Skip to content

Legal & Privacy Governance

Legal Notice, Privacy & AI Development Policy

Transparency on how we handle personal data, our technical security and privacy standards when engineering AI systems, and our website terms of use.

Last updated: October 2026

2. Privacy Policy & Data Protection (Habeas Data / GDPR)

Pursuant to Statutory Law 1581 of 2012 of the Republic of Colombia (Personal Data Protection Regime) and the principles of the General Data Protection Regulation (GDPR) of the European Union, we guarantee the security, confidentiality, and lawful processing of the data you entrust to us.

Data collected: We only collect information voluntarily submitted through our contact form or direct communication channels: your name, business email, company name, estimated budget tier, and project description.

Purpose of processing: Addressing your technical or business inquiry, providing a formal written scope and pricing estimation, and scheduling technical discovery calls. We do not conduct intrusive automated profiling or send unsolicited marketing emails (spam). We never sell, rent, or transfer your personal data to third parties for marketing purposes.

Processors and infrastructure: To ensure robust and secure operations, we rely on Hostinger (certified datacenter server hosting), Web3Forms or encrypted internal webhooks (for secure transmission of contact form submissions), and standard business email infrastructure.

Your rights (Access, Update, Rectify, and Erase): As a data subject, you hold the right at all times to know, update, rectify, or request the permanent deletion of your personal data from our systems. To exercise these rights, simply email us at nexubloom@gmail.com. We address all requests within a maximum of 10 business days.

3. AI Software Development, Agents & Automation Governance

As an engineering studio specialized in bespoke software development, workflow automation, and applied AI, we enforce rigorous information security, ethical, and technical governance standards:

Zero Data Training with client assets: We explicitly guarantee that no personal data, internal documentation, proprietary databases, or source code accessed during a consulting or development engagement will ever be used to train, retrain, or fine-tune public foundation models (such as those from OpenAI, Anthropic, or Google). We work exclusively through enterprise APIs with zero data retention policies or private, dedicated model deployments.

Non-Disclosure Agreements (NDA): We readily execute bilateral Non-Disclosure Agreements prior to accessing customer code repositories, technical documentation, or production environment credentials.

Intellectual Property of deliverables: All bespoke source code, automation workflows, AI agents, specialized prompt pipelines, RAG architectures, and generated documentation become the exclusive property of the client upon project completion and settlement of agreed service fees.

Probabilistic nature & human oversight (Human-in-the-loop): Large language models and generative AI systems are probabilistic by design. We build our architectures with strictly typed schemas, anti-hallucination guardrails, audit logging, and human-in-the-loop control checkpoints. The client remains responsible for final oversight of critical business, medical, legal, or financial operations in their production environments.

Third-party availability: Where a solution integrates third-party services (LLM provider APIs, cloud providers such as AWS or GCP), the performance and availability of such external services remain subject to their respective Service Level Agreements (SLAs).

4. Website Intellectual Property & Liability Limitations

All visual assets, copywriting, interface designs, animations, components, and frontend source code on this website belong to NexuBloom Studio or are used under valid licenses. Unauthorized copying, reverse engineering, or scraping is prohibited.

Client brands, project names, and logos featured in the portfolio section belong to their respective owners and are displayed strictly for demonstrative purposes regarding the engineering work delivered.

NexuBloom Studio shall not be liable for temporary service interruptions resulting from network maintenance or causes beyond our reasonable operational control.

5. Cookies & Local Storage

This website does not deploy third-party advertising tracking cookies or intrusive tracking technologies on its current public pages.

We exclusively use essential technical local storage in the browser (localStorage: "nb-theme") to remember your visual preference between dark and light themes for future sessions. Being strictly functional and focused on user experience, it does not track cross-site browsing behavior.

Official privacy inquiry channel

You can request the update or deletion of your data at any time by writing to: