Privacy Policy
Last updated: July 7, 2026
This Privacy Policy explains what personal data Nexa collects, how we use it, who we share it with, and the rights you have over it. This page is maintained by the Nexa team and is not an independent legal certification.
1. What we collect
- Account data: your name, email address, and authentication identifiers.
- Profile data: target role, salary preferences, location, LinkedIn URL, resume text, and answers you provide in the Career Intelligence Assessment.
- Career activity: jobs you track, contacts you add, tasks, calendar events you import, video intros you record, and any AI outputs generated for you.
- Usage data: pages you visit, features you use, error logs, and rough device/browser info for reliability and analytics.
- Cookies: essential cookies to keep you signed in and remember preferences.
2. How we use your data
We use your data to run the Service — store your profile, generate AI outputs, remind you about tasks, sync calendars, send transactional emails, and improve the product. We do not sell your personal data. We do not use your resume, notes, or private profile content to train external AI models.
3. Third-party processors
To operate Nexa we share the minimum necessary data with:
- Lovable Cloud — hosting, authentication, database, and storage.
- Lovable AI Gateway — routes prompts to underlying AI models (e.g. Google Gemini) to generate your Career Intelligence report, Clarity profile, Career Blueprint, cover letters, and interview practice.
- Email delivery — for account and transactional emails only.
4. AI processing disclosure
When you use an AI feature, the relevant inputs (e.g. your resume, assessment answers, job description) are sent to the AI provider named above to generate the output. AI outputs can be inaccurate — always review before you rely on them.
5. Data retention and deletion
We keep your data for as long as your account is active. You can delete your account at any time from Settings. Deletion enters a 30-day grace period during which you can sign in and cancel; after 30 days your account and personal data are permanently removed from our production systems. Backups are purged on their normal rotation.
6. Your rights
Depending on where you live (e.g. EU, UK, California), you have the right to access, correct, export, restrict, or delete your personal data, and to object to certain processing. Email privacy@nexa.app to exercise any of these rights. You can also export or delete your data directly from Settings.
7. Cookies
We use strictly necessary cookies to keep you signed in, remember interface preferences, and measure basic usage. You can decline non-essential cookies via the banner on your first visit or by clearing site storage.
8. Security
Data is encrypted in transit (HTTPS) and at rest. Access to production data is limited to authorized personnel. No system is 100% secure — please use a strong, unique password.
9. Children
Nexa is not intended for children under 16. Do not use the Service if you are under that age.
10. Changes to this policy
We may update this policy from time to time. Material changes will be announced by email or in the app before they take effect.
11. Contact
See also our Terms of Service.