Legal

Privacy Policy

Last updated: March 30, 2026

This document is a draft placeholder and has not been reviewed by legal counsel. It should not be relied upon as a binding privacy policy until formally reviewed and published.

1. Information We Collect

We collect information you provide directly to us, including:

  • Account information (name, email address, password)
  • Payment information (processed securely through Stripe; we do not store card numbers)
  • Website content and conversation history with the AI builder
  • Usage data such as pages visited, features used, and session duration
  • Device information including browser type, operating system, and IP address

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process transactions and send related billing information
  • Generate and host websites on your behalf
  • Provide AI-powered maintenance for your websites
  • Send service-related communications and support responses
  • Detect and prevent fraud, abuse, and security issues

3. AI and Your Data

Your conversation history and website content are processed by AI to generate and maintain your websites. We do not use your personal content to train AI models. Your data is processed in isolated environments and is not shared across user accounts.

4. Data Sharing

We do not sell your personal information. We may share data with:

  • Service providers who assist in operating the platform (hosting, payment processing, email delivery)
  • Law enforcement or government agencies when required by law
  • Third parties in connection with a merger, acquisition, or sale of assets (with prior notice)

5. Data Security

We implement industry-standard security measures to protect your data, including encryption at rest and in transit, access controls, and regular security audits. Each website runs in an isolated container environment. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your account data and website content for the duration of your subscription. Upon account deletion, we remove your personal data and website content within 30 days, except where retention is required by law or for legitimate business purposes such as fraud prevention.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Export your website source code and data
  • Object to or restrict certain processing activities
  • Withdraw consent where processing is based on consent

8. Cookies

We use essential cookies to maintain your session and authentication state. We may use analytics cookies to understand how users interact with the Service. You can control cookie preferences through your browser settings.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child without parental consent, we will delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification at least 30 days before taking effect. The "Last updated" date at the top of this page indicates when the policy was last revised.

11. Contact

If you have questions about this Privacy Policy or want to exercise your data rights, please contact us at support@nexori.ai.