Privacy Policy

This policy explains what Nex collects and why. Have it reviewed for your jurisdiction (GDPR if you serve EU users) before launch.

What we collect

• Account data: email, optional display name, hashed password (handled by Supabase Auth).
• Content: chart screenshots you upload, the resulting analyses, and chat messages.
• Billing: Stripe customer and subscription identifiers. Card details are handled by Stripe and never reach our servers.
• Usage and security logs: credit usage per day, IP address on sensitive actions, request logs.

How we use it

To provide the analysis and chat features, enforce plan limits, process payments, keep the service secure, and comply with legal obligations.

Processors

Vercel (hosting and AI Gateway), Supabase (database, authentication and file storage), Stripe (payments), Resend (transactional email), FluxAPI (fluxapi.shop, an AI API router that forwards your screenshots and chat messages to the model you select), and the underlying model providers (Anthropic and OpenAI). If FluxAPI is unavailable, requests are sent to the same providers through the Vercel AI Gateway. Some of these processors may handle data outside the EU.

Storage and security

Screenshots are re-encoded to strip embedded metadata and stored in a private bucket accessible only to your account through short-lived signed links. Database access is restricted by row-level security.

Retention and deletion

Deleting an analysis removes its image. Deleting your account from Plan and settings removes your profile, analyses, images and conversations. Billing records are kept as long as tax law requires.

Your rights

You can access, correct, export or delete your data, and object to processing. Contact the operator of this service to exercise these rights.