Cookie Policy

1. What Are Cookies?

Cookies are small text files that are stored on your device (computer, tablet, or mobile) when you visit a website. They are widely used to make websites work more efficiently and to provide information to website owners.

Cookies can be categorized as:

• Session Cookies: Temporary cookies that are erased when you close your browser
• Persistent Cookies: Cookies that remain on your device for a set period
• First-Party Cookies: Cookies set by the website you're visiting
• Third-Party Cookies: Cookies set by external services (like analytics or advertising)

2. Legal Basis for Cookie Processing (GDPR Compliance)

Under the General Data Protection Regulation (GDPR) and similar privacy laws, we process cookies based on the following legal bases:

Essential Cookies - Legitimate Interest

Essential cookies are placed based on our legitimate interest in providing a secure and functional website. These cookies are strictly necessary for:

• User authentication and account security
• Fraud prevention and detection
• Load balancing and website stability
• Compliance with legal obligations

Legal Basis: Article 6(1)(f) GDPR - Legitimate interests pursued by the data controller.

Non-Essential Cookies - Consent

Analytics, functional, and marketing cookies are placed only after obtaining your explicit consent. This consent:

• Must be freely given, specific, informed, and unambiguous
• Requires affirmative action (no pre-ticked boxes)
• Can be withdrawn at any time without affecting your access to our website
• Is recorded and documented for compliance purposes

Legal Basis: Article 6(1)(a) GDPR - Consent of the data subject.

Important: We will NOT place any non-essential cookies on your device until you have provided explicit consent.

3. Explicit Consent Requirements

We adhere to the highest standards for obtaining consent:

• No Pre-Consent Placement: Non-essential cookies are NEVER placed before you consent
• No Pre-Ticked Boxes: All cookie categories require affirmative action to enable
• Granular Control: You can consent to specific cookie categories individually
• Easy Withdrawal: Withdrawing consent is as easy as giving it - simply click "Cookie Settings" in our footer
• No Consequences: Withdrawing consent will not affect your website access or functionality of essential features
• Clear Information: We provide detailed information about each cookie before you consent

How to Withdraw Consent: Click the "Cookie Settings" button below or at the bottom of any page, or contact us directly at myainexus@gmail.com.

4. Geographic Scope & Applicable Laws

This Cookie Policy complies with the following regulations based on your location:

European Union / European Economic Area

• GDPR (General Data Protection Regulation) - Regulation (EU) 2016/679
• ePrivacy Directive (2002/58/EC) - Privacy and Electronic Communications
• PECR (Privacy and Electronic Communications Regulations 2003) - UK implementation

United States

• CCPA (California Consumer Privacy Act)
• CPRA (California Privacy Rights Act)
• Virginia VCDPA (Consumer Data Protection Act)
• Colorado CPA (Colorado Privacy Act)
• Connecticut CTDPA (Connecticut Data Privacy Act)
• Utah UCPA (Utah Consumer Privacy Act)

United Kingdom

• UK GDPR - Data Protection Act 2018
• PECR - Privacy and Electronic Communications Regulations

We apply the highest standard of protection globally, ensuring all users benefit from comprehensive privacy rights regardless of location.

5. International Data Transfers

Some cookies may result in the transfer of your data outside your country of residence:

Data Transfers to the United States

We use the following US-based services that may transfer data to the United States:

• Google Analytics: Data transferred under Standard Contractual Clauses (SCCs)
• Google Tag Manager: Data transferred under Google's Data Processing Terms

Safeguards for International Transfers

We ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs): Approved by the European Commission for data transfers
• Adequacy Decisions: We rely on adequacy decisions where available
• Data Processing Agreements: All third-party providers have signed DPA agreements
• Encryption: All data transfers use TLS 1.3 encryption

Risk: The US may not provide the same level of data protection as your home country. However, our safeguards ensure your rights remain protected.

6. Complete Cookie Inventory

The following table provides detailed information about every cookie we use:

7. Your Rights Under Data Protection Laws

Depending on your location, you have the following rights regarding cookies and your personal data:

GDPR Rights (EU/EEA/UK)

• Right of Access (Article 15): Request a copy of all data collected about you via cookies
• Right to Rectification (Article 16): Correct inaccurate data collected through cookies
• Right to Erasure (Article 17): Request deletion of your data ("Right to be Forgotten")
• Right to Restrict Processing (Article 18): Limit how we use your cookie data
• Right to Data Portability (Article 20): Receive your data in a machine-readable format
• Right to Object (Article 21): Object to cookie-based processing, including profiling
• Right to Withdraw Consent (Article 7): Withdraw cookie consent at any time
• Right to Lodge a Complaint (Article 77): File a complaint with a supervisory authority

CCPA/CPRA Rights (California)

• Right to Know: Request disclosure of cookie data collected about you
• Right to Delete: Request deletion of personal information collected via cookies
• Right to Opt-Out: Opt-out of the sale or sharing of personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

How to Exercise Your Rights

To exercise any of these rights, please contact us:

• Email: myainexus@gmail.com
• Response Time: We will respond within 30 days (GDPR) or 45 days (CCPA)
• Verification: We may need to verify your identity before processing your request

8. Automated Decision-Making and Profiling

We do not use cookies for automated decision-making that produces legal effects or significantly affects you. However, we do use limited profiling:

Lead Scoring (Limited Profiling)

Our CRM system uses cookie data for lead scoring:

• Logic: Points assigned based on pages visited, time on site, and form interactions
• Consequences: May affect sales follow-up priority and marketing communications
• Legal Basis: Consent (for tracking cookies) and Legitimate Interest (for essential cookies)

Your Rights: You have the right to object to this profiling. Contact us to opt-out of lead scoring.

9. Specific Cookie Durations

The following are the exact durations for each cookie we use:

Note: You can clear all cookies at any time through your browser settings.

10. Third-Party Privacy Policies

We use services from the following third parties. Please review their privacy policies:

• Google Analytics: https://policies.google.com/privacy
• Google Tag Manager: https://policies.google.com/privacy
• Formspree (Form Processing): https://formspree.io/legal/privacy-policy/

11. Notice of Policy Updates

We may update this Cookie Policy from time to time to reflect:

• Changes in our cookie usage
• New third-party services
• Changes in applicable laws
• Improvements to our privacy practices

How We Notify You

• Material Changes: We will display a banner on our website for 30 days
• Email Notification: If we have your email, we will notify you of significant changes
• Policy Date: The "Last Updated" date at the bottom of this policy will always reflect the latest version

Acceptance: By continuing to use our website after changes are posted, you acknowledge and agree to the updated Cookie Policy.

12. Do Not Track (DNT) Signals

Our Position on DNT Signals:

We do not currently respond to "Do Not Track" (DNT) signals from web browsers. This is because:

• There is no consistent industry standard for DNT
• Different browsers interpret DNT differently
• We provide granular cookie controls that offer better protection

Alternative Opt-Out Mechanisms

Instead of DNT, we offer:

• Cookie Consent Banner: Granular control over all non-essential cookies
• Google Analytics Opt-Out: Install the official browser add-on
• Browser Settings: Block all third-party cookies in your browser
• Contact Us: Request manual opt-out at myainexus@gmail.com

13. Supervisory Authority & Complaints

If you believe we have not handled your cookie data appropriately, you have the right to lodge a complaint:

European Union / EEA

You can lodge a complaint with your local data protection authority. A complete list is available at:

https://edpb.europa.eu/about-edpb/board/members_en

United Kingdom

Information Commissioner's Office (ICO)

• Website: https://ico.org.uk/make-a-complaint/
• Phone: 0303 123 1113
• Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

United States - California

California Privacy Protection Agency (CPPA)

Primary enforcement agency for CPRA (California Privacy Rights Act)

• Website: https://cppa.ca.gov/
• Email: regulations@cppa.ca.gov

California Attorney General

Secondary enforcement for CCPA violations

• Website: https://oag.ca.gov/privacy/ccpa
• Phone: (916) 210-6276

General Contact

Before filing a formal complaint, we encourage you to contact us directly:

• Email: myainexus@gmail.com
• Response Time: We aim to resolve all complaints within 30 days

14. Impact of Disabling Cookies

If you choose to disable cookies, some features of our website may not work properly:

• You may need to log in more frequently
• Personalized content may not display correctly
• Some interactive features may be limited
• Analytics and reporting may be less accurate

However, our website will still function with essential cookies disabled.

15. Children and Cookies

Our website is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

16. Changes to This Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of any significant changes by posting the updated policy on our website and updating the "Last Updated" date.

17. Contact Information

If you have any questions about this Cookie Policy or our use of cookies, please contact us:

• Email: myainexus@gmail.com
• Address: United States, Utah

18. Data Protection Officer & Contact

Data Protection Officer

Nexus AI Solutions has appointed a Data Protection Officer responsible for overseeing data protection strategy and compliance:

• Name: Parker Fawcett
• Role: Founder & CEO / Data Protection Officer
• Email: myainexus@gmail.com
• Response Time: Within 48 hours

Note: As a small business with limited processing activities, our Founder/CEO serves as Data Protection Officer in accordance with applicable data protection laws. Representatives under Article 27 GDPR will be appointed if our processing activities expand to require them.