Privacy Policy

Who is responsible

Nexstart is operated by MDNP Consulting s.r.o., the controller of personal data collected through this website.

Contact us about privacy at info@nexstart.io.

What we collect

Our contact form collects your name, email address, message and, if you choose to provide them, your company and topic of interest. We also receive information you include in subsequent correspondence.

The hosting service processes technical request information, such as IP addresses, timestamps and requested pages, to deliver and protect the website. The form also uses a pseudonymous identifier derived from your IP address and short-lived request fingerprints to limit spam and prevent duplicate submissions.

Please avoid including passwords, financial account details or sensitive personal information in your inquiry.

AI voice demo calls

When you request a demo call on our website, we collect your first name and phone number and use them to place one call from Nora, our AI voice assistant. You speak with an AI, not a person, and the assistant says so when the call starts. On weekdays between 8:00 and 18:00 (Budapest time), if you ask or agree, Nora can connect you to a member of our team during the call. That part of the call is not recorded.

The call is recorded and transcribed. After the call, the conversation is summarised automatically, including details you choose to share, such as your company, what you would like to improve, your e-mail address and a preferred time for a consultation. Our team uses this summary to follow up on your request.

We place the call because you ask for it and confirm this in the form (Article 6(1)(a) GDPR). You can withdraw your consent at any time by ending the call or by emailing info@nexstart.io; this does not affect processing that already took place. If you ask for a consultation during the call, we process your details to take the steps you requested (Article 6(1)(b)).

The call runs on ElevenLabs, our voice AI provider, which uses AI language models from its own sub-processors, and on Twilio for telephony. Call summaries are passed through our workflow automation into a Google Sheets list used by our team, and a short internal notification may be sent to a team member. These providers may process data outside the European Economic Area, in particular in the United States, under safeguards such as the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

Recordings, transcripts and summaries are kept for up to 12 months, unless we start working together or a legal obligation requires longer retention. To prevent abuse, the demo form keeps salted hashes of the phone number and IP address for up to 24 hours. The call is not used for automated decisions with legal or similarly significant effects.

Why we use it

We use your details to answer your questions, understand your needs, prepare a proposal and follow up on that conversation. Where you ask us to take steps towards a contract with you, we rely on Article 6(1)(b) GDPR. For general inquiries and communication with company representatives, we rely on our legitimate interest in handling business requests under Article 6(1)(f).

Protecting the website and preventing abuse also serves our legitimate interest under Article 6(1)(f). Where required, we retain or disclose information to meet legal obligations under Article 6(1)(c).

Submitting this form does not subscribe you to marketing. We do not sell your information or use this form for automated decisions with legal or similarly significant effects.

Who can access it

Inquiries are sent to our business email and, through our n8n workflow, to a private Google Sheets contact list. The list includes your inquiry, submission time, form language and a request reference so our team can follow up and avoid duplicate entries. Access is limited to people authorised to respond. Hostinger provides our web hosting and email infrastructure. Service providers process information as needed to operate those services; professional advisers or authorities may receive it where necessary for legal obligations or claims.

Our providers may process data outside the European Economic Area. Where this happens, applicable transfer safeguards are required, such as an adequacy decision or the European Commission’s standard contractual clauses. Hostinger describes its arrangements in its Data Processing Addendum. Contact us for more information about relevant safeguards.

How long we keep it

We keep inquiry correspondence and contact-list entries while discussing your request and during relevant follow-up. For inquiries that do not become a project, our retention period is up to 12 months after the last meaningful contact, unless a legal obligation or an ongoing dispute requires longer retention. If we work together, relevant information becomes part of our contractual records and is retained for the applicable contractual and legal purposes.

The contact endpoint retains anti-abuse counters and duplicate-request fingerprints for up to 24 hours of active use; expired entries are removed on the next valid submission. Hosting logs and backups follow the provider’s operational retention schedules. We do not maintain a separate website database of inquiry contents.

Your choices and rights

Providing your information is voluntary. We need a name, valid email address and message to handle an inquiry through the form; company and topic are optional. You can also contact us directly by email.

Depending on the circumstances, you can ask for access to your data, correction, deletion, restriction or portability. You may object to processing based on legitimate interests. Email info@nexstart.io to exercise these rights. We may need to verify your identity and will normally respond within one month.

You can complain to a supervisory authority, including the Office for Personal Data Protection of the Slovak Republic.

Cookies and website tools

We use Google Analytics 4 only with your consent to understand page visits, device and browser information and how people use the website. Google may process this data outside the EEA under its applicable transfer safeguards. Analytics cookies (_ga and _ga_*) last up to 180 days. We remember your consent choice in local storage for 180 days. You can decline or withdraw consent at any time using Cookie preferences in the footer; withdrawing consent stops future collection and removes our analytics cookies. The legal basis is your consent (Article 6(1)(a) GDPR). We do not send contact form contents to Analytics or enable advertising personalization. See Google’s privacy policy at policies.google.com/privacy. Fonts and visual assets are served from our hosting. The contact form does not require cookies. If you choose a language, we store that preference in your browser’s local storage until you change it or clear your browser data. On a first visit to the homepage, we use your browser language to choose English or Hungarian. No IP geolocation service is used.

Changes to this notice

We will update this page if the way we handle information changes. The date above identifies the current version.