Privacy Policy
Last updated: September 19, 2026 • Effective Date: September 19, 2026
Key Commitments to Our Users
1. Introduction
Nexuro AI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how our multi-tenant AI chatbot SaaS platform collects, uses, protects, and discloses information when you use our website, APIs, embedding widgets, and dashboard.
By accessing or using Nexuro AI, you acknowledge that you have read and agree to this Privacy Policy.
2. Information We Collect
A. Account and Profile Information
When you create an account, we collect your email address, full name, workspace name, and authentication tokens provided securely via Supabase Auth.
B. Knowledge Base Content & Ingested Data
When you upload PDFs, text files, or provide website URLs for web crawling, we process and chunk the content to generate high-dimensional vector embeddings using OpenAI / Anthropic embedding models.
C. Usage and Telemetry Data
We track aggregate token consumption, message counts, and API quotas to enforce plan tier limits and ensure quality of service. In strict adherence to our security policy, we do never log or store raw conversational user prompts or query payloads.
3. How Your Data Is Stored & Isolated (RLS)
Security and tenant segregation are built into the database layer. All customer documents, vector chunks, and bot settings are isolated using PostgreSQL Row-Level Security (RLS).
No workspace or bot can ever query, retrieve, or access vector embeddings belonging to another workspace. Vector searches strictly enforce workspace_id and bot_id constraints.
4. Third-Party LLM & API Providers
Nexuro AI uses vetted AI infrastructure providers (such as OpenAI and Anthropic) to generate vector embeddings and generate real-time stream responses.
Under our enterprise API agreements, your customer data and context chunks sent to these endpoints are not used to train or fine-tune public foundation models. Our Data Processing Addendum lists subprocessors and describes how we process data on your behalf.
5. Cookies and Web Tracking
We use strictly necessary session cookies to maintain your login session and workspace preferences. Our embedded website widget does not store cross-site advertising cookies on your end users' browsers. See our Cookie Policy for details.
6. Data Retention and Right to Deletion (GDPR / CCPA)
You maintain full ownership of your data at all times. If you delete a knowledge source, chatbot, or workspace:
- All associated raw text chunks and vector embeddings are permanently purged immediately via database cascade deletes.
- You may request complete account deletion at any time by contacting our privacy officer.
7. Contact Us
If you have any questions or security disclosures regarding this Privacy Policy, please contact our team at: