Nexclave Privacy Policy
Effective Date: October 31, 2026 | Last Updated: October 31, 2026 | Nexclave Solutions Pvt Ltd
Nexclave Solutions Pvt Ltd ("Nexclave", "we", "our", or "us") provides native AI enterprise engineering services, ready-to-ship AI products (RKE, Omni Vision, Email Triage, YOLO Vision), and Model Context Protocol (MCP) integrations. This Privacy Policy describes our practices regarding the collection, use, retention, and protection of information when you interact with our websites, agent plugins, and MCP servers in compliance with applicable data protection regulations and plugin directory guidelines.
Core Commitment: Nexclave designs systems with data sovereignty and privacy by default. We do not train, retrain, or improve public AI models or foundation models using customer or user data.
1. Categories of Personal Data Collected
We strictly limit the data we collect to what is necessary for providing our enterprise services and maintaining protocol operations (Data Minimization):
- Inquiry & Contact Information: When you submit a project inquiry or contact request via our MCP tools or website forms, we collect your full name, work email address, company name, phone number (optional), role/title (optional), and project details.
- Technical & Telemetry Data: When agentic clients or web browsers communicate with our MCP endpoints, our web servers collect standard technical logs: client IP address, request timestamps, HTTP method, user agent, request duration, and status codes.
- Authentication Data: The public Nexclave MCP server does not require or collect user login credentials or passwords.
2. Specific Purposes of Use
Collected data is used solely for the following legitimate business purposes:
- Fulfilling, triaging, and responding to business inquiries, service requests, and project consultations under our 24-business-hour SLA.
- Maintaining, operating, and ensuring the stability, performance, and security of our Streamable HTTP MCP server endpoints.
- Preventing abuse, denial-of-service attempts, or protocol misuse.
3. Categories of Recipients & Third-Party Disclosures
We do not sell, rent, monetize, or trade your personal data with third parties or data brokers. Personal information is disclosed exclusively to:
- Cloud & Hosting Service Providers: Trusted enterprise infrastructure providers who host our secure servers and databases under strict contractual confidentiality and data processing agreements.
- Legal & Regulatory Authorities: Only when strictly required by law, subpoena, or valid legal process.
4. Data Retention Timelines
We maintain clear, enforced retention policies to ensure personal data is not held longer than necessary:
| Data Category |
Retention Period |
Post-Retention Action |
| Inquiry & Contact Records |
Up to 12 months from the date of submission |
Permanently deleted or anonymized, unless an active enterprise engagement is established |
| Server Access & Telemetry Logs |
Maximum of 30 days |
Automatically rotated and permanently purged |
| MCP Query Payloads |
Processed in-memory only (0-day retention) |
Immediately discarded after response transmission; never persisted to disk |
5. User Controls & Data Subject Rights
Regardless of your geographic location, Nexclave affords users full control over their personal data:
- Right of Access: You may request a copy of the personal information we hold about you.
- Right to Rectification: You may ask us to correct or update inaccurate information.
- Right to Erasure ("Right to be Forgotten"): You may request the permanent deletion of your inquiry data and contact history at any time.
- Right to Object & Restrict Processing: You may opt out of future communications from us.
To exercise any of these rights, email us at privacy@nexclave.com or support@nexclave.com. We verify and respond to all requests within 30 calendar days at no charge.
6. Security & Enterprise Guardrails
We implement technical and organizational measures aligned with ISO/IEC 42001 and ISO/IEC 23894 guidelines:
- All transmissions are encrypted in transit via Transport Layer Security (TLS 1.3).
- Strict role-based access control (RBAC) ensures only authorized engineering personnel can access inquiry systems.
- Continuous telemetry monitoring and PII redaction fences are integrated from day one.
7. Contact Information
For questions or feedback regarding this Privacy Policy or our data practices, please reach out: