Privacy Policy

Nexalware ("Nexalware," "we," "us," or "our") builds infrastructure that connects physical devices to software and AI agents. This policy explains what information we collect when you use our website, dashboard, API, and connected devices (together, the "Service"), why we collect it, and the choices you have.

By using the Service, you agree to the collection and use of information as described here. If you don't agree, please don't use the Service.

Account information. When you create an account, we collect your name, email address, and either a password (stored as a salted hash, never in plain text) or an identifier from an OAuth provider you choose to sign in with.

Organization and team data. Information about the organizations you create or are invited to, including team member roles, invitations, and project structure.

Device and usage data. Information about the devices you register, the commands and rules you configure, and platform usage such as message volume, API calls, and device connection state. See Device and telemetry data below for detail specific to connected hardware.

Communications. If you contact support, join the waitlist, or otherwise email us, we keep a record of that correspondence to respond to you and improve the Service.

Technical data. Standard technical information such as IP address, browser type, and access timestamps, collected automatically when you use the website or API for security and diagnostic purposes.

• To provide, operate, and maintain the Service, including your dashboard, devices, and API access.
• To authenticate you and keep your account secure.
• To send account-related communications: verification emails, security alerts, and service notices.
• To respond to support requests and questions.
• To monitor and improve platform reliability, performance, and features.
• To detect, prevent, and address fraud, abuse, or security incidents.
• To comply with legal obligations.

We do not sell your personal information, and we do not use your device data to build advertising profiles.

If you choose to sign in with Google or GitHub instead of a password, that provider shares a limited set of information with us after you approve the connection: your name, email address, and a unique account identifier. We use this only to create or sign in to your Nexalware account. We never receive your Google or GitHub password, and we don't request access to your files, repositories, or other data held by that provider beyond basic profile information.

You can review or revoke Nexalware's access at any time from your Google Account permissions or GitHub's authorized OAuth Apps settings.

Nexalware is infrastructure for connecting physical devices, so the Service necessarily processes data from the devices you register:

• Device identity, configuration, and the commands and permissions you set up for it.
• Telemetry your device sends (state, sensor readings, and status) to the extent your device is configured to send it.
• Command and connection history, kept as an audit trail for security and troubleshooting.
• MQTT connection credentials, which are encrypted at rest (AES-256) and only ever decrypted to authenticate your device's connection or to show them back to you after you re-confirm your account password.

This data belongs to you and is scoped to your account. We don't access it except to operate the Service, investigate a security issue, or as you direct through support.

We use a small number of strictly necessary cookies to keep you signed in. Your session and refresh tokens are stored in secure, same-site cookies rather than in a way that's readable by other sites. We don't use third-party advertising or tracking cookies.

We share information only in these limited circumstances:

• Service providers who host our infrastructure or help us operate the Service (for example, cloud hosting and database providers), under agreements that limit their use of your data to providing that service.
• Identity providers (Google and GitHub), only as part of the sign-in flow you initiate, as described above.
• Legal and safety reasons, if required by law or necessary to protect the rights, property, or safety of Nexalware, our users, or the public.
• Business transfers, if Nexalware is involved in a merger, acquisition, or sale of assets, we'll notify you before your information becomes subject to a different privacy policy.

We use industry-standard safeguards to protect your data, including encryption of device credentials at rest, hashed passwords, role-based access controls within your organization, and audit logging of sensitive actions like credential access. No method of transmission or storage is 100% secure, but we work to protect your information and will notify you as required by law if a breach affects your data.

We retain your account and device data for as long as your account is active, or as needed to provide the Service. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we're required to retain it for legal, security, or legitimate business purposes (such as fraud prevention or dispute resolution).

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your account and associated data.
• Export your data in a portable format.
• Withdraw consent where processing is based on consent, such as marketing emails.

To exercise any of these rights, contact us using the details below. We'll respond within a reasonable timeframe.

The Service is not directed to children under 16, and we don't knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we'll delete it.

We may update this policy as the Service evolves. If we make material changes, we'll notify you by email or through the Service before the change takes effect. The "Effective date" at the top of this page reflects the most recent revision.

Questions about this policy or your data can be sent to future@nexalware.com.

Back to home