How we collect, use, and protect personal data across our website and platforms.
This Privacy Policy explains how Nexus Code Lab ("Nexus Code Lab," "we," "us," or "our") collects, uses, discloses, and protects personal data in connection with our website (nexuscodelab.com), our software platforms — the Nexus AI Sales Agent and DOS ERP (Digital Office Suite) — and our web, mobile, UI/UX, ERP, and data center development services (collectively, the "Services").
We act in two different capacities depending on the context, and this Policy is organized to make that distinction clear:
Like most websites, we automatically collect certain technical information when you visit nexuscodelab.com, such as your IP address, browser type, device information, pages viewed, and referring URLs, typically via cookies and similar technologies. See our Cookie Policy for details on the specific categories we use and how to control them.
We use the information described in Section 2 to:
Where applicable data protection law requires a legal basis for processing, we rely on: performance of a contract (to provide a Service you've requested), our legitimate business interests (such as improving our Services and responding to inquiries), your consent (for optional marketing communications), and compliance with our legal obligations.
When a client uses the AI Sales Agent, the platform may process personal data about that client's prospects — such as names, business emails, job titles, and company details — gathered from public and licensed sources to generate and manage outreach on the client's behalf.
When a client uses DOS ERP, the platform may process business data including, where the client enables HR/Payroll functionality, personal data about the client's own employees (such as name, CNIC, contact details, and employment records).
In both cases, Nexus Code Lab processes this data as a service provider acting on our client's instructions. We do not use it for our own marketing purposes, and requests to access, correct, or delete such data should be directed to the client organization that controls it, who may in turn contact us to fulfill that request.
We do not sell personal data. We may share information with:
We retain personal data for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Contact form submissions and inquiry records are generally retained for a reasonable period to allow us to follow up and maintain business records. Data processed on behalf of clients through the AI Sales Agent or DOS ERP is retained according to the client's account settings and our agreement with that client.
We use reasonable administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, alteration, disclosure, or destruction, including role-based access controls and audit trails within DOS ERP. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Depending on your location and applicable law, you may have the right to request access to, correction of, or deletion of your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. To exercise these rights regarding information we hold as a controller (for example, your contact form submission), please reach out using the details in Section 12. If your data is being processed by one of our clients using our platforms, please contact that organization directly, as described in Section 5.
Nexus Code Lab is based in Karachi, Pakistan. If you are located outside Pakistan, your information may be transferred to, stored, and processed in Pakistan or other countries where our service providers operate. Where required, we take steps intended to ensure such transfers comply with applicable data protection law.
Our website and Services are intended for businesses and professional use and are not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
Questions about this Privacy Policy, or requests relating to your personal data, can be sent to:
We may update this Privacy Policy from time to time to reflect changes in our practices, Services, or for legal or operational reasons. We will post the revised Policy on this page with an updated "Last updated" date. We encourage you to review this page periodically.