Privacy Policy

1. Who we are

nexbi ("we", "us", "our") is an AI-driven venture studio and business incubator operated as a sole-proprietorship business at nexbi.io. Our contact email is contact@nexbi.io.

2. What data we collect

We collect only what we need to provide the service:

Account data: email address, and any profile information you provide on sign-up.
Engagement data: the text inputs, selections, and answers you provide during an engagement intake and approval steps.
Usage data: pages visited, features used, and timestamps — collected via anonymous analytics (no cross-site tracking).
Payment data: if you subscribe to a paid plan, payment is processed by Stripe. We store only the last 4 digits of your card and your Stripe customer ID — we never see or store your full card number.
Communication data: any emails or messages you send to us.

3. How we use your data

To provide, maintain, and improve the nexbi platform.
To run AI agent pipelines on your behalf and generate your engagement artifacts.
To send transactional emails (account confirmation, artifact ready, weekly Operate reports).
To respond to support requests.
To detect and prevent fraud or abuse.
To comply with legal obligations.

We do not sell your personal data. We do not use your engagement content to train third-party AI models.

4. Third parties we share data with

We use the following third-party processors to operate the platform:

Anthropic — AI model inference for agent pipeline steps. Your engagement inputs are sent to Anthropic's API. Anthropic's data policy applies.
OpenAI — Image generation for brand assets. Prompts are sent to OpenAI's API.
Vercel — Hosting and deployment infrastructure. Log data may be retained by Vercel.
Neon / PostgreSQL — Encrypted database hosting for your account and engagement data.
Cloudflare R2 — Encrypted artifact storage (generated files, brand kits, landing pages).
Stripe — Payment processing for paid subscriptions.
Resend — Transactional email delivery.
Langfuse — AI observability and cost tracking. Agent trace logs (tool calls, token counts) are stored with Langfuse.

5. Data retention

Free plan: account and engagement data is retained for 30 days after your last active session, then deleted. Paid plans: data is retained for the duration of your subscription and for 90 days after cancellation. You may request deletion at any time by emailing contact@nexbi.io.

6. Cookies and tracking

We use minimal cookies — strictly a session cookie to keep you logged in, and an anonymous analytics cookie to understand aggregate usage patterns (no cross-site tracking, no fingerprinting). We do not use advertising cookies or third-party tracking pixels.

7. Your rights

Depending on your jurisdiction, you have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Request deletion of your data ("right to be forgotten").
Restrict or object to certain processing.
Data portability (receive your data in a machine-readable format).

To exercise any of these rights, email us at contact@nexbi.io. We'll respond within 30 days.

8. Security

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Access to production systems is restricted to authorized personnel only. We log all access events. If we become aware of a breach affecting your data, we will notify you by email within 72 hours.

9. Children

nexbi is not directed at individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will delete it immediately.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified by email to registered users at least 14 days before they take effect. The effective date at the top of this page will always reflect the current version.

11. Contact

Privacy questions: contact@nexbi.io