Skip to content
Sign up

Privacy Policy

Version 2026-10-26 · Effective October 26, 2026

This Privacy Policy explains what personal information Nexus Projects AI Corp, a Delaware corporation ("Nextify", "we", "us"), collects when you visit www.nextifynow.com, use the customer portal or API, or buy our cloud services; why we use it; who we share it with; and the choices and rights you have. It does not cover the data you store or run on your instances, volumes and buckets ("Customer Content"): we process that only to provide the services, as the Terms of Service describe.

1. Information we collect

  • Account information: your name, email address, organization name and sign-in credentials (passwords are stored only as salted hashes), and the API tokens you create (stored only as hashes).
  • Billing information: billing name and address, invoices, payments and credits. Your card is collected and stored by our payment processor, Stripe; we receive only its brand, last four digits and expiry date.
  • Service and usage information: the resources you create and their configuration, usage records used for billing (for example instance hours and data transfer), support requests and the audit history of changes to your account.
  • Technical information: IP addresses, browser type, device and operating system, pages you visit on our website and portal, the page that referred you, and the time of each visit, collected in server logs and by our own first-party script. With page views we also record your browser's preferred language, the size class of your screen (small, medium, large or wide), and your approximate location (country, region and city), which we work out from your IP address. See section 4.
  • Advertising information: when you arrive from an ad, the ad's click identifier (for example fbclid, gclid or twclid) and campaign parameters (utm_*). See section 4.
  • Referral information: if you joined through someone's invite link, which account referred you.

We collect this from you, from your browser and devices, from Stripe (payment status), and from advertising platforms only in the form of the click identifiers in the links you follow.

2. How we use it

  • to create and run your account and provide, bill and support the services;
  • to process payments, prevent fraud and abuse, and keep the services secure (for example rate limits, sign-up checks and investigating Acceptable Use Policy reports);
  • to send service, security and billing messages (these are part of the service; you cannot opt out of them while you have an account);
  • to measure and improve our website, services and advertising (section 4);
  • to pay referral commissions; and
  • to comply with the law, enforce our terms and protect our rights and those of our customers.

We do not use Customer Content for advertising, and we do not sell personal information for money.

3. Who we share it with

  • Service providers that process it for us under contract: Stripe (payments and invoices) and Resend (delivery of account and billing email).
  • Advertising platforms for ad measurement, as described in section 4.
  • Your referrer, if you joined through an invite: they see that a referred account exists and what it earned them, not your name, email address or what you use.
  • Authorities and others when the law requires it, to respond to valid legal process, or to protect the safety, rights or property of our customers, the public or Nextify.
  • A successor in a merger, acquisition or sale of our business, subject to this Policy.

4. Advertising measurement and your choices

Nextify advertises on platforms such as Meta (Facebook, Instagram), X, Google, TikTok, LinkedIn, Reddit, Snapchat, Pinterest and Microsoft. To learn which ads work, our servers tell those platforms when someone who came from an ad visits selected pages, creates an account, adds a payment card, creates a first server or pays an invoice (with the amount paid). With each event we send the ad's click identifier, the IP address and browser type, a one-way code (SHA-256) made from our own random browser identifier or account number, and, when you are signed in, the account's email address hashed with SHA-256, never the email address itself. We load no advertising scripts or pixels from those platforms on our pages.

Under California law (the CCPA, as amended by the CPRA) and similar state laws, sending this to advertising platforms is "sharing" personal information for cross-context behavioral advertising (also called targeted advertising). You can opt out at any time on Your privacy choices (linked at the bottom of every page and in the portal); when you are signed in, the choice also applies to your account. We treat a Global Privacy Control signal from your browser as the same opt-out. We never send events for accounts that have opted out.

We also use these records ourselves, on our own servers, to understand how people find and use our website and portal: which pages are visited, which sites and campaigns visitors come from, and how many go on to create an account or become customers. For this we count browsers by a one-way code made from the nx_aid identifier, never by name or email address. No analytics provider receives this information. When you opt out or your browser sends Global Privacy Control, your visits are not recorded at all.

With each visit we record the kind of device (computer, phone or tablet), the browser and operating system and their versions, read from the user agent your browser sends; the first language your browser asks for; and the size class of your screen, never its exact size. We also look up your approximate location (country, region and city, with the city's map coordinates) in a geolocation database kept on our own servers, so your IP address is never sent to a geolocation service. The database is DB-IP's IP to City Lite. The location, language and screen size are not sent to advertising platforms.

5. Cookies

We use only first-party cookies, set on nextifynow.com:

  • Sign-in (on id.nextifynow.com): keep you signed in; they end with your session.
  • nx_ref (30 days): the invite code from a referral link.
  • nx_attr (30 days): ad click identifiers and campaign parameters, so a later sign-up can be credited to the ad; cleared once your account has them.
  • nx_aid (1 year): a random identifier for your browser, used to count page views without knowing who you are.
  • _fbp and _fbc (90 days): identifiers in Meta's format that our servers send to Meta for ad measurement; not set or used after you opt out.
  • nx_optout (1 year): remembers that you opted out.

You can delete cookies in your browser at any time; the portal needs the sign-in cookies to work.

6. How long we keep it

  • Account information: while your account exists, and for up to 90 days after it is closed.
  • Billing records and invoices: 7 years, as tax and accounting law requires.
  • Server and security logs: up to 90 days, unless needed longer to investigate abuse or a security incident.
  • Advertising and site-usage events: the IP address, the full user agent and click identifiers for 30 days; the events, with the approximate location, device type, browser, operating system, language and screen size class recorded with them, and the record of what was sent to each platform for 90 days. For each account, the channel or campaign it came from when it signed up is kept while the account exists; the location and device details of its latest visit to the portal are kept for 30 days.
  • Customer Content: as the Terms of Service describe.

7. Your rights

Depending on where you live (including California, New Jersey and other states with privacy laws), you may have the right to: know what personal information we have about you and get a copy of it; correct it; delete it; opt out of its "sale" or "sharing" for targeted advertising (section 4); and not be treated differently for using these rights. We do not use sensitive personal information to infer characteristics about you, and we do not make decisions about you that have legal or similarly significant effects by automated means.

To make a request, use the Contact page or email support@nextifynow.com, or write to the address below. We will verify your request by confirming it from the email address on your account (or by other reasonable means if you have no account) and answer within 45 days. An authorized agent may make a request for you with your signed permission. If we decline your request, you may appeal by replying to our answer; we will respond to an appeal within 45 days, and if you are not satisfied you may contact your state attorney general.

8. Security

We protect personal information with encryption in transit (TLS), access controls, secrets held in a dedicated secrets manager, and logging of administrative actions. No system is completely secure; if a breach affects your personal information we will tell you as the law requires.

9. Where we process it

We operate in the United States and store personal information there, in our own equipment in Fresno, California, and with the service providers listed above. If you use the services from outside the United States, your information is transferred to and processed in the United States.

10. Children

The services are not directed to anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

11. Changes

We will publish any change to this Policy on this page with its effective date, and tell account holders by email or in the portal before a material change takes effect.

12. Contact

Nexus Projects AI Corp (a Delaware corporation), 191 West Shaw Avenue, Suite 201, Fresno, CA 93704, United States. Privacy questions and requests: the Contact page or support@nextifynow.com.