Privacy notice

About this notice

This notice explains how Nexusdesk Pte. Ltd. ("Nexusdesk", "we", "us") handles personal data collected through the website at evidor.ai. Evidor is a Nexusdesk product. Nexusdesk is a private company limited by shares incorporated in Singapore (UEN 202528726G).

This notice covers the evidor.ai website only: its pages, its contact form and its pilot application. The Evidor product is not available through this website, and anyone accepted into the pilot will receive separate terms covering it.

Who we are and how to contact us

Nexusdesk Pte. Ltd. is responsible for personal data collected through evidor.ai. For privacy questions, requests about your data, or any concern about this notice, write to our data protection officer at privacy@nexusdesk.io. We aim to respond within 30 days.

What we collect

• Contact form: your name, email address, firm, role and message.
• Pilot application: your name, work email, organisation and role, and which AI tools or workflows your team uses, if any.
• Meeting bookings: if you book a call through the scheduling tool on our contact page, the details you enter there (usually your name, email address and chosen time) are collected by Cal.com and shared with us.
• How you found us: if you arrive from one of our ads or links, your booking or form submission may also include short tags showing which ad, website or campaign brought you, and which button you used.
• Server and edge logs: our hosting provider, Cloudflare, records standard technical information when you load a page or submit a form, including your IP address, browser details, the time and the page requested.

We do not use advertising trackers, and we do not run Google Analytics, the Meta Pixel, the LinkedIn Insight Tag or similar tools on evidor.ai. There are no user accounts, newsletters or payments on this website.

Why we use it

• To reply to your message and continue the conversation you started.
• To assess pilot applications and, where there is a fit, to discuss a pilot with you.
• To arrange and hold meetings you book with us.
• To keep the site secure and working.
• To count how many bookings and enquiries come from each ad or channel, so we can decide where to advertise. We use these tags only in totals.

We do not sell your personal data, and we do not use what you submit through this website to train AI models.

How your submission reaches us

When you submit the contact form or the pilot application, our form handler, which runs on Cloudflare, sends the contents to a Nexusdesk email inbox. The form handler does not keep a copy of your submission; it exists in our inbox. The form includes a hidden field that helps us filter automated spam.

Legal basis

Under Singapore's Personal Data Protection Act 2012 ("PDPA"), you provide your details voluntarily for the purposes described above, and we treat that as consent for those purposes. You may withdraw your consent at any time by writing to privacy@nexusdesk.io.

If you are in the European Economic Area or the United Kingdom, we rely on your consent when you choose to contact us or apply, on our legitimate interests in running a secure website and responding to business enquiries, and on legal obligation where we must keep records or respond to lawful requests.

Service providers

• Cloudflare, Inc.: hosting, edge network, the form handler, email routing, and Turnstile bot protection on our forms.
• Google LLC: Google Workspace, which hosts the inbox your submission is delivered to.
• Cal.com, Inc.: the scheduling tool embedded on our contact page. It processes the booking details you enter for us, under data processing terms that form part of its contract with us.

We do not sell personal data to anyone.

Transfers outside Singapore

Cloudflare, Google and Cal.com operate internationally, so your data may be processed outside Singapore, including in the United States. We rely on our contracts with these providers, including their data processing terms and standard contractual clauses where they apply, to give your data a standard of protection comparable to the PDPA.

Cookies

evidor.ai does not set cookies of its own. Cloudflare may set strictly necessary security cookies, such as the __cf_bm bot management cookie, to protect the site from abuse.

Our forms use Cloudflare Turnstile, which checks browser signals to tell people from bots. Cloudflare handles that data under its own privacy policy (https://www.cloudflare.com/privacypolicy/).

Our contact page embeds Cal.com. When you open that page, Cal.com's scheduling widget loads and may set its own cookies or similar browser storage, whether or not you book a meeting. If you prefer to avoid them, you can email us instead of using the scheduler.

How long we keep it

• Contact messages and pilot applications: for as long as the conversation or pilot discussion continues. If it does not lead to a relationship, we delete your submission within 12 months of our last contact with you.
• Server and edge logs: for a short operational period, typically around 30 days, unless a specific entry is needed to investigate a security incident.

You can ask us to delete your data sooner at any time, subject to any legal obligation we have to keep it.

Your rights

Under the PDPA you can ask us what personal data we hold about you and how we have used it, ask us to correct it, and withdraw your consent. You can also complain to Singapore's Personal Data Protection Commission.

If you are in the European Economic Area or the United Kingdom, you also have rights of erasure, restriction, portability and objection, and you can complain to your local supervisory authority.

To exercise any of these rights, write to privacy@nexusdesk.io. We may need to verify your identity before acting on a request.

Security

We protect personal data with encryption in transit, access controls on our inboxes, and established providers for hosting and email. We do not currently hold formal information security certifications and do not claim to.

Children

evidor.ai is for businesses and professionals. It is not directed at children, and we do not knowingly collect their personal data.

Changes to this notice

If we change this notice, we will publish the new version at this address and update the date at the top.

Governing law

This notice is governed by the laws of Singapore.