Privacy Notice

This Privacy Notice explains how Nexora Labs ("we", "us", "our") collects, uses, and protects personal data when you use Nexora (the "Service"). Nexora Labs is the data controller for personal data processed about Service users.

1. Data We Collect

• Account data — name, email address, login credentials, profile picture.
• Content data — chats, prompts, generated outputs, uploaded files, projects you create.
• Support data — messages you send to customer support.
• Usage and device data — feature usage, log events, IP address, browser and device identifiers.
• Cookies — essential cookies for sign-in and session management; optional analytics cookies (where enabled).

2. How We Use Data

• To create and operate your account and provide the Service (contract performance).
• To secure the Service and prevent fraud or abuse (legitimate interests).
• To improve features, fix bugs, and analyse usage (legitimate interests).
• To provide customer support (contract performance).
• To send service-related communications and, where you opt in, marketing (consent).
• To comply with legal obligations.

3. Sharing

We share personal data only with:

• Service providers / subprocessors — hosting, database, AI inference, email delivery, analytics, and customer support tooling, under contractual data protection terms.
• Paystack, our payment processor, for processing payments, managing subscriptions, and issuing receipts. Paystack acts as an independent controller for payment data it collects.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law or to protect rights and safety.

4. International Transfers

Where personal data is transferred outside your country (including the UK or EEA), we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

5. Retention

We keep personal data only as long as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When no longer needed, data is deleted or anonymised.

6. Your Rights

Depending on your jurisdiction, you may have rights to access, rectify, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent. EEA/UK users may also lodge a complaint with their supervisory authority. We aim to respond to verified requests within one month.

7. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls, and least-privilege practices — to protect personal data. No system is perfectly secure.

8. Cookies

We use essential cookies required for the Service to function. Where we use analytics cookies, you can manage preferences via your browser settings or in-product controls.

9. Contact

For privacy questions or to exercise your rights, contact Nexora Labs through the support channels in your account.