Effective date: August 19, 2026
1. Scope
This Privacy Policy explains how Nexora OS ("Nexora", "we", "us", or "our") handles personal data when you access or use our web application, APIs, and related services.
2. Data We Collect
Depending on your use of the service, we may collect and process:
- Account data (name, email address, authentication identifiers).
- Workspace data (workspace names, member roles, invitations, and settings).
- Usage data (logs, timestamps, feature interaction, and diagnostics).
- Integration metadata (connected provider, scopes, status, and account identifiers).
- Security data required to prevent abuse, fraud, and unauthorized access.
3. How We Use Data
- To provide, operate, and maintain the Nexora platform.
- To authenticate users and enforce role-based access control.
- To enable integrations you explicitly connect (such as Gmail, Slack, Jira, and Notion).
- To improve reliability, security, and product performance.
- To communicate service, legal, or security notices.
4. Integrations and OAuth Data
When you connect third-party services, Nexora processes OAuth credentials and integration metadata to enable requested functionality. Tokens are encrypted at rest and scoped to the authenticated user and workspace authorization context. We do not expose refresh tokens or client secrets in client-side code.
5. Security Controls
- Encryption at rest for sensitive token material.
- Encrypted transport using HTTPS/TLS in transit.
- Server-side authorization checks for workspace and connector actions.
- Operational logging and monitoring for security and incident response.
6. Data Sharing
We do not sell personal data. We share data only as necessary to provide the service, comply with law, protect rights, or process requests through connected providers you authorize.
7. Data Retention
We retain data for as long as necessary to provide services, meet legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account data, subject to applicable legal and operational retention requirements.
8. Your Rights
Subject to local law, you may request access, correction, deletion, or export of your personal data. You may also disconnect integrations at any time through Nexora settings.
9. International Processing
Nexora may process data in regions where our infrastructure or service providers operate. We apply reasonable safeguards appropriate to the nature of the data processed.
10. Policy Updates
We may update this Privacy Policy periodically. Material updates will be reflected by an updated effective date and, where required, additional notice.
11. Contact
For privacy inquiries or data requests, contact us at aryavgaur1@gmail.com.