Nexa Infrastructure LLC (“Nexa,” “we,” “us”) is a utility prime contractor serving developers, general contractors, and design teams in New York. This policy explains what information we collect through nexainfrastructure.com and the Nexa Client Portal at portal.nexainfrastructure.com (together, the “Sites”), how we use it, who we share it with, and how long we keep it.
We do not sell personal information. The public website uses Google Ads conversion measurement, described under “Cookies and advertising measurement” below; the Client Portal uses no advertising or analytics cookies.
Information we collect
Information you give us
- Inquiries. When you submit the contact form or email us, we receive your name, company, email address, phone number, and whatever project details you choose to include.
- Portal accounts. Access to the Nexa Client Portal is by invitation only. We store your name, business email address, company, and project assignment. Passwords and multi-factor authentication secrets are handled by our authentication provider; we never see or store your password.
- Project material. Documents, drawings, photographs, permits, and correspondence that you or your team upload or that we generate in the course of the work.
Business contact information we collect from other sources
For business development, we maintain records of professional contacts at developers, general contractors, engineering firms, utilities, and public agencies. This information is business-role information — name, title, company, work email, work phone, and public professional profiles — gathered from publicly available sources, industry directories, and people who give it to us directly. You can ask us to remove you from this list at any time using the contact details below, and we will do so.
Information collected automatically
Our hosting and database providers log technical data needed to operate and secure the Sites: IP address, browser and device type, pages requested, timestamps, and error and authentication events.
Cookies and advertising measurement
Client Portal. The portal uses cookies and similar browser storage only for essential functions — keeping you signed in, remembering interface preferences, and enabling offline caching. It does not use advertising or analytics cookies.
Public website. nexainfrastructure.com uses the following:
- Google Ads tag. We advertise on Google and use the Google tag to measure whether our ads lead to inquiries. The tag may set cookies and send Google information such as the page visited, the ad you clicked, your IP address, and browser details. Google may use this information to measure ad performance and, under its own policies, to show you ads. See how Google uses information from sites that use its services.
- Vercel Web Analytics. Aggregate, cookie-free page-view statistics (pages visited, referrer, country, device type) so we can see how the site is used. It does not identify individual visitors.
- Your choice. The first time you visit, a banner lets you accept or decline advertising cookies. If you decline, the Google tag runs in a restricted mode that does not set advertising cookies. Visitors in the European Economic Area, the United Kingdom, and Switzerland get no advertising cookies unless they accept. You can change your choice at any time with the “Cookie Settings” link in the site footer, and you can turn off Google ad personalization at adssettings.google.com.
How we use information
- To deliver contracted work: utility coordination, permitting, scheduling, submittals, and field execution.
- To operate the portal: project milestones, permit status, document exchange, and team access.
- To respond to inquiries and prepare proposals and estimates.
- To invoice, collect payment, and maintain project and financial records.
- To contact professionals about work we perform, where relevant to their role.
- To secure our systems, investigate misuse, and enforce our terms.
- To meet legal, contractual, insurance, and agency recordkeeping obligations.
Service providers
We use a small number of vendors to run the Sites. Except as described for Google Ads above, they process information only to provide services to us and are bound by their own security and confidentiality obligations. All are based in the United States.
| Provider | Purpose |
|---|---|
| Supabase | Database, authentication, and file storage for the client portal |
| Vercel | Website and portal hosting, content delivery, and aggregate cookie-free site analytics |
| GitHub | Source code management and deployment |
| Resend | Transactional email — invitations, password resets, notifications |
| Google Workspace | Business email, calendars, and document storage |
| Google Ads | Advertising and conversion measurement on the public website |
We also disclose information where a project requires it — to utilities such as Con Edison and National Grid, to agencies such as DOB, DEP, and DOT, and to subcontractors, engineers, and the owner or general contractor on your project — and where required by law, subpoena, or our insurers and professional advisors. If our business is transferred or reorganized, project records may transfer with it.
Artificial intelligence
We use AI-assisted software to help draft documents, organize project data, and prepare estimates. We do not use AI to make automated decisions that produce legal or similarly significant effects about any individual, and we do not authorize any vendor to use your confidential project material to train their models. Where a task involves sensitive client material, we limit what is provided to these tools.
How long we keep information
- Project records, contracts, and documents: for the duration of the engagement and for at least seven years afterward, consistent with New York construction, tax, insurance, and warranty recordkeeping practice. Some records are kept longer where a claim, lien, or agency requirement makes it necessary.
- Portal accounts: for as long as your project is active, then deactivated. We will delete an account on request; the underlying project records are retained as described above.
- Inquiries: up to three years from last contact.
- Business contact records: until you ask us to remove you.
Security
The portal is invitation-only with no public signup. Access is scoped per project, so a client account can only reach its own project data. Document storage is private, served through short-lived signed links, and contracts and subcontractor billing are restricted to Nexa administrators. Multi-factor authentication is available to every user and enabled for administrator accounts. Data is encrypted in transit, and the database is backed up daily. No system is perfectly secure, and we cannot guarantee that unauthorized access will never occur.
If you believe your portal account has been compromised, email admin@nexainfrastructure.com immediately so we can disable access and reset credentials.
Your choices and rights
You may ask us to give you a copy of the personal information we hold about you, correct it, delete it, or stop contacting you. Email admin@nexainfrastructure.com and we will respond within 30 days. We may need to verify your identity, and we may retain information we are required to keep for legal, contractual, or insurance reasons.
Residents of states with comprehensive privacy laws may have additional rights, including the right to appeal a refused request. We apply the process above to all requests regardless of where you live. We do not sell personal information, so there is nothing to opt out of on that front.
New York residents
We maintain administrative, technical, and physical safeguards for private information of New York residents as required by the New York SHIELD Act, and we will notify affected individuals and the appropriate authorities of a breach of private information as required by law.
Children
The Sites are business tools intended for use by construction and development professionals. They are not directed to children, and we do not knowingly collect information from anyone under 18.
Other sites
Our pages link to third-party sites such as agency portals, our LinkedIn and Instagram profiles, and industry directories. We do not control those sites and this policy does not apply to them.
Changes to this policy
We may update this policy as our services and systems change. The effective date at the top of the page reflects the current version. If a change materially affects how we handle personal information, we will notify portal users by email.
Contact us
Nexa Infrastructure LLC
Brooklyn, New York
admin@nexainfrastructure.com