Privacy Policy

Last updated: July 7, 2026

This Privacy Policy describes how NEXA ("we", "us") collects, uses, and protects information across the NEXA websites (nexa-infinity.com and its subdomains) and our mobile applications, including VEX PRO (business coaching) and PeakS (sofa visualization for upholstery businesses).

Information we collect

Account details: name, email address, phone number, and password (stored hashed, never in plain text) when you register.
Business data you provide: business profile, goals, leads and customer records, tasks, documents, and content you create in the apps. You are responsible for obtaining your own customers' consent before entering their details.
AI-generated content and prompts: messages you send to in-app AI assistants and the content they generate (see "AI processing" below).
Basic usage data required to operate the service, such as authentication logs.

Our websites do not use advertising trackers; the NEXA landing site may use basic analytics (Google tag) to measure visits.

Where data is stored

Application data is stored with our infrastructure providers (Supabase / AWS in the EU and Asia-Pacific regions, and DigitalOcean). Access is restricted per account: each business sees only its own data, enforced server-side.

AI processing

Some features are powered by third-party AI providers. VEX PRO's advisor uses Anthropic's Claude models; PeakS visualizations use OpenAI image models. Prompts are processed server-side — API keys never leave our servers — and providers process this data under their own terms. We do not permit providers to use your data for advertising.

Sharing

We do not sell or rent personal information.
Sharing content (e.g., a PeakS visualization via WhatsApp or email) happens only when you initiate it, through apps installed on your device.
Infrastructure and AI providers process data on our behalf under their respective terms.

Your rights

You may request access, correction, or deletion of your personal data (including full account deletion) by contacting matan@nexa-infinity.com. We respond within 30 days.

Security & retention

All traffic is encrypted (TLS/HTTPS). Data is retained while your account is active; when an account is deleted, its associated business and customer data are deleted as well.

Children

Our services are intended for businesses and are not directed at children under 16.

Changes

We will update this page for any material change. Continued use after an update constitutes acceptance of the revised policy.