Privacy Notice

Vionex Al is operated by Diyar Osman Ruvanas, who is the data controller for the personal data described here. You can reach us at support@nexal.app.

• Account data (email address, name and avatar if you sign in with Google, login credentials) — to create and secure your account. Legal basis: performance of our contract with you.
• Conversation content (your messages, answers, saved memories) — to provide the assistant and your chat history. Legal basis: performance of contract.
• Files you upload (documents and images, and the text extracted from them) — to answer questions grounded in your own material. Legal basis: performance of contract.
• Usage and technical data (message counts, request logs, device identifiers, IP address) — to enforce free-usage limits, prevent abuse and fraud, keep the Service secure and diagnose faults. Legal basis: legitimate interests.
• Support messages — to answer your enquiries. Legal basis: legitimate interests.
• Purchase records (transaction reference, amount, currency, status) — to grant and verify lifetime access and to keep accounting records. Legal basis: performance of contract and legal obligation.

We do not collect or store your card details. Payment data is collected directly by Paddle as Merchant of Record.

• Service providers / subprocessors — hosting, database and AI model providers that process requests on our instructions.
• Paddle.com — our Merchant of Record, for the sale of lifetime access, payments, invoicing and tax compliance.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where required by law.

We do not sell your personal data. Where data is transferred outside the UK/EEA, we rely on adequacy decisions or Standard Contractual Clauses as appropriate.

We keep account, conversation and document data for as long as your account exists. If you delete your account, that content is deleted, except purchase and transaction records which we retain for as long as required for accounting and tax purposes. Anonymised usage-limit records are kept for up to 12 months, then deleted.

Subject to the law in your country, you may request access to your data, correction, erasure, restriction of processing, portability, and object to processing based on legitimate interests. Where we rely on consent, you may withdraw it at any time. You can delete your account and content yourself from your account page, or email support@nexal.app. We respond within one month. If you are in the UK/EEA you may also complain to your local supervisory authority.

We apply appropriate technical and organisational measures, including encryption in transit, encryption at rest, row-level access controls so each account can only read its own data, and least-privilege access to production systems.

We use only essential cookies and browser storage: keeping you signed in, remembering your free-message allowance, and enabling the checkout. We do not use advertising or cross-site tracking cookies. You can clear this storage in your browser settings, but parts of the Service will stop working.