Privacy Policy

Neu Apex Infotech (“we,” “our,” or “us”) is a technology solutions provider specializing in website and enterprise software development, AWS cloud infrastructure and DevOps, performance digital marketing, and intelligent AI automation workflows.

We are dedicated to safeguarding your privacy and handling your personal data transparently, responsibly, and in accordance with applicable data protection laws. This Privacy Policy outlines what information we collect through our public website (neuapexinfotech.com), why we collect it, how it is safeguarded, and the rights available to you.

This Privacy Policy applies solely to information collected through our official website and communication channels, including:

• Contact, general inquiry, and discovery consultation forms (/contact and /free-consultation).
• Detailed project quotation and scope request forms (/get-a-quote).
• Job application and resume submissions via our careers portal (/careers).
• Newsletter subscriptions initiated from our website footer.
• Direct correspondence initiated via official email, telephone, or WhatsApp business links.

This policy does not govern third-party platforms, external client web applications developed by us, or standalone software hosted outside our website infrastructure.

We collect personal information through two primary mechanisms: information you provide to us directly, and technical information collected automatically through your browser.

A. Information You Voluntarily Provide

• Contact Details: Full name, professional email address, telephone/WhatsApp number, and physical company name.
• Project Requirements: Desired services (such as Next.js development, AWS cloud infrastructure, PPC ads, or AI agent development), anticipated budget bracket, timeline expectations, and technical descriptions.
• Career Submissions: Full name, contact information, role applied for, online portfolio or GitHub link, and cover message.
• Communication History: Records of your feedback, questions, or support inquiries sent through our contact channels.

B. Information Collected Automatically

When you access our website, our server and security infrastructure automatically logs standard technical metadata required for network safety, rate-limiting, and error diagnostics:

• Internet Protocol (IP) address (used defensively for brute-force rate-limiting and geolocation country identification).
• Browser type, version, operating system, and language preferences.
• Date and time stamps of requests, referring URLs, and requested paths.
• Anonymous aggregate analytics telemetry (if optional analytics cookies are consented to by you).

To minimize privacy risks, our website intentionally excludes the collection of unnecessary or sensitive consumer data:

We process personal information strictly for legitimate commercial, operational, and security purposes:

• Inquiry Response & Project Scoping: To evaluate your project requirements, schedule 30-minute discovery consultations, and deliver detailed technical proposals with itemized milestone scopes.
• Career Application Review: To evaluate candidate qualifications, schedule technical interviews, and correspond regarding engineering openings at Neu Apex Infotech.
• Security & Spam Prevention: To prevent denial-of-service attempts, enforce IP rate-limits on API endpoints, detect bot traffic via honeypot validation, and protect our server infrastructure.
• Newsletter & Thought Leadership: To send periodic engineering articles and updates if you explicitly subscribe via our footer (with one-click unsubscribe in every email).
• Website Optimization: To measure anonymous usage trends, identify 404 broken links, and optimize page load speeds across devices.

Depending on your jurisdiction (including the European Economic Area under GDPR and the UK Data Protection Act), we process personal data under the following recognized legal bases:

Our website uses cookies and browser local storage to provide security, remember your visual theme preference, and measure aggregate site performance.

Essential cookies (such as administrative session authentication and CSRF security tokens) are active by default because the site cannot function safely without them. Optional cookies (such as Google Analytics measurement) are blocked until you grant affirmative permission via our banner or modal.

To operate our digital agency website, we engage trusted, enterprise-grade third-party subprocessors. Each provider has been verified for security and confidentiality standards:

We do not sell, rent, monetize, or trade your personal information. Period.

We only disclose personal data under strictly controlled circumstances:

• Authorized Personnel: Internal engineers, project directors, and legal staff bound by strict contractual confidentiality agreements.
• Technical Subprocessors: The cloud, email, and security providers outlined in Section 08 solely to fulfill their contracted services.
• Legal Compulsion: If required by a valid court subpoena, governmental inquiry, or binding statutory law to prevent crime or protect vital legal rights.
• Corporate Reorganization: In the event of a merger, acquisition, or asset transfer, where the acquiring entity assumes identical privacy commitments.

We retain personal data only for as long as is necessary to accomplish the purposes described in this policy:

We employ rigorous DevSecOps and defense-in-depth measures to safeguard personal information:

• Transport Layer Security (TLS 1.3): All website traffic is forced over modern HTTPS with strict HTTP Strict Transport Security (HSTS) headers.
• Cryptographic Password Hashing: Administrative credentials are encrypted using salted bcrypt rounds with zero plaintext storage.
• Brute-Force & Injection Defense: Endpoints are defended by IP rate limiting, MongoDB parameterized schemas, honeypot fields, and strict input validation.
• Role-Based Access Control (RBAC): Administrative back-office access is segregated across strict staff roles (super_admin, editor, etc.) with automated audit logging.
• Zero Hydration Token Leakage: Sensitive API keys and database credentials reside exclusively in server-side runtime environments and are never bundled into client scripts.

Note: While we implement industry-standard safeguards, no method of electronic internet transmission is 100% impenetrable. We maintain incident response procedures in the unlikely event of a security anomaly.

Depending on your location, applicable privacy frameworks grant you explicit rights regarding your personal information:

Neu Apex Infotech operates globally and utilizes AWS cloud infrastructure and subprocessors located across India, the United States, and other secure data regions.

Whenever personal information is transferred internationally, we verify that appropriate contractual safeguards (including EU Standard Contractual Clauses, encrypted data transit, and equivalent adequacy frameworks) are in place to ensure your information retains an equivalent level of legal protection.

Our website, digital engineering services, and career opportunities are strictly designed for businesses, commercial entrepreneurs, and professional adults aged 18 and older.

We do not knowingly solicit, process, or collect personal information from individuals under the age of 18. If you have reason to believe that a minor has submitted personal data to us, please notify us immediately at info@neuapexinfotech.com and we will permanently expunge the record.

Our website may contain hyperlinks to external websites, including client case studies, GitHub repositories, LinkedIn profiles, and technology partner platforms.

Neu Apex Infotech exercises no control over the privacy policies, data collection, or security practices of external websites. We strongly recommend reviewing the respective privacy notices of any third-party website you navigate to.

We review and update this Privacy Policy periodically to reflect technological enhancements, operational changes in our services, or updates in statutory data protection laws.

Whenever material changes are made, the revised policy will be posted on this URL with an updated “Last Updated” date at the top of the document. Your continued use of the website following published revisions constitutes recognition of the updated terms.

If you have questions, feedback, or requests regarding this Privacy Policy or our handling of personal data, please contact our data governance desk: