1. Who We Are
Nexframe AI ("we", "us", "our") runs nexframeai.io, a website with free guides, workflows, resources, tools, a newsletter and a store for digital products. This policy explains what personal information we collect on nexframeai.io, why we collect it, who helps us process it, how long we keep it, and the choices and rights you have.
Nexframe AI also runs Nexframe Resume and Nexframe Opportunities. They are separate websites with their own privacy policies, which explain what each of them does with your data:
- Nexframe Resume: resume.nexframeai.io/privacy
- Nexframe Opportunities: opportunities.nexframeai.io/privacy
Nexframe AI and Nexframe Resume use the same "Sign in with Google" setup, so section 2 below applies to both. For any question about this policy or your data, email us at hello@nexframeai.io.
2. Signing in with Google
You can create a Nexframe AI account, or sign in to Nexframe Resume, with your Google account. This section explains exactly what that involves.
What we ask Google for
We request only the basic sign in permissions: openid, email and profile. Google shows you these on its consent screen before you continue.
What we receive
- Your name, as it appears on your Google account.
- Your email address.
- Your profile picture, if you have one.
- Google's confirmation that your email address is verified.
- A unique ID that Google assigns to your account for our app, so we can recognise you the next time you sign in.
How we use it
We use this information only to create your account, sign you in and keep you signed in. Your name may also appear next to comments you choose to post (see section 3). We do not use it for anything else.
What we never see or access
- We never see or store your Google password. You enter it on Google's own page, not ours.
- We do not access your Gmail, Google Drive, Google Contacts, Calendar, Photos or any other Google data. Our sign in permissions do not allow it.
How we protect and share it
- We do not sell Google user data.
- We do not use Google user data for advertising, and we do not use it to build advertising profiles.
- We do not share Google user data with anyone, except the service providers who run the site for us (our database and sign in provider, Supabase, and our hosting provider, Cloudflare), or when the law requires it.
- We do not use Google user data to train artificial intelligence or machine learning models.
- No person at Nexframe AI reads your Google user data, except with your permission, for security reasons, or where the law requires it.
Nexframe AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Removing our access
You can disconnect Nexframe AI from your Google account at any time at myaccount.google.com/permissions. This stops us receiving anything new from Google. It does not delete the account you already have with us; to do that, follow section 8.
3. Information We Collect
Information you give us
- Account: your email address, and either a password (which our sign in provider stores only in scrambled, hashed form) or the Google details listed in section 2.
- Comments: when you comment on a guide or resource, we store your comment, the time you posted it and a link to your account. The display name shown next to it is your Google name or, if there is none, "Member". Comments are public once approved.
- Newsletter: your email address, your name if you give it, and when you confirmed your subscription.
- Contact form: your name, email address, subject and message.
- Nexframe Studio waitlist: your email address.
- Chat: if you message us through the chat window, the messages you send and any name or email address you choose to give.
Information collected automatically
- Request and security logs: like every website, our hosting provider receives your IP address, browser type and the page you asked for each time you load a page. Our sign in provider records sign in events with your IP address and browser details, to keep accounts secure.
- Form protection: to stop spam, when you send one of our forms we store a one way coded version (a hash) of your IP address for a short time and count how many forms it has sent in the last hour.
- Analytics: which pages you visit and what you do on them, such as using a tool, reading a guide, subscribing or clicking through to buy a product. Sections 5 and 6 explain the analytics services we use and what each one receives.
- Saved on your device only: our free tools and resource kits save what you type in your own browser so it is still there when you come back. This stays on your device and is not sent to us. The same goes for your theme choice and recent searches.
Information from third parties
- Google: the sign in details in section 2, if you choose to sign in with Google.
- Selar: our products are sold through Selar. When you buy, you leave our site and Selar handles the order and payment under its own privacy policy. We never receive your card or bank details. As the seller, we may see the name, email address and order details Selar shares with sellers, so we can deliver and support your purchase.
We do not use artificial intelligence services to process your personal information on nexframeai.io. Our prompt tools create text in your browser for you to copy into an AI tool of your choice.
4. How We Use Your Information
- To run your account: create it, sign you in and keep it secure. We rely on our contract with you to provide the service.
- To publish your comments after a moderator approves them. We rely on your choice to post them.
- To send the newsletter and the email that confirms your subscription. We rely on your consent, which you can withdraw with the unsubscribe link in every email.
- To answer your messages sent through the contact form or the chat window. We rely on our legitimate interest in replying to you.
- To tell you when Nexframe Studio opens, if you joined the waitlist. We rely on your consent.
- To protect the site from spam, abuse and attacks. We rely on our legitimate interest in keeping the site safe.
- To understand and improve the site through analytics, so we know which guides and tools help people. We rely on our legitimate interest in improving the site, and on your consent where the law requires it.
- To meet legal obligations, such as answering lawful requests from authorities.
We do not sell your personal information, and we do not use it for targeted advertising.
5. Service Providers
We use the following companies to run the site. Each one receives only what it needs for its job and is bound by its own terms to protect your data.
- Supabase (database and sign in): stores your account, Google sign in details, comments, newsletter subscription, contact messages, waitlist entry and sign in security logs.
- Cloudflare (hosting, content delivery, security and Web Analytics): handles every request to the site, including your IP address and browser details, and keeps short lived request logs. Its Web Analytics counts page views and load times without cookies and without storing your IP address.
- Resend (email delivery): receives your email address, and your name if you gave it, to send the subscription confirmation and the newsletter.
- Mixpanel (product analytics): receives page names and actions linked to a random device ID and, when you are signed in, to a coded ID made from your email on our server. It does not receive your email address, name, or anything you type into our tools, comments or forms, and it is told not to record your IP address or location.
- Google: provides Sign in with Google (section 2); Google Analytics, loaded through Google Tag Manager, which receives the pages you visit, device and browser details, and an approximate location worked out from your IP address; and Google Fonts, which receives your IP address and browser details when an interactive resource loads its fonts.
- Intercom (chat): runs the chat window, loaded through Google Tag Manager. It receives your IP address, browser and device details and the pages you visit, and, if you start a chat, your messages and any contact details you give.
- Selar (store checkout): handles orders and payments on its own site, as described in section 3.
We may also share information if the law requires it, to protect the rights and safety of our users or the public, or as part of a merger or sale of the business, in which case this policy would continue to apply to your data.
7. How Long We Keep Your Data
We keep personal information only for as long as we need it:
- Account and Google sign in details: until you delete your account.
- Comments: until you ask us to remove them or you delete your account.
- Newsletter: until you unsubscribe, when your record is deleted straight away. If you never confirm your subscription, we delete the unconfirmed address within 90 days.
- Contact and chat messages: for as long as we need to deal with your message, and no longer than 24 months.
- Studio waitlist: until we have told you that Nexframe Studio is open, or until you ask us to remove you.
- Form protection hashes: they stop counting after an hour and are cleared out regularly once they are a day old.
- Hosting request logs: a few days.
- Sign in security logs: for as long as needed to keep accounts secure, and no longer than 12 months.
- Google Analytics: no longer than 14 months.
- Mixpanel: no longer than 24 months. This data is linked only to coded IDs, not to your name or email.
When an account is deleted, we delete your account, your Google sign in details and your comments. If you ask, we also remove your newsletter subscription, contact and chat messages, and waitlist entry, and we delete the analytics profile linked to your coded ID. Copies in our database provider's backups are overwritten on their normal cycle, within 30 days. We may keep a minimal record where the law requires it, for example a record that you asked us to delete your data.
8. Deleting Your Account and Data
You can delete your Nexframe AI account and the data linked to it at any time:
- Email hello@nexframeai.io from the email address on your account, with the subject "Delete my account". If you cannot use that address, tell us which address the account uses and we will check it is yours before deleting anything.
- Tell us if you also want your newsletter subscription, contact or chat messages, or waitlist entry removed. If you say nothing, we remove everything we hold about you.
- We confirm by email once it is done, within 30 days of your request and usually much sooner.
Section 7 lists exactly what is deleted. To stop the newsletter on its own, use the unsubscribe link at the bottom of any newsletter email. To disconnect Google, visit myaccount.google.com/permissions and remove Nexframe AI.
Your Nexframe Resume account and CVs are held by Nexframe Resume. See its privacy policy to delete them, or email us and we will help.
9. Your Rights
Wherever you live, you can ask us to:
- Access the personal information we hold about you and get a copy.
- Correct information that is wrong or incomplete.
- Delete your information (see section 8).
- Export your information in a common, machine readable format.
- Object to or restrict how we use your information, including for analytics.
- Withdraw consent at any time, for example by unsubscribing from the newsletter. This does not affect anything we did before.
Email hello@nexframeai.io to use any of these rights. We reply within 30 days, and it is free. We may ask you to confirm your identity first.
Nigeria: if you are in Nigeria, you have these rights under the Nigeria Data Protection Act 2023, and you can complain to the Nigeria Data Protection Commission.
European Economic Area and United Kingdom: you have these rights under the GDPR and the UK GDPR, including the right to complain to your local data protection authority. The legal bases we rely on are listed in section 4.
California: you have the right to know, delete and correct your personal information under the CCPA, and we will not treat you differently for using these rights. We do not sell or share personal information for targeted advertising.
10. Security
We protect your data with encryption in transit (HTTPS) and at rest, row level security rules on our database so each person can reach only their own data, hashed passwords, spam protection on our forms, and access to personal data limited to the people who need it to run the site. No system is completely secure, but if a breach affects your data, we will tell you and the relevant authorities as the law requires.
11. Children
Nexframe AI is not meant for children. You must be at least 13 to create an account, or older where your local law sets a higher age, for example 16 in some European countries. In Nigeria, if you are under 18, you need permission from a parent or guardian. If you believe a child has given us personal information, email hello@nexframeai.io and we will delete it.
12. International Transfers
Our service providers may store and process your data in countries other than your own, including the United States and countries in the European Union. When data leaves Nigeria, the European Economic Area or the United Kingdom, we rely on our providers' legal safeguards, such as the European Commission's Standard Contractual Clauses, to protect it.
13. Links to Other Websites
Our site links to other websites, including Selar, our WhatsApp channel and community, and our social media pages. If you join our WhatsApp channel or community, WhatsApp handles your details under its own policy. We are not responsible for the privacy practices of other websites.
14. Changes to This Policy
We may update this policy when our practices change. We will post the new version here with a new "Last updated" date, and if a change is significant, we will tell signed in users or newsletter subscribers by email before it takes effect.
15. Contact Us
For any question about this policy or your data, or to use your rights, email hello@nexframeai.io. You can also reach us through our contact page.