Privacy Policy

This policy explains how Nexplora LLC ("Nexplora," "we," "us") handles information when you use nexplora.ai, the Nexplora apps and the NX assistant (the "Service"). Nexplora is an AI assistant: you ask for something in plain language and it does it, including in accounts you choose to connect. We collect only what we need to do that, we do not sell your data, and we do not use it for advertising.

1. Information we collect

• Account information — your email address, name and the profile details you enter at sign-up (for example account type, handle and professional category).
• Content you give us — your chat messages, instructions, files you upload, notes and memories you save, and the work you create in Nexplora.
• Connected-account data — when you connect an account (for example Google, Facebook, Instagram, Threads, LinkedIn or X), the access tokens that provider issues to Nexplora and the data Nexplora reads or writes in that account when you ask. Sections 3 to 5 explain this in detail.
• Phone number and SMS — if you link a phone number and text our number (see section 10).
• Payment information — if you buy a plan or credits, our payment processor handles your card; we receive confirmation of the payment and your plan, never your full card number.
• Messages sent to your business — if you connect a customer channel (for example Facebook Messenger, Instagram messages or SMS) so Nexplora can answer for your business, the messages people send to it and the replies.
• Technical and usage data — IP address, browser and device type, pages and features used, and error reports (which can include a short recording of the page when an error happens), used to run, secure and fix the Service.

2. How we use information

• to provide the Service: answer your requests, carry out the actions you ask for and approve, and show you the results;
• to remember useful context — Nexplora saves short facts from your conversations and connected accounts to your own private memory so it can help you with the right context next time; you can view, edit and delete them under MY → Memory;
• to check and improve the quality of the answers Nexplora gives you and your workspace (for example, reviewing how your business's assistant answered a customer) — kept within your workspace;
• to secure the Service, prevent abuse and fraud, and debug problems;
• to communicate with you about your account, security and changes to the Service;
• to comply with law.

We do not sell personal information, and we do not use your content or connected-account data for advertising.

3. Google user data

Nexplora lets you connect a Google account so it can work in Google products on your behalf. You choose what to connect on Google's consent screen, and you can disconnect at any time.

What we access and why

Depending on the products you allow, Nexplora can access:

• Google account basics (name, email address, profile picture) — to identify which Google account is connected.
• Gmail — to list, read and search your messages and threads, draft, send, reply and forward, label, archive and move to trash, and manage filters, when you ask.
• Google Calendar — to show your schedule, find free time, and create, change or cancel events and calendars and their sharing, when you ask.
• Google Drive, Docs, Sheets and Forms — to find, open, read, create, edit, organize, share and remove files, documents, spreadsheets and forms, and read form responses, when you ask.
• Google Chat and Google Meet — to list your spaces, read and post messages, manage members, create meeting links, and list your past meetings, participants, recordings and transcripts, when you ask.
• Google Tasks — to create, update, complete and delete tasks and task lists.
• YouTube — to show your channel and its analytics, and to upload videos you provide and manage their details, playlists, captions, comments and live broadcasts, when you ask.
• Google Analytics, Search Console, Google Ads and BigQuery (each connected separately) — to read reports for properties, sites, ad accounts and datasets you own, run queries you ask for, and submit or remove sitemaps.

Nexplora only accesses Google data to do what you ask, or to provide features you turn on. Actions that send, post, publish, share or delete ask for your approval before they run.

A short private account profile

When you connect, and about once a day while the account stays connected, Nexplora makes a small number of read-only requests (at most 15) to understand the account — for example which account it is, how many files or calendars it holds, and the subjects, sender names and titles of a few recent messages, files and events. It never keeps message bodies or file contents from this step. An AI model turns those short summaries into a one-line profile and up to 15 short facts, which are stored in your private memory so Nexplora can answer with the right context. Other people's email addresses, phone numbers and handles are removed. This profile is visible only to you, and it is deleted when you disconnect.

Optional: sharing email and calendar activity with your company's CRM

If you belong to a company workspace you can turn on "Share email activity" or "Share calendar activity" under MY → Connections. It is off by default. When on, Nexplora checks your inbox and calendar about every hour and adds, to records of people and companies already in your company's CRM, the subject, a short preview (up to 300 characters), participants, date and a link for emails — never the full message — and the title, time, attendees and link for meetings. Your company's CRM users can see these entries. You can turn sharing off at any time.

Where it is stored and how long

• Google access and refresh tokens are stored encrypted in our credential vault. They are kept while the connection is active and revoked, with the secret value erased, as soon as you disconnect.
• Content Nexplora reads from Google to answer you (for example an email you asked about) is used to produce that answer. Nexplora does not keep a separate copy of your mailbox, Drive or calendar. What it says back to you is saved in your conversation history, and short facts from the conversation may be saved to your private memory; the account profile above and any CRM entries you opted into are stored as described.
• Records of AI model requests and responses, with credentials removed, are kept in our own systems to operate, debug and secure the Service, and are deleted automatically after 90 days. You can ask us to delete them sooner.
• Section 8 explains retention and deletion.

Sharing of Google data

We do not sell Google user data and do not transfer it to anyone except: (a) service providers that process it on our behalf only to provide the Service (hosting, database and AI model providers — see section 6), under their service terms; (b) people you choose to share it with, such as your company's CRM if you opt in, or the recipients of an email you send; and (c) where required by law, to protect against security threats, or as part of a merger or acquisition with notice to you.

Limited Use

Nexplora's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• we use Google user data only to provide and improve the user-facing features you use in Nexplora;
• we do not use or transfer Google user data for advertising, including personalized or retargeted ads;
• we do not sell Google user data or use it to determine creditworthiness or for lending purposes;
• we do not use Google user data — including data from Google Workspace APIs — to develop, improve, or train generalized or non-personalized AI and/or machine-learning models;
• no person at Nexplora reads your Google data unless you give us permission for specific messages or files (for example in a support request), it is needed for security purposes such as investigating abuse, it is needed to comply with law, or it has been aggregated and anonymized for internal operations.

YouTube API Services

Nexplora's YouTube features use YouTube API Services. By using them you agree to the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy. You can revoke Nexplora's access to your YouTube and other Google data at any time on the Google security settings page, in addition to disconnecting in Nexplora.

4. Facebook, Instagram and Threads data

When you connect a Meta account, you choose the permissions on Meta's login screen. Depending on what you allow, Nexplora can access:

• Facebook — your basic profile; the Pages you manage, their posts, comments, messages and insights; your ad accounts, campaigns, ads and their results; your business portfolios; product catalogs; and lead forms and the leads they collect.
• Instagram (professional accounts) — your profile, posts, comments, insights and direct messages.
• Threads — your profile, threads, replies and insights.

Nexplora uses this access only to do what you ask — for example publish a post, reply to a comment or message, manage a campaign or catalog item, or show your results — and actions that post, send, publish, delete or spend ask for your approval first. Nexplora keeps the same kind of short private account profile described in section 3, which is deleted when you disconnect. If you let Nexplora answer messages for your Page or Instagram account, the messages people send and the replies are stored in your workspace so the conversation can continue and so you can review and improve the answers. We do not sell Meta data, use it for advertising, or share it with data brokers. Tokens are stored encrypted in our credential vault and revoked when you disconnect.

To remove Nexplora at Meta, use Facebook settings, Instagram settings or Threads → Settings → Account → Website permissions. To delete the data we hold, follow the steps on our data deletion page.

5. LinkedIn and X data

When you connect LinkedIn or X, you choose the permissions on that provider's sign-in screen. Depending on what you allow, Nexplora can access:

• LinkedIn — your name, email address and profile picture to identify the connected account; and, when you ask, posting on your behalf (text, images and video) and, for LinkedIn Pages you administer, the Page's posts, comments, mentions and analytics.
• X — your profile; posts, replies and media you ask Nexplora to publish or delete; your mentions, bookmarks, lists and direct messages; and the analytics of your own posts.

Nexplora uses this access only to do what you ask, and actions that post, reply, send a message or delete ask for your approval first. Nexplora does not scrape LinkedIn or X, does not send bulk or automated messages or connection requests, and does not use LinkedIn or X data to build profiles of other people, for advertising audiences, or to train AI models. Content Nexplora reads to answer you is used for that answer and appears in your conversation history. Nexplora does not keep a separate copy of your feed, network or messages; items you ask Nexplora to track for you (for example new mentions) are kept in your workspace until you delete them. Tokens are stored encrypted in our credential vault and revoked when you disconnect.

To remove Nexplora at LinkedIn, use LinkedIn → Settings → Data privacy → Permitted services. At X, use Settings → Security and account access → Apps and sessions → Connected apps. To delete the data we hold, follow the steps on our data deletion page.

6. AI processing and service providers

To answer a request, Nexplora sends the relevant part of your conversation — which can include data from a connected account you asked about — to AI model providers that act as our service providers. They process it to return a response to your request, under their API terms. Where a provider offers a per-request setting not to store our requests, we turn it on. If you choose to use your own AI provider key, your requests go to that provider under your own agreement with it. When you ask one of your own AI models, or the council, in Nexplora (including from another AI app you have connected to Nexplora), your request is sent to the model provider you chose, using your own key for that provider. We use other service providers for hosting and databases, content delivery and security, payments, email and SMS delivery, website analytics and error monitoring. They may process information only on our instructions and to provide the Service.

We do not use Google, Meta, LinkedIn or X user data to train our own AI models or general AI models. Nexplora learns about you only through your own private memory, which you control.

7. When information is shared

• with service providers as described in section 6;
• with people you choose — for example the recipients of a message you send, members of a team or company workspace you share work with, or an app you connect to Nexplora;
• when required by law, or to protect the rights, safety and security of our users, the public or Nexplora;
• as part of a merger, acquisition or sale of assets, with notice to you, under this policy.

8. Retention and deletion

• Connected-account tokens are kept while the connection is active. When a connection renews an expired token, the old token's secret is erased immediately and its empty record is deleted within about two hours. Disconnecting or reconnecting revokes the previous tokens and erases their secrets immediately; their empty records are removed within 30 days.
• Account profiles learned at connect time are deleted when you disconnect that account.
• Chats, memories, files and work you create are kept until you delete them or delete your account. You can review, edit and delete memories under MY → Memory.
• Messages sent to your business over a channel you connected are kept in your workspace until you or your workspace delete them or the account is deleted.
• Logs: audit and security logs record which actions ran and whether they succeeded, not the content of your connected accounts. Records of AI model requests and responses (each chat or code turn’s run log) are deleted automatically after 90 days, and you can ask us to delete them sooner.
• Billing records are kept as long as tax and accounting law requires.

To disconnect an account, remove Nexplora's access at Google, Meta, LinkedIn or X, or delete your whole account and its data, follow the steps on our data deletion page. Account deletion requests are completed within 30 days.

9. Security

Data is encrypted in transit (TLS). Connected-account credentials are encrypted at rest in a dedicated credential vault and are never shown back to you or sent to AI models. Access to production systems is limited to the people who need it to run the Service. No system is perfectly secure; if you believe your account is at risk, contact [email protected].

10. Text messaging (SMS)

If you link a phone number to your account and message our number, we process that phone number and the content of your messages solely to operate the two-way conversation and continue your Nexplora session. Message frequency varies and depends on your interaction. Message and data rates may apply. Text HELP for help or STOP to opt out at any time.

We do not sell, rent, or share your mobile phone number or SMS opt-in information with third parties or affiliates for their own marketing or promotional purposes. Mobile information is used only to deliver the messaging service you initiated. No mobile information is shared for marketing purposes.

11. Your choices and rights

You can access, correct, export or delete your information, and disconnect any account, at any time. Depending on where you live you may have further rights, such as to object to or restrict processing or to complain to a data-protection authority. To exercise them, email [email protected]; we answer within 30 days.

12. Children

Nexplora is not directed to children, and you must be 18 or older to create an account. We do not knowingly collect information from children under 13 (or the minimum age where you live). If you believe a child has given us information, contact us and we will delete it.

13. International transfers

Nexplora is operated from the United States, and our service providers may process information in the United States and other countries. Where required, we use appropriate safeguards for those transfers.

14. Changes to this policy

We will post any changes here and update the date above. If a change is material, we will tell you in the app or by email before it takes effect.

15. Contact

Nexplora LLC
2542 East 2nd Street, Brooklyn, NY 11223, United States
Privacy questions and requests: [email protected]
Security: [email protected]