Plain-English data policy. What we keep, and why.

This policy explains how Nexural collects, uses, and shares personal information when you visit nexural.io, join the waitlist or newsletter, create an account, subscribe, use the AI assistant, or link Discord. Nexural is operated by Sage Ideas LLC, a Florida limited liability company.

The controller of your personal information is Sage Ideas LLC, 1672 Alden Rd #083, Orlando, FL 32803, USA. Contact us about privacy at privacy@nexural.io.

Waitlist and newsletter

• Email address and, if you give it, your first name.
• The plan you said you’re interested in.
• Where you came from: source page and campaign tags (UTM parameters).
• Your referral code, the referral link that brought you (if any), and referrals credited to you.
• When you signed up, when you confirmed your email, and your consent status.

Account

• Email, name, username, a hashed password (we never store the password itself), and when you accepted our Terms.
• If you sign in with Google or Discord: the provider account ID, email, name, and profile picture that provider shares.
• A session cookie that keeps you logged in, and a hashed copy of its token on our side.
• A security log of sign-in and sign-up attempts, including the email used, whether it succeeded, and the IP address.

Email activity

• Delivery, open, click, bounce, and complaint events reported by our email provider, including the link you clicked. The event data our provider sends can include an IP address and browser user agent.

Billing

• Stripe customer and subscription IDs and your plan status. Card details are collected and stored by Stripe; we never see your full card number.

Discord

• If you link Discord to your account, we request the identify scope and store your Discord user ID and username so we can match your membership and roles.

AI assistant

• Logged-in chats: your messages and the replies are saved to your account.
• Public chat on the website: the conversation and the page you were on are saved so we can prevent abuse and improve answers. We do not store your IP address; for abuse prevention we keep only a one-way, salted hash of it. If you choose to give your email in chat, we save it too.
• AI chat messages (logged-in and public) are deleted after 30 days.
• In both cases, your messages are sent to our AI provider to generate the reply (see “Who processes it”).

What you enter as a member

• Comments, trade reviews, posts, notes, reactions, and settings you create, plus any data you entered in features we have since retired.
• Web push subscriptions if you turn on browser notifications.

Broker connections

• Nexural does not store brokerage credentials or broker data. Broker syncing (through SnapTrade) was switched off on September 29, 2026, and existing connection data has been deleted.
• The older option to paste broker API keys is switched off, and we do not store broker API keys. Any future broker connection for Automation will be described here before it launches.

Analytics and logs

• Google Analytics 4, Vercel Analytics, Vercel Speed Insights, and (if enabled) Mixpanel — only after you accept analytics cookies. Google’s tag loads with consent mode set to “denied,” so no analytics cookies are set before you accept.
• Standard hosting and security logs (IP address, browser, pages requested, errors) kept by our hosting provider, and, if enabled, error reports sent to Sentry.

• Run the service — your account, the waitlist order, alerts, and AI replies.
• Email you — confirmations, waitlist and account notices, and the newsletter you signed up for. Every marketing email has an unsubscribe link.
• Billing — charge subscriptions and keep required records.
• Security — rate-limit abuse, detect fraud and fake referrals, and investigate incidents.
• Improve the site — aggregate analytics, if you allow them.
• Legal — comply with the law and respond to valid legal requests.

Where EU/UK-style law applies, we rely on performing our contract with you, your consent (newsletter, analytics cookies), our legitimate interests (security, improving the service), and legal obligations.

These providers process personal information for us to run the service:

• Supabase — database.
• Vercel — hosting, logs, and (with consent) Vercel Analytics and Speed Insights.
• Stripe — payments.
• Resend — email delivery and email activity events.
• Google — Google Analytics (with consent) and Google sign-in if you use it.
• DeepSeek — the AI provider that generates AI assistant replies. DeepSeek is based in China; the messages you send to the assistant are processed by it. Please don’t put sensitive personal or financial information in chat.
• Discord — our community and Discord sign-in / account linking.
• Mixpanel and Sentry — only if enabled; product analytics (with consent) and error reports.

We don’t share personal information with anyone else except to comply with the law, to protect the rights and safety of our members and the public, in a sale or reorganization of our business, or with your consent.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are used in the California Consumer Privacy Act (CCPA/CPRA). We don’t run advertising trackers.

If your browser sends a Global Privacy Control (GPC) signal, we treat it as an opt-out and keep analytics off, even if you previously accepted analytics cookies.

• Needed to work — the login session cookie (nexural_session), short-lived security cookies for sign-in and Discord linking, and small preference cookies (language, display density, referral or plan you arrived with).
• Analytics — Google Analytics and, if enabled, Mixpanel cookies, set only after you choose “Accept all” in the cookie banner. You can change your choice by clearing your browser’s site data for nexural.io.

• Account data and member content — while your account exists. When you delete your account we remove it from the live service and permanently delete it after a short holding period, except what we must keep by law.
• Waitlist and newsletter — until you unsubscribe or ask us to delete it; we may keep a record of your unsubscribe so we don’t email you again.
• Billing records — as long as tax and accounting law requires.
• AI chat messages — deleted after 30 days.
• Security logs and email events — as long as needed for security and support, then deleted.

Wherever you live, you can ask us to:

• Access the personal information we hold about you.
• Delete it. You can also delete your account from your account settings.
• Correct anything inaccurate.
• Export a copy in a portable format.
• Stop marketing email — use the unsubscribe link in any email.

We use HTTPS, hashed passwords, and access controls, and our providers encrypt data at rest. No system is perfectly secure. If a breach affects your personal information, we will notify you as the law requires.

We are based in the United States, and our providers process data in the US and other countries — including China, for AI assistant messages sent to DeepSeek. Those countries may not have the same data-protection laws as yours. By using the service, you understand your information will be processed in those countries.

Nexural is not for anyone under 18, and we do not knowingly collect personal information from children. If you believe we have, email privacy@nexural.io and we will delete it.

We may update this policy. We will change the version and date at the top of this page, and for material changes we will email account holders before they take effect.

Email privacy@nexural.io or write to Sage Ideas LLC, 1672 Alden Rd #083, Orlando, FL 32803, USA. See also our Terms and Disclaimer.