Effective 20 August 2026
Privacy policy
This notice explains how Nexarch, Ireland, handles personal data when you use Nexarch. Contact nexarchapp@outlook.com about privacy or data-protection requests.
Data we process
Account and profile details such as email, name, country, mobile number and timezone; workspace information you choose to enter, including businesses, links, notes, tasks, goals, learning and job applications; security and service data such as authentication records, IP-derived country, website-check results and limited operational logs; and appearance preferences or encrypted development-key vaults stored on your device.
Why and legal basis
We process account and workspace data to provide the service you request and perform our contract with you. We process limited security, fraud-prevention, reliability and diagnostic information for our legitimate interests in operating and protecting Nexarch. Optional Google Ads measurement and advertising personalisation are used only with your consent. Nexarch does not make automated decisions with legal or similarly significant effects.
Recipients and international transfers
Service providers may process data only to operate Nexarch, including Supabase for authentication and database hosting and Vercel for frontend hosting and protected server-side routes. Their hosting location and support operations may involve transfers outside the EEA. Appropriate safeguards, such as adequacy decisions or approved contractual protections, must apply under the relevant processor agreement.
Cookies and local device storage
Nexarch uses authentication cookies and local storage needed for login, security, appearance preferences and encrypted local vaults. These are necessary to provide features you request. With your permission, we also use Google Ads measurement to understand whether advertising leads to sign-ups. Optional advertising measurement remains disabled until you allow it, and you can decline it without affecting use of the website.
Retention
Workspace data is retained while your account is active or until you delete it. Account deletion removes active account and workspace records, subject to limited processor backup cycles and records that must be retained to meet legal obligations or establish legal claims. Security and operational logs are retained only for the shortest period needed for security and service reliability under documented provider schedules.
Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction, portability, or object to processing. You can export or delete your account from Settings. You may also contact us, and we normally respond within one month after verifying identity. You can complain to Ireland’s Data Protection Commission at dataprotection.ie.
Security and children
We use access controls, row-level database security, encryption in transit, secure authentication, input validation and monitoring. No system can guarantee absolute security. Nexarch is not intended for children under 16, and we do not knowingly collect their data.
Changes
We will update this notice when processing changes materially and provide appropriate notice before using personal data for a new incompatible purpose.