NEXO · INFORMATION AND CHOICES
Privacy policy
Version dated 12 October 2026 ·
How we use information to prepare and follow up business projects, who may receive it and the choices available to you.
Registration is not consent to advertising. Sending financial PDFs to OpenAI requires specific confirmation before each analysis.
Who is responsible
NEXO Capital Technologies Ltd is responsible for personal information processed in the activities described in this notice. Company number 17376645, at 66 Paul Street, London, EC2A 4NA, United Kingdom.
For privacy matters, contact [email protected] with “Privacy” in the subject line. Do not send passwords, access codes or identity documents in your initial enquiry.
What this notice covers
This notice covers nexofrontier.com, platform.nexofrontier.com and communications about preparing and reviewing business projects. It concerns identified or identifiable people, including representatives, contacts, directors and people mentioned in documents.
Business and financial information can also contain personal information. A file belonging to a company is not necessarily anonymous.
Information we use and its sources
Depending on your use, we process names, roles, email addresses, telephone numbers, account and authentication information, company details, project descriptions, financial information, documents, investment preferences, correspondence, submissions and review records. Technical and audit records may include IP addresses, browser information, authentication events and action timestamps.
Information comes directly from you, company representatives and use of our services. Business prospecting may use public sources such as company websites, directories and publications; sources should be considered when verifying the information.
Share only what is necessary and ensure you may provide information about others. Do not upload patient information, personal health information or other sensitive personal information for business analysis. Use the authenticated platform for requested documents, not WhatsApp or LinkedIn.
Why we use the information
- Accounts, enquiries and follow-up
- We use information to provide the workspace for your profile, respond to requests, organise the application and communicate process updates. The basis is the legitimate interests of NEXO and the represented business in providing and following up these business services.
- Project preparation and review
- We use business, financial and documentary information to identify gaps and support team assessment, including the preliminary analysis and AI support described below. The basis is the legitimate interest in preparing relevant information for project review. Sending financial PDFs to AI additionally requires the specific confirmation shown before each analysis.
- Security and traceability
- We use access information and action records to protect accounts and documents, manage permissions and investigate misuse, based on the legitimate interest in protecting the service and its users.
- Business prospecting and communication
- We may use professional information from public sources to identify businesses with a potential fit and prepare relevant contact, based on the legitimate interest in developing business relationships. You may object to direct marketing at any time. Where consent is required for a communication or optional technology, it must be obtained separately.
These interests do not automatically override your rights. You may object and request clarification using the contact above. Where a service is contracted directly with you as an individual, necessary processing may rely on performance of that contract or requested pre-contractual steps; a contract with a company does not automatically establish that basis for its representatives.
Registration does not subscribe you to advertising. Submission receipts, security messages and necessary process communications are service messages. Required fields support the indicated function; without them, creating an account or submitting a project may not be possible. Optional fields are identified.
Preliminary analysis, PDFs and artificial intelligence
The platform calculates preliminary indicators from saved information. AI support uses OpenAI to prepare a report for team review, using selected business and financial information, including descriptions of activities and use of funds. Direct account and contact fields are excluded from this selected dataset, but free text may contain personal information.
When document analysis is available, the financial PDFs and their versions are displayed before each transmission. They are sent only after your specific confirmation. You may cancel and continue saving information or request human review without authorising that document transmission. Changed information or documents require a fresh confirmation.
The full content of the selected financial PDFs is sent to OpenAI. Files may contain names, signatures, contact details and other personal information. Excluding questionnaire contact fields does not remove that information from a PDF. Review documents, remove unnecessary information and confirm that you may share them for this purpose.
Documents classified as identity or incorporation records are excluded from this AI reading. This does not remove personal information contained within a financial PDF. Saving information, uploading a document or submitting for human review does not, by itself, authorise sending PDFs to AI. On-screen confirmation is not blanket consent to process any information about other people.
AI may interpret figures or pages incorrectly and may not read the entire document. Its report provides findings, page references and limitations for human checking; it does not automatically change the figures declared in the questionnaire. Results are not approval, a credit or investment decision, or a funding guarantee. You may ask for clarification, correct information and request human review.
Transmission does not imply a guarantee of zero provider retention. If you do not want further document analyses, do not confirm new transmissions and contact the team about information already processed.
Who may receive the information
Authorised NEXO team members access information according to their permissions. The initial new-submission alert contains a reference, date and protected link, without documents, financial information or client contact details. The client confirmation is a receipt, not approval.
We use technical providers for hosting, storage, security, email and AI analysis. Integrations include Render for platform infrastructure, Cloudflare for website and security services, Microsoft for email and OpenAI for AI analysis. Necessary access depends on the service used.
An investor account does not automatically grant access to private company documents. The institutional workspace shows available authorised summaries. Further external sharing requires its own purpose and access arrangements; this notice does not authorise public disclosure of documents.
WhatsApp, LinkedIn and other external services have their own notices. Opening a link or using those services involves their operators. Do not send confidential documentation through those channels.
International processing
Our services and providers may involve storage, support or access in the United Kingdom and other countries. We do not guarantee that all information remains exclusively in the UK.
You may ask [email protected] for current information about countries and recipients involved in your case and applicable safeguards, including how to obtain information about those measures. This page is not a certification of international transfers and does not state that a particular mechanism covers every provider.
How long information is kept
The retention criterion is necessity for the purpose: we consider account activity, project follow-up, review status, privacy requests, justified security or legal-claim needs and specifically applicable legal obligations. This notice does not set one period for all information.
Technical records, messages, documents and backups may have different lifecycles. Closing a project or signing out does not automatically erase the account, documents or review records. You may ask the privacy contact about retention in your case and request erasure where applicable.
Your rights and how to contact us
Depending on applicable law, the basis and conditions, you may request access, correction, erasure, restriction and, where applicable, portability. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.
You may object to processing based on legitimate interests, subject to applicable conditions, and to direct marketing at any time.
Send your request to [email protected]. Proportionate identity verification may be necessary; do not send identity documents unless instructed by the team. The team can explain the processing and any limitations on a request.
You may complain to the Information Commissioner’s Office (ICO), where competent, or another competent authority in your case. This notice does not claim ICO registration or certification.
Changes to this notice
We may update this notice to reflect changes to services or information processing. Its version and date appear at the top of the page. Material changes will be communicated appropriately for the circumstances.