01Who we are and scope
This policy explains how TektAxis ("TektAxis", "we") handles personal data on the website tektaxis.com.br, in the Nexus software and in sales and support, in accordance with the Brazilian General Data Protection Law (Law No. 13,709/2018, "LGPD"). TektAxis is the trade name of 52.084.821 DAVI PIRES SANTOS - ME, registered in Brazil under CNPJ 52.084.821/0001-57.
TektAxis develops and licenses Nexus, a configuration backup system for network devices (routers, OLTs, switches and firewalls) installed on the customer’s own infrastructure. Privacy contact: suporte@tektaxis.com.br.
02Data on the website
The website is static and informational. It:
- uses no cookies, browser storage for tracking, pixels, audience analytics tools or ads;
- loads no third-party fonts, scripts or images: everything is served from our own domain;
- is hosted by Vercel Inc., which logs technical data for each request (IP address, date and time, requested page and browser) to deliver the site and protect it from abuse, for a short period and under Vercel’s own policy.
The contact form sends nothing to TektAxis servers: it only composes the message and opens your email app or WhatsApp. The data you choose to send (name, email, company and message) reaches us through that channel and is used only to reply. On WhatsApp, the message is also processed by WhatsApp LLC (Meta) under its own policy.
03Data processed by Nexus
Nexus is installed and runs on the customer’s server (a Debian virtual machine), under the customer’s control. That server holds:
- the configurations collected from network devices and their version history;
- the device inventory (name, IP address, access username and password), with passwords encrypted;
- the users of the Nexus web interface;
- access tokens for connected clouds and FTP, SFTP, WebDAV or S3 credentials, encrypted.
This data is not sent to TektAxis. Nexus has no telemetry, collects no usage statistics and does not communicate with TektAxis servers: the license is validated on the server itself, by digital signature.
For this data, the customer is the controller under the LGPD. TektAxis only accesses it when the customer authorizes, for example during installation or a support session. In those cases it acts as a processor, follows the customer’s instructions and does not copy or keep the data.
04Google Drive and Dropbox
The customer may connect a Google Drive or Dropbox account to receive copies of the backups. The connection is made by the user, who signs in and authorizes access on the provider’s official page.
| Provider | Permission requested | What it is used for |
|---|---|---|
| Google Drive | drive.file: only folders and files created by Nexus | Create the destination folder, upload backup files and show the connected account’s email |
| Dropbox | Files in the app folder and basic account information | Upload backup files and show the account email |
On Google Drive, Nexus does not read, list or change any file it did not create. The access token is stored encrypted on the customer’s server, is used only to upload backups and is never transmitted to TektAxis or third parties. Files go straight from the customer’s server to the connected account.
Limited Use. Nexus’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, data obtained from Google APIs:
- is used only to provide and improve the user-facing backup feature;
- is not sold or used for advertising, credit assessment or training artificial intelligence models;
- is not transferred to third parties, except as needed for the backup feature, to comply with the law or in a merger or acquisition, with prior notice to the user;
- is not read by humans, except with the user’s explicit consent for a support request, when required by law or to investigate abuse and security.
To disconnect, remove the destination on the Nexus Cloud screen (the token is deleted from the server) and, if you wish, revoke access at myaccount.google.com/permissions or in Dropbox’s connected apps settings. Files already uploaded remain in your account, under your control.
05Licensing, contracts and support
To issue the license and perform the contract, TektAxis processes:
- customer identification and contact data: name or company name, tax ID (CPF or CNPJ), and name, email and phone of the people in charge;
- license data: identifier, edition, term, number of devices and the machine identifier, a SHA-256 hash computed from system identifiers that does not reveal the server’s contents;
- support history: email or WhatsApp messages and ticket records;
- billing data required by tax law.
06Purposes and legal bases
| Purpose | Data | Legal basis (LGPD, art. 7) |
|---|---|---|
| Deliver the website and protect it from abuse | Technical access logs | Legitimate interest (item IX) |
| Reply to contacts and quote requests | Data you send | Pre-contractual steps at the data subject’s request (item V) |
| Issue and validate licenses and provide support | Account, license and support data | Performance of contract (item V) |
| Issue invoices and meet legal obligations | Billing data | Compliance with legal obligation (item II) |
| Defend rights in legal proceedings | Necessary records | Regular exercise of rights (item VI) |
07Sharing and international transfers
TektAxis does not sell or rent personal data. We share data only with:
- suppliers needed for our operations, such as website hosting (Vercel), email, WhatsApp and accounting;
- public authorities, when required by law or court order.
Some of these suppliers, as well as Google and Dropbox when the customer connects an account, store data outside Brazil, mainly in the United States. These transfers follow art. 33 of the LGPD, based on contractual clauses and the safeguards offered by these providers.
08Retention and deletion
We keep data only as long as necessary:
- contact messages that do not lead to a contract: up to 2 years after the last contact;
- customer and license data: during the contract and afterwards for the legal periods (for example, 5 years for tax records) and to exercise rights;
- data on the customer’s server: the customer decides how long to keep it and can delete it, including when uninstalling Nexus.
09Security
We adopt technical and administrative measures proportional to the risk, such as encryption of passwords and tokens in Nexus (AES-256-GCM), software integrity checks, an HTTPS-only website with security headers, restricted access to customer information and licensing keys kept off public systems.
If a security incident that may cause relevant risk or harm occurs, we will notify the affected data subjects and the Brazilian National Data Protection Authority (ANPD), as required by art. 48 of the LGPD.
10Your rights
At any time and free of charge, you may ask TektAxis for:
- confirmation that we process your data and access to it;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of unnecessary or excessive data, or data processed in breach of the LGPD;
- portability of the data to another supplier;
- deletion of data processed based on consent and withdrawal of that consent;
- information about whom we share your data with.
Send your request to suporte@tektaxis.com.br. We reply within 15 days and may ask for information to confirm your identity. If the data is on one of our customers’ servers, we will forward the request to that customer, who is the controller. You may also file a complaint with the ANPD.
11Children and teenagers
The website and Nexus are intended for businesses and professionals. We do not knowingly collect data from anyone under 18.
12Changes to this policy
We may update this policy to reflect changes to the website, Nexus or the law. The effective date at the top shows the current version. Relevant changes are communicated to customers by email. See also the Terms of Service.
13Contact and data protection officer
Privacy questions, requests and complaints: suporte@tektaxis.com.br. Our data protection officer (art. 41 of the LGPD) can be reached at the same address. Sales: contato@tektaxis.com.br.