Privacy Policy | Nexalino

Job Search Global (ABN: 79 980 749 050), operating as Nexalino (“we”, “us”, “our”), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Nexalino platform at nexalino.com and any associated subdomains (the “Service”).

1. Information We Collect

Account Information

When you create an account, we collect your email address and password (stored securely via our authentication provider). You may also provide a display name.

Site Content

When you create websites using our Service, we store the content you provide including business names, descriptions, page text, images you upload, and site configuration settings.

Form Submission Data

When visitors submit forms on websites built with Nexalino, we collect the data they provide (such as name, email, phone, and message content) on behalf of the site owner. IP addresses associated with form submissions are hashed for fraud prevention and are not stored in identifiable form.

Usage Data

We automatically collect information about how you interact with the Service, including pages visited, features used, and timestamps. This data helps us improve the Service.

Payment Information

Payment processing is handled entirely by Stripe. We do not store your credit card numbers, bank account details, or other financial information on our servers. We receive only a confirmation of payment status and subscription details from Stripe.

2. How We Use Your Information

To provide, maintain, and improve the Service
To process your transactions and manage your subscription
To generate and host websites on your behalf
To deliver form submissions and lead data to site owners
To send service-related communications (account verification, security alerts, billing notices)
To detect and prevent fraud, abuse, and security threats
To enforce our Terms of Service and rate limits
To respond to your support requests

3. Data Sharing & Third-Party Services

We share your information only with the following categories of service providers, solely to operate the Service:

Supabase (database and authentication hosting)
Stripe (payment processing and subscription management)
OpenAI / Anthropic / Google (AI-powered website content generation)
Upstash (rate limiting and caching infrastructure)
Unsplash (stock image search for website content)
Vercel (application hosting and domain management)
Google Analytics (website analytics and measurement)
Microsoft Ads UET (advertising attribution and remarketing measurement)

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Cookies

We use essential cookies and, where you consent, non-essential analytics and advertising measurement technologies.

Authentication cookies — managed by Supabase to maintain your login session
Preference cookies — stored in your browser's local storage (e.g., cookie consent preference, editor settings)
Analytics cookies/tags — used by Google Analytics to understand site usage and performance (consent-based)
Advertising measurement tags — used by Microsoft Ads UET for conversion attribution and remarketing audiences (consent-based)

For users in the EEA, United Kingdom, and Switzerland, our Microsoft Ads UET integration uses consent mode with a default denied state for ad storage and updates only after your consent choice.

You can accept or decline non-essential cookies through our cookie banner. You can also withdraw consent at any time by clearing site storage/cookies and making a new choice when prompted.

5. Your Rights

You have the right to:

Access — Request a copy of the personal data we hold about you
Correction — Request correction of inaccurate personal data
Deletion — Request deletion of your account and associated data through your account settings
Export — Request a copy of your data in a portable format
Withdraw consent — Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at support@nexalino.com.

6. Data Retention

We retain your account data for as long as your account is active. When you delete your account, we delete your personal data and site content within 30 days, except where we are required to retain it for legal or regulatory purposes.

Form submission data (leads) is retained until the site owner deletes it, or until the associated site or account is deleted.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

Encryption in transit (TLS/HTTPS) and at rest
Row-level security policies on all database tables
Rate limiting to prevent abuse
Secure authentication with password hashing
Regular security audits of our codebase

8. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information.

9. International Data Transfers

Your data may be processed and stored in countries outside of your country of residence, including Australia and the United States, where our service providers operate. We ensure appropriate safeguards are in place for such transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the “Last updated” date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: support@nexalino.com
Entity: Job Search Global (ABN: 79 980 749 050)