Privacy notice
Last updated: 8 October 2026
Who we are
This notice is from Netxus Solutions. Contact us at admin@netxussolution.com.
This website
The website at www.netxussolution.com sets no cookies, uses no analytics and loads no third-party scripts or fonts. Our web server keeps standard access logs (IP address, time, requested page and status) for about 10 days, using daily rotation with 10 logs kept, for security and operations. The logged page is the original path without any query string.
From these logs we make daily aggregate counts of visits: page views of the home and privacy pages, enquiry submissions, rate-limited submissions, error responses and discarded spam submissions. Unique visitors are counted using a random key that exists only while the count runs and is then discarded, so no IP addresses or browser details are stored in the statistics. The counts include automated traffic such as crawlers and probes, so they overstate real people.
The enquiry form
The form collects your name, company, work email, request type (enquiry or demo), hosting preference, an optional note, your choice on marketing updates, and your required consent for us to respond. The form also has a hidden anti-spam field that people do not see; a submission that fills it is discarded and only counted.
We use these details to respond to your enquiry and to manage the resulting sales opportunity. We send marketing only if you opted in.
The details are stored in the Netxus commercial database. Authorised Netxus sales staff (owner, sales, sales managers and auditors) can see them; sales staff are limited to their own or their team's records. Staff actions are audit-logged.
Apart from the web server access logs described above, your IP address is used only for rate limiting (each counter stops counting after at most an hour and expired counters are deleted automatically over time; until then they may remain in the database and its 7-day backups) and is not stored with your enquiry.
The customer portal
The customer portal at portal.netxussolution.com stores the user's email address, a salted password hash (never the password), an authenticator (MFA) secret stored encrypted, hashed recovery codes, session records, the support cases and messages the user writes, and an audit log of portal actions. It also stores the company profile contact details that customer users can edit (contact person, phone, email, address, location, company size and company background), renewal requests, satisfaction (CSAT) ratings and comments, and invitation records (the invitee's email address and roles).
Each portal session record includes a short description of the browser and the first part of the IP address (a /24 prefix for IPv4 or a /48 prefix for IPv6), not the full address. Successful sign-ins are recorded in the audit log with the sign-in method (password, authenticator code, recovery code or passkey), the browser description and the IP prefix. Customer users can see their own active sessions and recent account activity in the portal, and can sign out their other sessions.
If a user registers a passkey, we store its public key and credential identifier, a name and use counters. No biometric data leaves the user's device.
Portal sign-in and invitation acceptance use the IP address (and, for sign-in, the email address) for rate limiting (each counter stops counting after at most an hour and expired counters are deleted automatically over time, as described above). Portal requests also appear in the same web server access logs, which are kept for about 10 days.
The portal uses one strictly necessary session cookie, __Host-netxus_customer (HttpOnly, Secure, SameSite=Strict). It is set on the portal host only and expires after at most 8 hours.
When email is enabled, we send it through Microsoft 365, and Microsoft acts as our processor for it. Email addresses and message content are processed by Microsoft 365. We send: enquiry alerts to Netxus staff (reference, company and request type only), customer invitations, password reset links, security notices (password changed, authenticator reset, other sessions signed out, passkey added or removed, and optionally a new sign-in), and renewal reminders.
Queued message details are deleted once the message is sent or has failed, and the queue record itself is deleted after 30 days.
Where information is kept
Our systems are hosted on Amazon Web Services in the Singapore region (ap-southeast-1). Database backups are kept on the server for 7 days. Encrypted off-site copies of backups may also be made, and are kept for as long as the operator of that off-site location keeps them.
How long we keep it
We keep enquiries and portal records while they are needed for the business relationship. We plan to anonymise enquiries that have been closed or lost for 24 months, but that automatic process is not yet switched on, so currently there is no automatic deletion.
Records of staff and portal actions are kept for the integrity of the audit log and may include an email address. Backups keep data for the periods described above.
Your requests
To ask for access, correction or erasure, email admin@netxussolution.com. Authorised staff can export a person's data or anonymise it; the audit records described above are not changed.
Changes
The date at the top of this page changes when this notice changes.