Last updated: 10 August 2026
This Privacy Policy explains how R.F master group Ltd. (company no. 516915279), trading as NEXA ("we", "us", "our"), collects, uses, shares and protects personal information.
It applies to the NEXA websites (nexa-infinity.com and its subdomains) and to our mobile applications on both the Apple App Store and Google Play:
| Controller | R.F master group Ltd., company no. 516915279 |
|---|---|
| Registered address | Birnboim Nati 19, Petah Tikva 4902413, Israel |
| Privacy contact | matan@nexa-infinity.com |
Name, email address, phone number, business name, branch, role, and password (stored hashed — never in plain text). Collected when a business account is created or when a user is added to an existing business.
This is the core of how PeakS works, so we describe it in full.
Business profile, product and fabric catalog, branches, employees, tasks, documents, goals and forecasts, and the customer records you create — including your customers' names and phone numbers, so you can send them a visualization.
The fabric, colour and product selections you make, the images you submit for processing, and the results returned. In VEX PRO, the messages you exchange with the AI advisor.
Authentication and security logs (sign-in times, IP address, device and app version), and basic operational counters such as how many visualizations your business has generated in the current billing period. Our apps do not contain advertising SDKs and do not track you across other companies' apps or websites. The NEXA marketing website may use basic analytics (Google tag) to count visits.
| Purpose | Basis |
|---|---|
| Creating and running your account; providing the apps | Performance of our contract with you |
| Processing photographs to generate visualizations | Performance of our contract; your consent to camera / photo access |
| Billing, quota tracking and account approval | Performance of our contract; legal obligation (tax and accounting) |
| Security, fraud prevention, abuse monitoring | Our legitimate interest in keeping the service safe |
| Support and communication about the service | Performance of our contract |
| Improving the products using aggregated, non-identifying statistics | Our legitimate interest in improving the service |
If you do not provide the information. Account details are a contractual requirement — without them we cannot open or maintain an account. Camera and photo access are optional, but PeakS cannot generate a visualization without an image. Customer details are optional; without them you can still generate visualizations, but you cannot save them against a customer or share them from the app.
Some features are powered by third-party AI providers:
All calls are made server-side — our API keys never leave our servers, and your device does not connect to the AI provider directly.
We use these providers under their business/API terms, which means:
AI output is generated by a machine-learning model. It is an approximation and may be inaccurate. See our Terms of Service.
Before you create your first visualization, PeakS asks you to confirm that you understand images will be sent to a third-party AI provider for processing. You can withdraw that consent by ceasing to use the visualization feature or by deleting your account.
We do not sell or rent personal information, and we do not share it with data brokers or advertisers. We share it only with the service providers below, who process it on our behalf under contract:
| Provider | Purpose | Location |
|---|---|---|
| Supabase (on AWS) | Database, authentication, file storage, server functions | EU / Asia-Pacific |
| DigitalOcean | Hosting | EU / Asia-Pacific |
| OpenAI | Image generation for PeakS | United States |
| Anthropic | AI advisor for VEX PRO | United States |
We may also disclose information where we are legally required to do so, or to establish or defend legal claims.
Sharing you initiate. When you send a visualization to a customer by WhatsApp or email, that happens through the apps installed on your own device and under those apps' own terms. We do not send it for you.
Application data is stored with our infrastructure providers in the EU and Asia-Pacific regions. Access is restricted per account and enforced server-side: each business can see only its own data.
Because our AI providers operate in the United States, images and prompts are transferred there for processing. These transfers are made under the providers' data processing terms and standard contractual clauses. Israel holds EU adequacy status, so data may flow between Israel and the EEA without additional safeguards.
| Data | Retention |
|---|---|
| Account details and business data | While the account is active |
| Source photographs and generated visualizations | While the account is active, or until you delete them individually |
| Customer records you created | While the account is active, or until you delete them |
| AI prompts and outputs held by providers | Up to 30 days for abuse monitoring, then deleted by the provider |
| Authentication and security logs | 90 days |
| Billing and accounting records | As required by Israeli tax and accounting law, then deleted |
| Backups | Rotated and purged on a rolling 30-day cycle |
When an account is deleted, the associated business, customer and image data is deleted with it, except for the limited records above. Deleted data disappears from backups within 30 days.
You may request access to your personal data, correction of it, deletion of it, a copy of it in a portable format, or restriction of or objection to processing. You may also withdraw consent where processing is based on consent.
You can delete your account directly inside the app, without contacting us:
Deletion removes the account record and its associated data as described in section 7. It is permanent and cannot be undone.
If you have lost access to the app, or you want only some of your data removed, you can also write to matan@nexa-infinity.com. Full details, including exactly what is deleted and what is kept, are on our Account & Data Deletion page.
We respond to any other rights request within 30 days. There is no charge. If you are unhappy with our response, you may complain to the Israeli Privacy Protection Authority, or to your local supervisory authority if you are in the EEA or the UK.
All traffic is encrypted in transit (TLS/HTTPS). Passwords are stored hashed. Access to production data is restricted to personnel who need it and is logged. Data is segregated per business and enforced at the server, not only in the app interface. AI provider credentials are held server-side and are never present on your device.
If a security incident affects your personal data and is likely to create a risk to you, we will notify you and the relevant authority without undue delay, and tell you what happened, what data was involved, and what we are doing about it.
Our services are business tools. They are not directed at, or intended for, anyone under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
For the personal information you enter about your own customers, and for photographs you take in their homes, you are the controller and we act as your processor. We process that data only on your documented instructions in order to provide the service, we do not use it for our own purposes, and we impose confidentiality and security obligations on our sub-processors.
The full terms governing this relationship — including our security obligations, sub-processor list, breach notification, and deletion on termination — are in the Data Processing Annex to our Terms of Service.
The privacy information shown on our App Store product page (Apple's App Privacy labels) and on our Google Play listing (the Data safety section) is derived from this policy. Where you notice a discrepancy, this policy is the authoritative description of our practices, and we would be grateful if you told us so we can correct the listing.
We will update this page for any material change and revise the date at the top. Where a change materially affects your rights, we will also notify account holders in-app or by email. Continued use after an update constitutes acceptance of the revised policy.
Questions, requests or complaints: matan@nexa-infinity.com, or by post to Birnboim Nati 19, Petah Tikva 4902413, Israel.