NXCLOUD PRIVACY POLICY
Last updated: August 31, 2026
Section 1: Who We Are
Welcome, and thank you for your interest in the suite of online services provided by NXCLOUD, including our websites, networks, applications, other services, and supporting documentation (collectively, the "Services").
NXCLOUD is operated by the applicable NXAI group entity that provides the Services to you; the NXAI group entities are named in the NXAI Group Privacy Policy. In this Policy, "NXCLOUD", "we", or "our" refer to that applicable entity. NXCLOUD is a global cloud communications service provider committed to delivering a range of communications solutions. We offer fully configured and integrated communications systems to enable end-to-end service delivery. We also provide modular communications services via APIs and SDKs, allowing customers to embed communications capabilities into their own applications to serve their end users.
This Privacy Policy applies to our customers, prospective customers, customers' users (including both direct and indirect users), visitors to our corporate websites, and recipients of our email communications.
By using our Services or accessing our websites, you acknowledge and understand that NXCLOUD may collect, use, and share your personal information in accordance with this Privacy Policy.
If you do not agree with the terms of this Policy, you should not use our Services.
This Privacy Policy applies only to personal data processing activities occurring in the course of your use of NXCLOUD products and their related service functionalities. The relevant services are governed by our Terms of Service.
Section 2: Personal Data We Collect and Purposes of Use
We act as a data controller only in the following two scenarios when collecting and using your personal data. The relevant data fields and their purposes of use are as follows:
1. When you register for an account
When you register to use our Services, we collect the following information:
• Name
• Email address
• Company name
• Country/region
• Account password
This information is used to create and manage your account, complete the registration process, provide access to the Services, and send you service-related notifications and security alerts.
2. When you communicate with our customer support
When you contact us through our customer support channels, we may request the following information:
• Name
• Email address
• Company name
• Country/region
We use this information to identify and respond to your inquiries, assist in problem resolution, and provide necessary communication support. This processing is based on our legitimate interests and is intended to address your proactive request.
We do not use the above information for marketing or personalized advertising purposes. If we intend to expand the scope of use in the future, we will obtain your consent separately in accordance with applicable laws.
Section 3: Disclosure of Personal Data
We take the security of your personal data seriously and commit that we will not disclose your personal data to any third party without your authorization or a valid legal basis.
We may disclose your personal data only under the following specific circumstances:
1. Legal Disclosure: We may disclose your personal data in accordance with applicable laws and regulations, court judgments, administrative orders, or in response to compliance requests from regulatory authorities (such as data protection authorities or telecommunications regulators). Such disclosures will be made strictly in accordance with legal procedures and limited to the necessary scope.
Other than the circumstances described above, we do not sell, transfer, publish, or otherwise make your personal data available to any third party, including our business partners, advertisers, or third-party content providers.
Section 4: How to Access and Control Your Personal Data
You are responsible for ensuring that all personal data you provide to NXCLOUD is accurate, complete, truthful, and up to date. We are committed to protecting your personal data rights in accordance with applicable laws, and we provide reasonable mechanisms for you to manage and control your personal data in line with the requirements of the Personal Data Protection Act 2012 (PDPA) of Singapore.
1. Your Rights
Under the PDPA, you are entitled to exercise the following rights:
• Right of Access: You have the right to request access to personal data we hold about you.
• Right to Correction: If you believe the personal data we hold is inaccurate or incomplete, you may request us to correct it.
• Right to Obtain a Copy: Where reasonably practicable, you may request a copy of your personal data.
• Right to Withdraw Consent: If we rely on your consent to process your personal data, you may withdraw your consent at any time.
• Right to Enquire: You may contact us to enquire about how your personal data is being collected, used, disclosed, or otherwise processed.
Please note that under certain exceptions permitted by the PDPA, we may not be able to fulfill certain requests, for example, where disclosure is prohibited by law or may adversely affect the privacy, safety, or legal rights of others.
2. How to Exercise Your Rights
You may submit your request by emailing us at: compliance@nxai.com.
To ensure the security of your information, we may require a written request and undertake reasonable steps to verify your identity (e.g., by requesting identification documents or account verification). We will respond to your request within a reasonable timeframe as prescribed by the PDPA, typically within 30 calendar days of receipt.
3. Withdrawal of Consent
If we process your personal data based on your prior consent, you may withdraw such consent at any time using the contact method above.
Upon withdrawal, we will cease processing the relevant data; however, the withdrawal shall not affect the lawfulness of any processing conducted prior to the withdrawal. We may also continue to process certain data based on contractual necessity, legitimate interests, or legal obligations.
4. Complaints and Feedback
If you believe we have violated the PDPA in our processing of your personal data, you may submit a complaint to the Personal Data Protection Commission (PDPC) of Singapore.
PDPC official website: https://www.pdpc.gov.sg
Section 5: How We Protect and Retain Your Personal Data
NXCLOUD places a high priority on the security of your personal data. We implement appropriate physical, administrative, and technical safeguards to protect your personal data from unauthorized access, disclosure, use, modification, damage, or loss. For example, we use encryption technologies to maintain data confidentiality, deploy protective mechanisms against malicious attacks, and enforce access control to ensure that only authorized personnel can access your personal data. We also provide our employees with training on information security and privacy protection to raise awareness and enhance compliance.
NXCLOUD has obtained and maintains ISO/IEC 27001 (Information Security Management), ISO/IEC 27701 (Privacy Information Management), and ISO 9001 (Quality Management) certifications, each subject to periodic independent audit and recertification.
While we are committed to protecting your personal data, please be aware that no security measure is completely foolproof.
Unless otherwise required by law or permitted for extended retention, we retain your personal data only for the minimum period necessary to fulfill the purposes described in this Policy. The standard retention period is 2 years.
If you choose to delete or deactivate your account, we will cease providing the associated services and delete personal data related to that account, except where retention is required by applicable laws or regulatory obligations.
Section 6: Processing of Minors' Personal Data
NXCLOUD's Services are primarily intended for adult users. We do not intentionally target or collect personal data from minors.
If you are a minor under the age of 18, please use our Services or provide your personal data only after obtaining consent from your parent or legal guardian. We strongly encourage parents and guardians to supervise the online activities of minors and to ensure that their personal data is properly protected.
If we become aware that we have inadvertently collected personal data from a minor without verifiable prior consent from a parent or legal guardian, we will verify the circumstances and delete the relevant data as soon as possible. If you believe that we may have mistakenly collected personal data from a minor, please contact us at compliance@nxai.com so we can take appropriate action.
For personal data collected from minors with verified and explicit consent from a parent or legal guardian, we will only use or disclose such data within the limits permitted by law, or where necessary to protect the vital interests of the minor.
Section 7: Third-Party Service Providers and Their Services
NXCLOUD engages cloud infrastructure service providers to host and process personal data on our behalf, as further described in Section 8. Other than infrastructure sub-processors engaged strictly to provide the Services, NXCLOUD does not integrate any independent third-party service providers or embed third-party content in its Services, nor do we share your personal data with third parties for their own independent purposes.
Should we introduce third-party services or functionalities in the future—such as third-party SDKs, analytics tools, or external links—we will provide a separate notice on the relevant pages and obtain your consent where required. We will also ensure that such third-party service providers fulfill their data protection obligations in accordance with applicable laws.
Section 8: Where We Store Personal Data and Whether Cross-Border Transfers Occur
NXCLOUD operates through NXAI group service sites ("Service Sites") hosted by a number of third-party cloud infrastructure providers across multiple countries and regions, currently including Hong Kong, Singapore, Indonesia, Chile, and the European Union, and NXAI may add or adjust such Service Sites from time to time as our business evolves. Personal data relating to a particular service is generally stored and processed within the Service Site corresponding to that service, in order to meet applicable data localization requirements in the relevant jurisdiction.
To provide the Services and support our global operations, personal data may be transferred across countries or regions within the NXAI group, including from the Service Site where it is stored to other NXAI group companies or personnel, for purposes such as operational support and customer service. Such intra-group transfers are governed by NXAI's intra-group data transfer agreement, under which all NXAI group companies must handle personal data in accordance with the standards set out in this Policy and apply security measures no less protective than those described herein. For the European Economic Area, the United Kingdom, and other jurisdictions with specific legal requirements for cross-border data transfers, NXAI will adopt appropriate transfer safeguards required by applicable law (including, without limitation, regulator-approved mechanisms such as standard contractual clauses), to ensure personal data receives an equivalent level of protection when transferred.
Section 9: Use of Cookies
A cookie is a small text file containing data that is stored in your browser or elsewhere on your hard drive. Cookies allow NXCLOUD to recognize your device as you navigate our websites or access your account, helping make your interactions with our websites and account more efficient, convenient, and meaningful.
Cookies themselves do not identify you personally. They recognize your web browser. Therefore, unless you voluntarily provide identifying information to NXCLOUD (e.g., by logging into your account), we cannot identify you solely based on your visit to our websites.
NXCLOUD uses both session cookies and persistent cookies:
• Session cookies disappear automatically when you close your browser or shut down your computer;
• Persistent cookies remain stored on your device even after it is powered off.
The cookies used on our websites fall into three categories:
1. Required Cookies
2. Functional Cookies
3. Advertising Cookies
To learn more about each category of cookies, you may visit our Cookie Management Tool by clicking the "Cookie Preferences" link located at the bottom-right corner of the NXCLOUD website you are visiting.
Section 10: Governing Law and Dispute Resolution
This Privacy Policy, including its formation, interpretation, performance, and any disputes or claims arising out of or in connection with it (including non-contractual disputes or claims), shall be governed by and construed in accordance with the laws of Singapore, without regard to its conflict of law principles.
Any dispute arising out of or in connection with this Privacy Policy shall first be resolved by the parties through good faith negotiations. If the parties are unable to reach an agreement within thirty (30) calendar days from the date either party submits a written request for negotiation, either party may refer the dispute to arbitration administered by the Singapore International Arbitration Centre (SIAC) in accordance with its rules in effect at the time.
The seat of arbitration shall be Singapore, and the arbitration proceedings shall be conducted in English. The arbitral award shall be final and binding on both parties.
Section 11: Updates to This Policy
We reserve the right to update or modify this Privacy Policy at any time. Any updates will take effect upon publication of the latest version on this page.
If material changes are made to this Policy—such as changes in the purposes of personal data use, scope of data sharing, or user rights—we may notify you through various means, including a prominent notice on our website homepage, in-service notifications, or direct email communications. Material changes will be notified at least 30 calendar days before they take effect; updates relating only to product or feature functionality may take effect immediately upon posting.
We encourage you to review this Policy periodically to stay informed about how we protect your personal data. Your continued use of our Services after any updates to this Policy will be deemed as your acknowledgment and acceptance of the updated terms.
Section 12: How to Contact Us
If you have any questions, comments, or suggestions regarding this Privacy Policy, you are welcome to contact us through the following channels:
• Email: compliance@nxai.com
• Customer Service Hotline: +65-31292899
• Mailing Address:
NXCLOUD ASIA PTE. LTD.
Solaris, 1 Fusionopolis Walk #06-02, Singapore 138628
We will respond to your request within 10 calendar days after receiving your inquiry and successfully verifying your identity.
