Privacy.
Last updated: August 5, 2026 · Effective immediately
Nurvtronix LLC ("Nurvtronix," "we," "us," or "our") operates the websites nurvtronix.com, builtbynurv.com, and nurvos.ai (the "Sites") and provides automation and software services to businesses. This Privacy Policy explains what we collect, why, and your choices, and applies to all of the Sites. We do not sell your personal information, and we never will. If you do not agree with this Policy, do not use the Sites.
1. Information we collect
When you submit a form. Depending on the form, we collect your name, business email, company, the service and budget band you select, and the message you write. Alongside every submission we automatically record your IP address and, on our project-request form, your browser user-agent, both used for spam protection and security. Each submission is stored in our own database and emailed to our team so a human can reply.
When you simply browse. See Section 3 for exactly what analytics and advertising technologies run, and what only runs after you consent.
From clients and their end users, when providing the Services. Data our clients direct us to process. For this data we act as a service provider/processor on our client's behalf under a written services agreement; the client is the controller and its own privacy notice governs. Requests about that data should go to the client.
We do not knowingly collect data from anyone under 16, and the Sites are not directed to children. We do not perform credit, background, tenant, or eligibility screening. We do not collect special-category or sensitive personal data, and we ask that you not include any in a form message.
3. How we use information, and our legal basis
We use personal data to respond to and communicate with you, to provide, maintain, secure, and improve the Services and the Sites, to understand which pages and campaigns work, to enforce our agreements, and to comply with legal obligations. Where the UK/EU GDPR applies, our legal basis for each purpose is:
- Replying to your enquiry and pre-contract steps — performance of a contract or steps taken at your request (Art. 6(1)(b)).
- Spam protection, security, and abuse prevention (incl. IP and user-agent) — our legitimate interests in keeping the Sites operational and un-abused (Art. 6(1)(f)).
- Analytics and advertising technologies described in Section 3 — your consent (Art. 6(1)(a)), which you may withdraw at any time.
- B2B marketing email — our legitimate interests, subject to the opt-out in Section 6 (Art. 6(1)(f)).
- Meeting legal obligations and establishing or defending legal claims — legal obligation and legitimate interests (Art. 6(1)(c), (f)).
We do not carry out automated decision-making or profiling that produces legal or similarly significant effects about you within the meaning of Art. 22 GDPR.
4. Cookies, analytics & advertising
Nothing that is not strictly necessary runs before you consent. Analytics and advertising technologies are blocked until you make a choice, and we apply that rule to every visitor worldwide, not only to visitors in regions whose law compels it.
- Strictly necessary — what the Sites need to function and to remember your consent choice. No consent required, and it cannot be switched off.
- Analytics — loaded only if you opt in. Tells us which pages and referrers actually work. Some of it is cookieless and aggregate; none of it runs before you agree.
- Advertising — loaded only if you opt in separately. May set cookies or similar identifiers and may let the provider recognise your browser across sites.
Visitors in the EEA and the UK are not tracked at all. Because we serve US businesses only, analytics and advertising technologies — including the privacy-preserving kind — are switched off entirely for visitors we detect in those regions, and no consent banner is shown because there is nothing to consent to.
Everyone else can change or withdraw their choice at any time from the cookie settings link in the footer of every page. We honor the Global Privacy Control (GPC) browser signal as a valid opt-out where the law recognises it, and we treat it as one everywhere. Where advertising technologies are enabled by your consent, that activity may constitute "sharing" of personal information for cross-context behavioral advertising under California law even though no money changes hands and nothing is sold — use the "Do Not Sell or Share My Personal Information" link in the footer, or simply decline that category, to opt out.
5. How we share information
We share personal data only with: service providers (hosting, email delivery, analytics, advertising, and AI model providers) bound by contract and permitted to use it only to perform services for us; for legal reasons (to comply with law or valid legal process, enforce our agreements, or protect the rights, property, or safety of Nurvtronix, our users, or the public); and in a business transfer (merger, acquisition, financing, or asset sale). We do not sell or rent personal information. Aside from the consent-gated advertising activity described in Section 3, we do not "share" it for cross-context behavioral advertising.
6. Data retention & security
We keep enquiry and lead records for 24 months from our last contact with you, after which they are deleted automatically from our systems. We keep other personal data only as long as needed for the purposes above or as required by law, then delete or de-identify it. We maintain commercially reasonable administrative, technical, and physical safeguards designed to protect personal data. However, no website, transmission, or storage method is 100% secure, and you provide information at your own risk; we cannot and do not guarantee absolute security. In the event of a breach affecting personal data, we will notify affected parties and authorities as and when required by applicable law, including Virginia Code § 18.2-186.6.
7. Marketing email & your opt-out
Our B2B outreach complies with the CAN-SPAM Act: every message identifies us, includes a physical postal address, and offers a one-click or one-reply opt-out. To stop receiving them, use the unsubscribe link in any message or email [email protected]. We honor opt-outs within 10 business days at the latest and maintain a suppression list so a removed address stays removed.
8. Your privacy rights
Wherever you live, you may ask us to give you a copy of the personal data we hold about you, correct it, delete it, or send it to you in a portable format; object to or restrict how we use it; withdraw a consent you previously gave; and opt out of marketing. Withdrawing consent does not affect processing carried out before you withdrew it.
To exercise any right, email [email protected]. We will verify your request and respond within the time the applicable law allows — 30 days under the UK/EU GDPR and 45 days under California law, extendable where the law permits and we tell you why. There is no charge, and we will not discriminate against you for exercising a right. If we refuse, we will tell you why and you may appeal by replying to our response.
If your data is held by us on behalf of a client, please direct your request to that client, who is the controller.
If you are in the UK or EU, you also have the right to lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office). We would appreciate the chance to address your concern first.
9. International data transfers
We offer our services only to businesses in the United States (see our Terms), we do not direct the Sites to the EEA or UK, and we do not monitor the behaviour of visitors located there. We are established in the United States and our service providers are largely US-based, so personal data collected through the Sites is processed in the United States. Where we transfer personal data out of the UK or EEA, we rely on the recipient's certification under the EU–US Data Privacy Framework and its UK Extension where that certification is in place, and otherwise on the UK/EU Standard Contractual Clauses together with a transfer risk assessment. You may request details of the safeguard used for a specific transfer at [email protected].
10. Changes & contact
We may update this Policy from time to time; the "Last updated" date reflects the current version, and we will obtain fresh consent where the law requires it. Questions or requests: Nurvtronix LLC, 2 Main St Unit 36, Round Hill, VA 20141 · privacy requests to [email protected], everything else to [email protected].