Legal
Last updated: 7 June 2026
This Privacy Policy explains how Nexma, Inc. ("Nexma," "we," "us," or "our") collects, uses, discloses, and safeguards personal data when you use the Nexma platform, our websites, and related services (together, the "Services"). We are committed to handling your information responsibly and transparently.
This policy applies to personal data we process about visitors to our websites, users of the Services, and individuals who interact with us in a business capacity. Nexma, Inc. is the controller of personal data processed in connection with our own activities described here.
Where we process personal data on behalf of a customer as part of providing the Services, the customer is the controller and we act as a processor under that customer's instructions. In those cases, the customer's own privacy notice and our Data Processing Agreement govern that processing.
By using the Services, you acknowledge the practices described in this policy. If you do not agree with this policy, please do not use the Services.
We collect personal data from several sources, described below.
We collect information you give us when you use the Services or communicate with us, including:
We may receive information about you from third parties, including:
When you use the Services, we automatically collect certain technical information, including:
Because Nexma is a spatial intelligence platform, the Services may process spatial and project data you provide or generate, including:
When you use our AI features, we process data related to those interactions, including:
We use personal data to operate and improve the Services and to support our business, including to:
We do not use customer project data to make decisions about you without appropriate human involvement where such decisions would have legal or similarly significant effects.
For individuals in the European Economic Area (EEA) and the United Kingdom, we rely on the following legal bases under the GDPR and UK GDPR:
Where we rely on legitimate interests, you have the right to object, as described in your rights below.
We apply specific commitments to how data is handled in connection with our AI features.
We do not use customer content — including your project data, spatial data, and AI interaction data within the platform — to train foundation models for other customers without your instruction or consent.
We may use aggregated or de-identified data, and operational data that does not identify you, to evaluate and improve the quality and safety of the Services.
AI-generated outputs are produced to assist you and may be inaccurate or incomplete. You remain responsible for reviewing outputs before relying on them, and consequential decisions should involve appropriate human judgment.
We use third-party AI infrastructure providers to deliver certain AI features. These providers process data under contractual terms that restrict their use of it to providing services to us, and they are not permitted to use your content to train their general models.
Where you use voice features, audio inputs are processed to transcribe and act on your request. We do not retain voice recordings longer than necessary to provide the feature and meet our legal obligations.
We operate internationally, and your personal data may be processed in countries other than the one in which you are located, including the United States.
These countries may have data-protection laws that differ from those in your jurisdiction. Where we transfer personal data internationally, we put appropriate safeguards in place.
For transfers from the EEA, UK, and Switzerland, we rely on mechanisms such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, together with supplementary measures where appropriate.
You may contact us to obtain more information about the safeguards we use for international transfers.
We retain personal data only for as long as necessary for the purposes described in this policy, unless a longer period is required or permitted by law. The periods below are indicative and may vary based on legal and operational needs.
| Data category | Retention period |
|---|---|
| Account data | For the duration of your account, then deleted or anonymized. |
| Project and spatial data | For the duration of your account, subject to customer agreement and export. |
| AI interaction data | Retained for a limited period to provide and improve the feature, then deleted. |
| Log and security data | Typically up to 12 months, unless needed for security or legal reasons. |
| Marketing data | Until you opt out or after a period of inactivity. |
| Post-termination | Deleted or anonymized after a defined wind-down period, subject to legal holds. |
When data is no longer required, we delete or anonymize it using appropriate measures.
We implement technical and organizational measures designed to protect personal data, including:
No method of transmission or storage is completely secure. While we work to protect your data, we cannot guarantee its absolute security.
Depending on where you live, you may have rights over your personal data. We honor these rights as required by applicable law.
Regardless of location, you can generally ask us to:
To exercise these rights, contact us at legal@nexma.ai
If you are in the EEA or UK, you have the following rights:
You may lodge a complaint with your local data-protection authority, though we encourage you to contact us first so we can address your concerns.
If you are a California resident, you have the right to:
As noted above, we do not sell or share personal information as those terms are defined under California law.
We will verify your request using the information associated with your account before responding, and you may use an authorized agent where permitted.
If you are in Israel, you have rights under the Protection of Privacy Law, including:
Residents of other jurisdictions may have additional rights, including under:
Some browsers offer a "Do Not Track" signal. Because there is no common industry standard for interpreting these signals, we do not currently respond to them. You can manage cookies and tracking technologies through your browser settings and our cookie controls.
The Services may contain links to third-party websites and services that we do not operate. We are not responsible for their privacy practices, and we encourage you to review their privacy policies before providing them with personal data.
The Services are not directed to children under 13, and we do not knowingly collect personal data from them. If we learn that we have collected such data, we will delete it.
The Services are intended for business use by adults. We do not knowingly collect personal data from individuals under 18 outside of a business context, and minors should not use the Services without appropriate authorization.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements.
When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. We encourage you to review this policy periodically.
If you have questions about this Privacy Policy or wish to exercise your rights, you can reach us at:
By email: legal@nexma.ai
By mail: Nexma, Inc., Attn: Legal Department.