LEGAL

Privacy Policy

Last updated: September 2026

This Privacy Policy explains what information Nexisra ("we," "us," "our") collects when you use our website and platform (the "Service"), how we use it, and the choices you have. By using Nexisra, you agree to the practices described here.

1. Information we collect

When you create a Nexisra account, we collect:

• Account information: your business name, email address, and password (stored as a secure, irreversible hash — we never store or can view your actual password).
• Business profile information: details you choose to provide in Settings, such as industry, website, and social media handles.

If and when you connect a third-party social media account (such as Instagram, Facebook, or LinkedIn) to Nexisra, we additionally collect the data those platforms make available to us through their official APIs, which may include:

• Public profile information for the connected account (name, profile picture, follower count).
• Performance metrics for content you have published (reach, engagement, impressions).
• Audience insights made available at an aggregate level by the platform.

We only request the minimum data permissions needed to provide the specific features you use, and we do not access private messages, direct messages, or data outside what you explicitly authorize through each platform's official connection process.

2. How we use your information

• To provide, operate, and maintain the Nexisra dashboard and its features.
• To generate analytics, insights, and recommendations based on your connected accounts' data.
• To communicate with you about your account or the Service.
• To maintain the security and integrity of the Service.

We do not sell your personal information or your connected social media data to third parties.

3. How we store your information

Your account and business data is stored in a managed Postgres database (provided by Supabase). Our application server runs on Render. Both providers maintain their own security and infrastructure practices; we do not store your data on our own physical servers.

4. Data from connected social platforms

Where Nexisra integrates with a third-party platform (such as Meta's Instagram or Facebook APIs, or LinkedIn's API), our use of the data obtained is governed both by this Privacy Policy and by that platform's own developer policies. We retain platform data only for as long as necessary to provide the Service to you, and we delete it upon request or upon disconnection of the associated account, consistent with each platform's data deletion requirements.

5. Cookies

Nexisra uses a single essential cookie to keep you signed in (a secure session token). This cookie is not used for advertising or tracking across other websites, and is not accessible to JavaScript running in your browser.

6. Your rights and choices

• You can view and update your business profile information at any time from Settings.
• You can disconnect any connected social media account at any time.
• You can request deletion of your account and associated data by contacting us (see Section 9).

7. Children's privacy

Nexisra is intended for use by businesses and individuals aged 18 and older. We do not knowingly collect information from anyone under 18.

8. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date at the top of this page.

9. Contact us

If you have questions about this Privacy Policy or wish to request access to or deletion of your data, contact us at hello@usenexisra.com.