Privacy Policy
Learn how NexGen Labs collects, uses, stores, and protects your personal information when you use our website, services, or submit project inquiries.
1. Introduction
NexGen Labs ("we," "our," or "us"), operated by MXM Global Private Limited, with operational headquarters in Colombo, Sri Lanka and Bangalore, India, is committed to safeguarding your privacy and protecting the personal information entrusted to us. MXM Global Private Limited decides why and how your information is used, which makes it the "controller" under data protection laws such as the GDPR.
This Privacy Policy explains how we collect, use, store, and disclose information when you:
Visit nexgenlab.global
Contact us regarding our services
Submit project inquiries
Order an AI Visibility Report or Full Visibility Audit
Apply for career opportunities
Engage with our digital engineering, web development, UI/UX, Shopify, or AI automation services
2. 📋 Information We Collect
To provide our services effectively, we may collect the following information.
👤 Contact Information
When you contact us or request a proposal, we may collect:
Full Name
Professional Email Address
Phone Number
Company Name
Project Requirements or Specifications
🛒 AI Visibility Orders
When you order an AI Visibility Report or Full Visibility Audit, the order form asks for:
Your business: its name, website address, industry and a short description of what you do
The countries and main city where your customers are, and how your website can be changed (for example, who edits it and roughly how many pages it has)
Your name, email address and WhatsApp number
Whether you allow us to use your anonymised results in published research (optional)
When you pay, our payment provider tells us whether the payment succeeded, the amount and currency, the type of payment method (for example "Visa") and a payment reference. We never see or store your card number. Card details are entered on PayHere's secure payment page. We also create an order number and an invoice for your order.
💼 Career Candidate Information
If you apply for a position at NexGen Labs, we may collect:
Full Name
Email Address
Phone Number
Resume / CV
LinkedIn Profile
Portfolio Website
Cover Letter or Additional Notes
📊 Technical & Analytics Information
When you browse our website, certain information may be collected automatically, including:
IP Address
Browser Type & Version
Operating System
Referring Website
Time Zone
Website Usage & Engagement Metrics
Cookie Identifiers
Your approximate country, worked out from your IP address, which we use to show the right price list
3. 🚀 How We Use Your Information
We use your information to:
Deliver custom software development and digital consulting services
Prepare quotations and project proposals
Take, process and deliver orders, including payments, order confirmations and invoices
Follow up with you about an order you started but did not complete
Communicate project updates and technical support
Respond to inquiries and customer requests
Evaluate job applications
Improve website performance and user experience
Maintain security and prevent fraud
Comply with applicable legal obligations
Publish anonymised research, only if you agreed to it on the order form
⚖️ Why we are allowed to use it (legal bases)
Where data protection law (such as the GDPR) requires a legal basis, we rely on:
Contract: to take and deliver your order, process your payment, send your invoice, and respond to you before you buy.
Legitimate interests: to follow up about an unfinished order, answer inquiries, keep the website secure, prevent fraud and abuse, and understand how the website is used. You can object at any time (see "Your Rights").
Legal obligation: to keep invoices and accounting records, and to respond to lawful requests from authorities.
Consent: for the optional use of your anonymised results in published research. You can withdraw your consent at any time.
4. 🛒 AI Visibility Orders: Payments, Emails and Unfinished Orders
Saving your order: when you press "Continue to payment", we save your answers as an order, marked "Unconfirmed", and then send you to PayHere to pay. Answers you type in the earlier steps stay in your own browser until then.
Payment: you pay by card on PayHere's page. We mark the order as confirmed only after PayHere tells us, with a signed message, that the payment succeeded.
Emails: after a confirmed payment we email you an invoice (PDF) and your order details from info@nexgenlab.global, and our team receives a copy of the order so we can carry it out. These are order emails, not marketing.
If you don't finish paying: we keep the details you submitted so we can follow up about that order, for example if the payment failed. We will contact you once or twice about it, and you can tell us to stop. We delete unpaid orders after 90 days, or sooner if you ask.
No marketing without your agreement: we will not add you to a newsletter or send you marketing because you placed or started an order.
Price by country: we use the approximate country from your IP address to show the right price list (for example, Sri Lankan rupees in Sri Lanka). We do not store this location.
Research (optional): if you tick the box, we may use your results, with your business name removed, in published research about visibility in AI answers.
5. 🤝 Data Sharing & Disclosure
We value your privacy and never sell, rent, or trade your personal information.
Information may only be shared in the following situations:
Authorized Service Providers
Trusted providers that help operate our services and handle information only for that purpose:
PayHere (card payments for orders; PayHere handles your card details under its own privacy policy)
Google (Google Workspace and Google Sheets, where we keep order records; Google Analytics and Google Tag Manager for website statistics)
Zoho (email delivery)
Supabase (database and sign-in for our website and its admin area)
Cloudinary (images and file uploads)
Vercel (website hosting)
Upstash (protection against abuse, using only a scrambled, one-way version of your IP address)
Elfsight (the office-location map on our Contact page)
WhatsApp (if you message us there, WhatsApp handles those messages under its own terms)
Enterprise Cloud Hosting Providers
These providers operate under confidentiality and data-protection terms.
Legal Requirements
We may disclose information when required to:
Comply with applicable laws
Respond to court orders
Protect our legal rights
Prevent fraud or unlawful activities
Protect the safety of users
Business Transfers
Information may be transferred as part of:
Company mergers
Acquisitions
Corporate restructuring
Business reorganization involving MXM Global Private Limited
6. 🌍 International Transfers
Our teams are in Sri Lanka and India, and our service providers may process information in other countries, including the United States and countries in Europe and Asia. When your information is transferred, we rely on the protections in our providers' data-processing terms (including standard contractual clauses where they apply) and on the safeguards described in this policy.
7. 🍪 Cookies & Analytics
We use Google Analytics, loaded through Google Tag Manager, to understand how visitors use our website (which pages are visited, how people arrive and which country they are in). It sets these cookies in your browser:
ga and ga_ followed by our measurement ID: a random identifier used to count visits and visitors, kept for up to 2 years.
We use them only to measure how the website is used. Our order form also keeps the answers you type in your browser's session storage so you don't lose them if you refresh the page; this is cleared when you close the tab or finish your order.
You can block or delete cookies in your browser settings, or install Google's opt-out add-on from tools.google.com/dlpage/gaoptout. Blocking them does not stop the website from working. If you would like analytics switched off for you in another way, email us.
8. ⏳ How Long We Keep Your Information
Unpaid or unfinished AI Visibility orders: up to 90 days.
Paid orders, invoices and payment records: for as long as accounting and tax law require us to keep them (usually six to seven years).
Inquiries and project information: for as long as needed to answer you and to deliver any work we agree, then deleted or anonymised when no longer needed.
Job applications: for as long as needed for recruitment, unless you ask us to delete them sooner.
Website analytics: according to the retention setting of our Google Analytics account (14 months at most).
9. 🔒 Data Security
We implement industry-standard security measures to protect your information, including:
SSL/TLS encryption
Secure database access controls
Administrative safeguards
Technical safeguards
Physical security controls
Access to order records limited to the team members who need it
Card details are handled by PayHere and are never stored on our systems. While we strive to protect your data, no method of Internet transmission or electronic storage is completely secure.
10. 👤 Your Rights
Depending on your location and applicable laws, you may have the right to:
Access your personal information
Correct inaccurate information
Update your personal data
Request deletion of your information
Ask us to restrict how we use it, or object to a use that relies on our legitimate interests (including follow-up messages about an unfinished order)
Receive a copy of the information you gave us in a portable format
Withdraw your consent at any time, where we rely on it
Opt out of promotional communications
Complain to your local data protection authority (for example in the EU, the UK or Sri Lanka). We would appreciate the chance to put things right first, so please contact us.
To exercise these rights, please contact us. We will reply within one month.
📧 Email: info@nexgenlab.global
We may need to confirm that the request comes from you, for example by replying from the email address you used for your order. Some records, such as invoices, we must keep by law; we will tell you what we kept and why.
11. 🧒 Children
Our services are for businesses and professionals. We do not knowingly collect personal information from children under 16. If you believe a child has given us information, please contact us and we will delete it.
12. 🔄 Policy Updates
This Privacy Policy may be updated periodically to reflect:
Changes in legislation
Technology updates
New services
Security improvements
Business changes
Any updates will be published on this page together with the latest revision date.
13. 📞 Contact Us
If you have any questions regarding this Privacy Policy, please contact us.
NexGen Labs
MXM Global Private Limited
📧 Email: info@nexgenlab.global
📞 Phone: +94 78 101 1315
📍 Offices: Colombo, Sri Lanka & Bangalore, India
