Privacy Policy

1. Who we are

Nexis ("Nexis", "we", "us") is an independent product built and operated by Ajay Dattatray, based in Shivamogga, Karnataka, India, trading as Ekam Space. We provide an AI-powered productivity workspace covering voice notes, meeting transcription, task management, and team collaboration. It's available at our web app and through integrations with platforms like Slack and Google Meet.

For the purposes of GDPR, the data controller is Ajay Dattatray (Ekam Space), reachable at nexis.support@ekamspace.com.

2. Information we collect

2.1 Information you give us directly

• Account details: name, email, profile photo, language preference.
• Voice recordings: audio you record in the app.
• Meeting recordings: audio captured by Nexis Notetaker (our bot) when you invite it to a Google Meet, Zoom, or Microsoft Teams call. Other participants are notified by the bot's name and avatar that the meeting is being recorded. You are responsible for getting any additional consent your jurisdiction requires.
• Tasks, people, messages: content you create inside the app.
• Payment information: processed by our payments provider. We never see your card number.

2.2 Information from integrations

• Slack: when you connect Slack, we receive your workspace ID, authorized channel list, and the tokens needed to post messages on your behalf. We do not read messages your team writes. We only post the items you explicitly trigger (meeting summaries, reminders, follow-ups).
• Google Meet, Zoom, Microsoft Teams: only data the bot captures during sessions you initiate.

2.3 Information we collect automatically

• Usage analytics: page views, feature usage, error traces. We do not sell or share these to advertisers.
• Server logs: IP, user agent, request paths, for security and debugging. Retained 30 days.

3. How we use your data

• To provide the core service: transcribing audio, extracting tasks, generating Minutes of Meeting.
• To deliver reminders and notifications you've enabled.
• To enforce plan limits, billing, and abuse prevention.
• To improve the product through aggregate, anonymized usage analytics.

We never train AI models on your content. Transcripts and tasks are processed by third-party AI providers under their zero-retention enterprise agreements. See §5 for the list.

4. Where your data lives

• Recordings (audio): stored in our encrypted object storage, access keys scoped per workspace.
• Transcripts, tasks, account data: stored in our encrypted database, encrypted at rest and in transit.
• Backups: daily automatic backups, retained 30 days, encrypted.

5. Third-party processors

We use a short list of vetted vendors. Each is bound by a Data Processing Agreement (DPA) and limits how they handle your data. GDPR requires us to disclose each one by name.

• Supabase: authentication.
• AWS and Cloudflare: hosting and storage.
• OpenAI: task extraction and Minutes of Meeting generation. Zero-retention API enabled. OpenAI does not store inputs and does not train on them.
• Soniox: audio transcription. Zero-retention API enabled.
• Stripe: payments.
• PostHog: product analytics. EU instance, no personally identifiable information sent.
• Resend: transactional email.

6. Sharing your data

We do not sell your data. We share it only with:

• The processors above, strictly to provide the service.
• Authorities, only when legally compelled and after exhausting our options to push back.
• Acquirers, if Nexis is acquired, in which case the same protections survive the transfer.

7. Your rights

You have the right to access, export, correct, and delete your data. Under GDPR and CCPA you can also restrict processing and object to certain uses. Self-serve options:

• Export: Settings, Data & privacy, Export my data (JSON download).
• Correct: edit your profile and content in-app.
• Delete: Settings, Data & privacy, Delete my account.

For requests we can't fulfill in-app, email nexis.support@ekamspace.com. We respond within 30 days.

8. Data deletion

You can delete your account at any time from Settings, Data & privacy. Here's exactly what happens:

• Immediately: your account is suspended. Nobody can access your content.
• Within 14 days: hard delete of all rows tied to your account, including tasks, people, transcripts, recordings, sessions, and audit logs.
• Backups: rolling 30-day retention. Backups are encrypted and not restored. They age out automatically.

If you connected Slack and want only that integration removed (without deleting your Nexis account), go to Settings, Integrations, Slack, Disconnect. We revoke our token and delete the workspace mapping. You can also revoke the install from Slack's own app directory at any time. We treat that as an immediate uninstall signal and purge the corresponding rows within 24 hours.

9. Children

Nexis is not for users under 16. We don't knowingly collect data from children. If you believe a child has signed up, email nexis.support@ekamspace.com and we'll delete the account.

10. International transfers

Our infrastructure is in the US and uses Cloudflare's global edge network. For EU users we use Standard Contractual Clauses with our processors. Enterprise customers can request data residency in EU or Asia-Pacific.

11. Changes to this policy

When we make material changes, we email account owners at least 14 days before the change takes effect and post a banner in-app. The "Last updated" date at the top of this page always reflects the current version.

12. Contact

Email: nexis.support@ekamspace.com
Support: /support
Postal address: provided on request.