Privacy Policy

We collect personal data you provide directly to us, including:

• Contact details (name, email, phone, company, job title)
• Inquiry details (the message you send via our contact forms)
• Usage data (pages visited, referrer, device type)

On enterprise deployments where NEXTA software runs inside your environment, we do not collect or transmit your operational data — it stays on your infrastructure.

We use personal data only to:

• Respond to your inquiries and provide requested services
• Communicate about products, demos, and account matters you opted in to
• Improve our website and services
• Comply with legal obligations and protect our legitimate business interests

We never sell your personal data. We never use customer data to train shared models.

We process personal data on one of: your consent (e.g., contact forms, marketing emails), the performance of a contract (e.g., demo bookings, customer engagements), or our legitimate interest (e.g., responding to inbound queries). You may withdraw consent at any time by emailing legal@nexta.sa.

Personal data submitted via our website is stored on secure servers within the Kingdom of Saudi Arabia. We retain personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Inquiry data is typically retained for 24 months.

We may share personal data with:

• Service providers under contract (e.g., email and analytics providers) under confidentiality terms
• Regulatory authorities where required by law
• Successor entities in the event of a merger or acquisition

We never share personal data for marketing purposes with third parties.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention obligations)
• Object to processing for marketing purposes
• Lodge a complaint with the Saudi Data & AI Authority (SDAIA)

To exercise these rights, email legal@nexta.sa with the subject line “PDPL request”.

We use a small number of essential cookies to make this website work. We do not use third-party advertising trackers. You can disable cookies in your browser settings without affecting site functionality.

We protect personal data using encryption in transit (TLS 1.3) and at rest (AES-256), role-based access controls, audit logging, and quarterly penetration testing. See our Trust & Security Center for details.

We may update this policy from time to time. Material changes will be communicated via the website or by email if you have provided one. The “Last updated” date at the top of this page indicates the latest revision.