LEGAL
Privacy Policy
Last updated: March 15, 2026
Website: nexora-ai.org
1. Introduction
This Privacy Policy describes how NEXORA ("the Platform," "we," "our," or "us"), available at nexora-ai.org, collects, uses, stores, and protects your personal information when you use our services. By using NEXORA, you agree to the collection and use of information in accordance with this Privacy Policy.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- •Email address (used for authentication and email reminders).
- •Username (used for display purposes within the Platform).
- •Password (stored securely in hashed form via Supabase Auth — we never store plaintext passwords).
- •Account creation date.
2.2 YouTube Data
When you connect your YouTube channel via Google OAuth, we access and store:
- •Channel name and profile thumbnail.
- •Subscriber count, total views, and video count.
- •Video metadata (titles, publish dates, view counts, likes, comments).
- •Engagement rate calculations and performance metrics.
This data is accessed through the YouTube Data API v3 and YouTube Analytics API v2 with read-only permissions. NEXORA does not access, modify, or delete any content on your YouTube channel. We do not access your private YouTube messages, financial data, or Google account credentials beyond what is required for authentication.
2.3 AI Coach Conversations
When you use the AI Coach, we store:
- •Your chat messages and the AI responses.
- •Conversation history and metadata (creation date, last updated).
- •The platform context selected for each conversation (e.g., YouTube).
Conversation data is stored to provide continuity across sessions and to improve the quality of AI responses. You can delete individual conversations at any time from the AI Coach interface.
2.4 Scheduled Content
When you use the Content Scheduler, we store:
- •Post titles, descriptions, and notes.
- •Scheduled dates and times.
- •Platform and content type selections.
- •Notification preferences (email address and reminder timing).
2.5 Usage Data
We may automatically collect:
- •Pages visited and features used within the Platform.
- •Browser type and device information.
- •IP address (for security and abuse prevention).
- •Timestamps of interactions.
3. How We Use Your Information
3.1 YouTube Data (received via Google APIs)
Data received through Google APIs (YouTube Data API v3 and YouTube Analytics API v2) is used exclusively to:
- •Display your YouTube channel statistics and video performance metrics in the Analytics Dashboard.
- •Provide personalized AI coaching recommendations based on your channel data through the AI Coach feature.
- •Compare your channel performance against public competitor data you request.
YouTube data is not used for any other purpose. It is not used for advertising, analytics unrelated to your account, product development beyond your user-facing features, or any purpose other than providing and improving the features you directly interact with. This is in compliance with Google API Services User Data Policy, including the Limited Use requirements. Google Workspace API data is not used to develop, improve, or train generalized or non-personalized AI and/or ML models. When you use the AI Coach feature, your YouTube channel data (such as video titles, view counts, engagement metrics, and audience demographics) is sent to Groq, a third-party AI inference provider, solely to generate personalized coaching responses for you in real time. This data is not used by Groq or NEXORA to train, improve, or build any generalized or non-personalized AI/ML models. No Google user data is transferred to any third-party AI tool for purposes other than providing the user-facing AI Coach feature described above.
3.2 Non-Google Data
For data not received through Google APIs (such as your account information, AI Coach conversations, scheduled content, and usage data), we use this information to:
- •Authenticate your identity and manage your account.
- •Store and display your scheduled content and send email reminders (only if you opt in).
- •Generate content ideas based on your selected niche.
- •Detect, prevent, and address security issues and abuse.
- •Improve and develop new features for the Platform.
- •Communicate with you about service updates or changes.
We do not use your personal data for advertising purposes. We do not sell, rent, or trade your personal information to third parties.
4. Data Storage and Security
Your data is stored and secured using the following measures:
- •Authentication and database services are provided by Supabase, which uses industry-standard encryption and security practices.
- •Row-Level Security (RLS) policies are enforced in our database, ensuring users can only access their own data.
- •All data transmission between your browser and our servers is encrypted using HTTPS/TLS.
- •Passwords are hashed and salted — we never store or have access to your plaintext password.
- •The AI Coach implements three-layer prompt injection security (input detection, system prompt hardening, and output sanitization) to protect against malicious inputs.
- •API keys and sensitive credentials are stored as environment variables and are never exposed to the client.
5. Third-Party Services
NEXORA uses the following third-party services to operate. Each service has its own privacy policy governing how they handle data:
- •Google / YouTube APIs — For YouTube channel data access via OAuth 2.0. Subject to Google's Privacy Policy (https://policies.google.com/privacy) and Google API Services User Data Policy.
- •Supabase — For authentication, database, and user management. Subject to Supabase's Privacy Policy (https://supabase.com/privacy).
- •Groq — For AI language model processing (powers the AI Coach and Content Ideas). Subject to Groq's Privacy Policy.
- •Resend — For sending scheduled content reminder emails. Subject to Resend's Privacy Policy.
We only share the minimum data necessary with each third-party service to provide our features. We do not share your YouTube analytics data or AI conversation history with any third party for marketing or advertising purposes.
6. Google API Services User Data Policy Compliance
NEXORA's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements (https://developers.google.com/terms/api-services-user-data-policy). Specifically:
- •We only request access to the data necessary to provide our services (YouTube channel statistics and video analytics).
- •We do not use Google user data for serving advertisements.
- •We do not allow humans to read your Google user data unless we have your explicit consent, it is necessary for security purposes, or it is required by law.
- •We do not transfer Google user data to third parties except as necessary to provide our services, as required by law, or with your explicit consent.
- •You can revoke NEXORA's access to your Google data at any time via https://myaccount.google.com/permissions.
7. Data Retention
We retain your data as follows:
- •Account data — Retained for as long as your account is active. Deleted upon account deletion.
- •YouTube analytics data — Refreshed periodically and retained for as long as your YouTube account is connected. Deleted when you disconnect your YouTube account.
- •AI Coach conversations — Retained until you delete them manually or delete your account.
- •Scheduled content data — Retained until you delete individual posts or your account.
- •Email notification preferences — Retained until you disable notifications or delete your account.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- •Access — You can view your personal data through your account dashboard and settings.
- •Correction — You can update your account information at any time.
- •Deletion — You can delete your AI Coach conversations individually, disconnect your YouTube account to remove analytics data, or contact us to request full account deletion.
- •Revoke Consent — You can disconnect your YouTube account or disable email notifications at any time from the Settings page.
- •Data Portability — You can request a copy of your personal data by contacting us.
- •Object to Processing — You can contact us to object to specific processing activities.
To exercise any of these rights, contact us at the email addresses listed below or use the relevant controls within the Platform.
9. Cookies and Local Storage
NEXORA uses minimal browser storage:
- •Authentication tokens — Stored securely to keep you signed in (managed by Supabase Auth).
- •Theme preference — Your dark/light mode preference is stored in localStorage.
- •Session data — Temporary data necessary for the Platform to function.
We do not use third-party tracking cookies, advertising cookies, or analytics cookies.
10. Children's Privacy
NEXORA is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will promptly delete such information.
11. International Data Transfers
Your data may be processed in countries other than your country of residence through our third-party service providers (Supabase, Groq, Resend). These providers maintain appropriate safeguards for data protection. By using NEXORA, you consent to the transfer of your information to these providers.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will make reasonable efforts to notify you via email or through the Platform. We encourage you to review this Privacy Policy periodically.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, you can contact us: