/ legal /

Privacy policy

Draft pending legal review. This text is a working draft and is not yet legally binding.

Last updated: 27 September 2026

This Privacy Policy explains how Bruja Neo LLC, doing business as Nexvanta Security ("Nexvanta," "we," "us" or "our"), collects, uses, shares and protects personal information through this website (the "Site"). It does not cover information we process on behalf of our clients under a services agreement, which is governed by that agreement.

1. Who we are

  • Company: Bruja Neo LLC, Limited liability company organized under the laws of the State of New Mexico, USA
  • Address: 6300 Riverside Plaza Lane Northwest, Albuquerque, New Mexico 87120, USA
  • Privacy contact: privacy@nexvantasecurity.com

2. Information we collect

Information you give us

When you use our contact form or email us, we collect your name, company, work email address, the service you are interested in and the content of your message.

Information collected automatically

Our web server automatically records technical information when you visit the Site, such as your IP address, browser type, the pages you request and the date and time of your visit. We use only the strictly necessary cookies described in our Cookie Policy. We do not use analytics, advertising or tracking technologies, and we do not load third-party trackers.

3. How we use information

  • To respond to your inquiry and, if you ask us to, prepare a proposal for our services.
  • To operate, maintain and secure the Site, including detecting and preventing abuse, fraud and attacks.
  • To comply with legal obligations and enforce our Terms of Use.

We do not use your information to send marketing emails unless you have asked us to, and we do not make automated decisions about you.

4. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only:

  • with service providers that help us run the Site and our business, under contracts that limit their use of the information to providing services to us — for example, our hosting provider (DigitalOcean, LLC) and our email provider (Dondominio);
  • when required by law, subpoena or other legal process, or to protect the rights, property or safety of Nexvanta, our clients or others;
  • in connection with a merger, acquisition or sale of all or part of our business, subject to this Privacy Policy.

5. How long we keep information

  • Contact inquiries: for as long as needed to respond and follow up, and then for up to 24 months unless a business relationship follows.
  • Server logs: up to 30 days, unless needed longer to investigate a security incident.

6. How we protect information

As a cybersecurity company, we use administrative, technical and physical safeguards appropriate to the sensitivity of the information, including encrypted connections (HTTPS), access controls, and regular security updates. No method of transmission or storage is completely secure, but we work to protect your information and review our safeguards regularly.

If a security breach affects your personal information, we will notify you and the relevant authorities as required by applicable law, including the New Mexico Data Breach Notification Act (NMSA 1978, §§ 57-12C-1 to 57-12C-12) and the breach notification laws of your state of residence.

7. Your choices and rights

You can contact us at any time at privacy@nexvantasecurity.com to ask us to access, correct or delete the personal information we hold about you, and we will respond within the time required by applicable law.

Depending on where you live, you may have additional rights under your state's privacy law (for example, the California Consumer Privacy Act as amended by the CPRA, or the privacy laws of Colorado, Connecticut, Virginia, Texas and other states), such as the right to know what personal information we collect, to obtain a copy, to correct or delete it, and to opt out of its sale or sharing. We will not discriminate against you for exercising these rights. You may use an authorized agent to submit a request, and we may need to verify your identity before responding.

Do Not Track and Global Privacy Control: because we do not track visitors across websites or sell or share personal information, the Site operates the same way whether or not your browser sends these signals.

8. Children

The Site is intended for businesses and professionals. It is not directed to children under 13, and we do not knowingly collect personal information from children, consistent with the Children's Online Privacy Protection Act (COPPA). If you believe a child has provided us with information, contact us and we will delete it.

9. Visitors outside the United States

Nexvanta is based in the United States, and the information you provide is processed in the United States, where data protection laws may differ from those of your country. By contacting us, you understand that your information will be transferred to and processed in the United States.

10. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last updated. If we make material changes, we will post a notice on the Site.

11. Contact us

For any question about this Privacy Policy or our privacy practices, write to privacy@nexvantasecurity.com or to Bruja Neo LLC, Attn: Privacy, 6300 Riverside Plaza Lane Northwest, Albuquerque, New Mexico 87120, USA.