without your authorization or a valid legal basis.

We may disclose your personal data only under the following specific circumstances:

1.Legal Disclosure: We may disclose your personal data in accordance with applicable laws and regulations, court judgments, administrative orders, or in response to compliance requests from regulatory authorities (such as data protection authorities or telecommunications regulators). Such disclosures will be made strictly in accordance with legal procedures and limited to the necessary scope.

Other than the circumstances described above, we do not sell, transfer, publish, or otherwise make your personal data available to any third party, including our business partners, advertisers, or third-party content providers.

Section 4: How to Access and Control Your Personal Data

You are responsible for ensuring that all personal data you provide to NXCLOUD is accurate, complete, and kept up to date. NXCLOUD is committed to safeguarding your personal data rights in accordance with applicable data protection laws, including the Personal Data Protection Act 2012 of Singapore.

We provide reasonable and transparent mechanisms to enable you to access, review, and control your personal data.

1. Your Rights

Subject to applicable laws and regulatory requirements, you may have the following rights:

Right of Access: You may request access to personal data that we hold about you, as well as information on how such data has been used or disclosed.

Right to Correction: You may request correction of any personal data that is inaccurate or incomplete.

Right to Data Portability / Copy: Where applicable and reasonably practicable, you may request a copy of your personal data in our possession.

Right to Withdraw Consent: Where we rely on your consent for processing, you may withdraw your consent at any time.

Right to Enquiry: You may contact us to understand how your personal data is collected, used, disclosed, or otherwise processed, including in connection with our cloud communication services.

Please note that we may decline to process certain requests where permitted or required by law, including where such requests would compromise the privacy of others, reveal confidential business information, or conflict with legal obligations.

2. How to Exercise Your Rights

To exercise your rights, you may contact us at: compliance@nxai.com.

For security purposes, we may require you to submit your request in writing and provide sufficient information to verify your identity (e.g., account verification or identification documents).

We will respond to your request within a reasonable timeframe in accordance with applicable laws, generally within 30 days of receiving a valid request. Where additional time is required, we will inform you accordingly.

3. Withdrawal of Consent

Where we process your personal data based on your consent, you may withdraw such consent at any time by contacting us using the details above.

Upon withdrawal, we will cease processing your personal data for the relevant purposes, unless continued processing is permitted or required under applicable laws. This may include situations where processing is necessary for:

the performance of a contract,

compliance with legal obligations, or

our legitimate business interests (such as service security, fraud prevention, and service improvement).

Withdrawal of consent does not affect the lawfulness of processing carried out prior to such withdrawal.

4. Complaints and Regulatory Contact

If you believe that we have not handled your personal data in accordance with applicable data protection laws, you may lodge a complaint with the Personal Data Protection Commission.

PDPC official website: https://www.pdpc.gov.sg

Section 5: How We Protect and Retain Your Personal Data

NXCLOUD places a high priority on the security of your personal data. We implement appropriate physical, administrative, and technical safeguards to protect your personal data from unauthorized access, disclosure, use, modification, damage, or loss. For example, we use encryption technologies to maintain data confidentiality, deploy protective mechanisms against malicious attacks, and enforce access control to ensure that only authorized personnel can access your personal data. We also provide our employees with training on information security and privacy protection to raise awareness and enhance compliance.

While we are committed to protecting your personal data, please be aware that no security measure is completely foolproof.

Unless otherwise required by law or permitted for extended retention, we retain your personal data only for the minimum period necessary to fulfill the purposes described in this Policy. The standard retention period is 2 years.

If you choose to delete or deactivate your account, we will cease providing the associated services and delete personal data related to that account, except where retention is required by applicable laws or regulatory obligations.

Section 6: Processing of Minors’ Personal Data

NXCLOUD’s Services are primarily intended for adult users. We do not intentionally target or collect personal data from minors.

If you are a minor under the age of 18, please use our Services or provide your personal data only after obtaining consent from your parent or legal guardian. We strongly encourage parents and guardians to supervise the online activities of minors and to ensure that their personal data is properly protected.

If we become aware that we have inadvertently collected personal data from a minor without verifiable prior consent from a parent or legal guardian, we will verify the circumstances and delete the relevant data as soon as possible. If you believe that we may have mistakenly collected personal data from a minor, please contact us at compliance@nxai.com so we can take appropriate action.

For personal data collected from minors with verified and explicit consent from a parent or legal guardian, we will only use or disclose such data within the limits permitted by law, or where necessary to protect the vital interests of the minor.

Section 7: Third-Party Service Providers and Their Services

At present, NXCLOUD does not integrate any third-party service providers or embed third-party content in its Services, nor do we share your personal data with third parties for their own independent purposes.

Should we introduce third-party services or functionalities in the future—such as third-party SDKs, analytics tools, or external links—we will provide a separate notice on the relevant pages and obtain your consent where required. We will also ensure that such third-party service providers fulfill their data protection obligations in accordance with applicable laws.

Section 8: Where We Store Personal Data and Whether Cross-Border Transfers Occur

Personal data held by NXCLOUD is centrally stored and processed on Alibaba Cloud servers located in Hong Kong, China. During the course of service provision, cross-border access and use from Singapore, mainland China, and other regions may occur through controlled and secure mechanisms.

We implement reasonable technical and organizational measures to ensure the security of personal data during cross-border transfers, and we comply with applicable data protection laws and regulations, including the Personal Data Protection Act (PDPA) of Singapore and the requirements of other relevant jurisdictions.

We transfer your personal data only to the extent necessary for the following purposes:

To provide you with customer service, account management, and service delivery;

To fulfill contractual obligations or respond to your requests;

To facilitate lawful access in circumstances such as audits or dispute resolution, where permitted or required by law.

We ensure that any overseas recipients involved in processing personal data are subject to appropriate data protection obligations, including contractual safeguards, access controls, and audit logging mechanisms. Where required by law, we will obtain your explicit consent before any cross-border transfer takes place.

Section 9: Use of Cookies

A cookie is a small text file containing data that is stored in your browser or elsewhere on your hard drive. Cookies allow NXCLOUD to recognize your device as you navigate our websites or access your account, helping make your interactions with our websites and account more efficient, convenient, and meaningful.

Cookies themselves do not identify you personally. They recognize your web browser. Therefore, unless you voluntarily provide identifying information to NXCLOUD (e.g., by logging into your account), we cannot identify you solely based on your visit to our websites.

NXCLOUD uses both session cookies and persistent cookies:

Session cookies disappear automatically when you close your browser or shut down your computer;

Persistent cookies remain stored on your device even after it is powered off.

The cookies used on our websites fall into three categories:

1.Required Cookies

2.Functional Cookies

3.Advertising Cookies

To learn more about each category of cookies, you may visit our Cookie Management Tool by clicking the “Cookie Preferences” link located at the bottom-right corner of the NXCLOUD website you are visiting.

Section 10: Governing Law and Dispute Resolution

This Privacy Policy, including its formation, interpretation, performance, and any disputes or claims arising out of or in connection with it (including non-contractual disputes or claims), shall be governed by and construed in accordance with the laws of Singapore, without regard to its conflict of law principles.

Any dispute arising out of or in connection with this Privacy Policy shall first be resolved by the parties through good faith negotiations. If the parties are unable to reach an agreement within thirty 30 business days from the date either party submits a written request for negotiation, either party may refer the dispute to arbitration administered by the Singapore International Arbitration Centre (SIAC) in accordance with its rules in effect at the time.

The seat of arbitration shall be Singapore, and the arbitration proceedings shall be conducted in English. The arbitral award shall be final and binding on both parties.

Section 11: Updates to This Policy

We reserve the right to update or modify this Privacy Policy at any time. Any updates will take effect upon publication of the latest version on this page.

If material changes are made to this Policy—such as changes in the purposes of personal data use, scope of data sharing, or user rights—we may notify you through various means, including a prominent notice on our website homepage, in-service notifications, or direct email communications.

We encourage you to review this Policy periodically to stay informed about how we protect your personal data. Your continued use of our Services after any updates to this Policy will be deemed as your acknowledgment and acceptance of the updated terms.

Section 12: How to Contact Us

If you have any questions, comments, or suggestions regarding this Privacy Policy, you are welcome to contact us through the following channels:

Email: compliance@nxai.com

Customer Service Hotline: +65-31292899

Mailing Address:

NXCLOUD ASIA PTE. LTD.

8 Eu Tong Sen Street #24-82, The Central

Singapore 059818

We will respond to your request within 10 business days after receiving your inquiry and successfully verifying your identity.

Start offering your customers a better service experience