Privacy Policy

1. Introduction

Welcome to Nexor ("we," "our," "us," or "Company"). We are committed to protecting your privacy and ensuring you have a positive experience on our website and in using our products and services.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our AI document analysis platform ("Service"). This policy applies to all users of our Service.

2. Information We Collect

2.1 Information You Provide Directly

We collect the following information that you provide directly to us:

• Account Information: Name, email address, password, phone number, company name
• Payment Information: Billing address and payment method details. Payments are processed by Paddle.com, our Merchant of Record. Paddle handles all payment transactions, including credit card processing, invoicing, and tax collection. Paddle is responsible for the security of your payment information. Nexor does not process, store, or have access to your payment card data.
• Documents and Content: Documents, files, and data you upload for analysis
• Communication Data: Messages, support tickets, feedback, and other communications when you contact us
• Profile Information: Preferences, settings, and configuration data

2.2 Automatically Collected Information

We automatically collect certain information when you use our Service:

• Usage Data: Pages visited, features used, time spent, and interaction patterns
• Device Information: Device type, operating system, browser type and version
• Network Information: IP address, internet service provider, connection type
• Log Data: Access logs, error logs, and performance metrics
• Location Data: General geographic location derived from IP address (country/region level)
• Cookies and Tracking Technologies: See our Cookie Policy section below

2.3 Information from Third Parties

We may receive information about you from third-party services, such as authentication providers, analytics platforms, and business partners.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Delivery

• Provide, maintain, and improve our AI document analysis platform
• Process and analyze documents you upload
• Generate reports, insights, and analytics
• Authenticate users and manage accounts
• Process transactions and manage subscriptions

3.2 Communication

• Send technical notices, updates, and security alerts
• Respond to your comments, questions, and support requests
• Send administrative messages and account notifications
• Provide customer service and technical support

3.3 Security

• Detect, prevent, and address security threats, fraud, and abuse
• Enforce our Terms of Service and policies
• Investigate and respond to security incidents

3.4 Analytics and Improvement

• Monitor and analyze usage patterns and trends
• Improve our algorithms, features, and user experience
• Conduct research and development
• Measure service performance and reliability

3.5 Marketing (with Consent)

• Send marketing communications (where you have opted in)
• Personalize content and advertisements

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who perform services on our behalf, including:

• Cloud infrastructure providers
• Paddle.com (Merchant of Record): Payment processing, invoicing, and tax collection
• Email service providers
• Analytics and monitoring services
• Customer support platforms
• AI model providers (for document analysis)

These providers are contractually obligated to protect your data and use it only for specified purposes. For information about how Paddle handles your payment data, please review Paddle's Privacy Policy at https://paddle.com/legal/privacy.

4.2 Legal Requirements

We may disclose information if required by law, regulation, legal process, or governmental request, or to:

• Comply with legal obligations
• Respond to valid subpoenas, court orders, or warrants
• Protect our rights, property, or safety
• Prevent fraud or security threats
• Enforce our Terms of Service

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.

4.4 With Your Consent

We may share information with your explicit consent or at your direction.

5. Data Security

We implement security measures to protect your personal information, including:

• TLS encryption for data in transit
• Encryption at rest for stored data
• Access controls and authentication measures
• Regular security reviews and updates
• Secure development practices
• Monitoring for security threats

Note: While we implement security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your data to the best of our ability. Our security practices may evolve as the product matures.

6. Data Retention

Retention Period: We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.

Account Cancellation: When you cancel your account, we will delete or anonymize your personal information within a reasonable period (typically 30 days), except where retention is required by law or for legitimate business purposes (e.g., dispute resolution, tax records).

Document Data: Documents and analysis outputs are retained according to your account settings and subscription plan. You may export your data at any time through your account dashboard.

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

7.1 Access and Portability

• Right to Access: Request a copy of your personal information we hold
• Right to Data Portability: Receive your data in a structured, machine-readable format

7.2 Correction and Deletion

• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal information

7.3 Processing Restrictions

• Right to Restrict Processing: Limit how we use your data
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for processing that relies on consent

7.4 California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, and shared
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising privacy rights

7.5 Exercising Your Rights

To exercise any of these rights, please contact us at visuvalingamvithushan@gmail.com. We will respond to your request within a reasonable time (typically 30 days). We may need to verify your identity before processing your request.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

When we transfer personal data internationally, we take reasonable steps to ensure appropriate safeguards are in place to protect your data in accordance with applicable laws.

9. Data Breach Notification

In the event of a security breach that may affect your personal information, we will notify you as soon as reasonably possible after becoming aware of the breach. We will provide information about the nature of the breach and steps we are taking to address it, in accordance with applicable laws.

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information about your use of our Service.

10.1 Types of Cookies

• Essential Cookies: Required for the Service to function (cannot be disabled)
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand how you use our Service
• Marketing Cookies: Used to deliver relevant advertisements (with your consent)

10.2 Cookie Management

You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of our Service.

11. Third-Party Links and Services

Our Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

12. Children's Privacy

Our Service is not intended for individuals under the age of 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete such information promptly.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons. We will notify you of any material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an email notification to registered users
• Displaying a prominent notice on our Service

Material changes include modifications to how we collect, use, or share your information, or changes to your rights. Your continued use of the Service after such changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: