This is DRAFT document. Last Updated: December 6, 2025
Nexss.com ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI assessment platform (the "Service").
1. Information We Collect
We collect information in the following ways:
- Information You Provide to Us:
- Account Information: When you register, we collect your name, email address, and password.
- Payment Information: When you purchase credits, our payment processor (Stripe) collects your payment information. We do not store your full credit card number on our servers.
- User Input: We collect the topics, prompts, and other data you provide when generating tests.
- Information We Collect Automatically:
- Usage Data: We track your activity, including tests taken, scores, questions generated, and credits used.
- Log and Device Data: We collect log data, including IP address, browser type, and operating system, to ensure the security and performance of our Service.
2. How We Use Your Information
We use your information for the following purposes:
- To Provide and Maintain the Service: To create and manage your account, process transactions, and generate assessments.
- To Improve the Service: We may use anonymized User Input and Usage Data to train our AI models and enhance the quality and accuracy of our platform. We will never use your personal information for model training without explicit consent.
- To Communicate With You: To send you transactional emails, service updates, and marketing communications (from which you can opt-out).
- For Security and Fraud Prevention: To protect our Service, our users, and to comply with legal obligations.
3. How We Share Your Information
We do not sell your personal data. We may share your information with:
- Service Providers: We share information with third-party vendors who perform services on our behalf, such as payment processing (Stripe) and cloud hosting (e.g., AWS, Vultr).
- AI Service Providers: Prompts and User Input are sent to our AI providers (e.g., OpenAI, DeepSeek) to generate content. These providers are bound by their own privacy and data handling policies. We do not send personally identifiable information with these requests.
- Legal Requirements: We may disclose your information if required by law or in response to valid requests by public authorities.
4. Data Security
We implement a variety of security measures to maintain the safety of your personal information. However, no electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
5. Your Data Rights
Depending on your location, you may have the following rights regarding your personal information:
- The right to access, update, or delete the information we have on you.
- The right of rectification.
- The right to object to processing.
- The right to data portability.
To exercise these rights, please contact us.
6. Children's Privacy
Our Service is not intended for use by children under the age of 13. We do not knowingly collect personally identifiable information from children under 13.
7. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date.
8. Contact Us
If you have any questions about this Privacy Policy, please contact us.