Privacy Policy

Effective date: April 19, 2025  ·  Last updated: April 19, 2025

1. Who We Are

NexWall LLC, a Wyoming limited liability company operating under the trade name NexWall Corp AI ("we," "us," or "our"), operates the NexWall Corp AI platform accessible at nexwallcorp.com. We are the data controller responsible for your personal information.

Contact: support@nexwallcorp.com

2. Information We Collect

2.1 Information You Provide

• Account data: name, email address, and password (hashed) when you register
• Profile information: business name, brand DNA details you input
• Payment information: processed by Stripe — we do not store full card numbers
• Content you create: campaign copy, uploaded images, brand assets
• Communications: messages you send us via email or support channels

2.2 Information Collected Automatically

• Usage data: features used, pages visited, time spent, actions performed
• Device data: browser type, operating system, IP address, device identifiers
• Log data: server logs including timestamps and error reports
• Cookies: session identifiers and preference cookies (see Section 8)

2.3 Information from Third Parties

• Google OAuth: name, email, and profile photo when you sign in with Google
• Meta (Facebook): account name, ad account IDs, and campaign data when you connect your Meta account
• Advertising platforms: performance metrics and insights from connected ad accounts

3. How We Use Your Information

Purpose	Legal Basis
Provide and maintain the Service	Contract performance
Process payments and manage subscriptions	Contract performance
Send transactional emails (verification, receipts)	Contract performance
Send product updates and marketing communications	Legitimate interest / Consent
Improve and develop the Service using AI	Legitimate interest
Detect and prevent fraud and abuse	Legitimate interest / Legal obligation
Comply with legal requirements	Legal obligation
Customer support	Legitimate interest

4. How We Share Your Information

We do not sell your personal information. We may share information with:

• Service providers: Neon (database), Railway (hosting), Vercel (CDN), Cloudinary (image storage), Resend (email), Stripe (payments) — each subject to appropriate data processing agreements
• Advertising platforms: Meta, Google, TikTok — solely to execute campaigns you create and authorize
• Legal authorities: when required by law, court order, or to protect our rights
• Business transfers: in connection with a merger, acquisition, or sale of assets, with prior notice to you

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. After account deletion:

• Account data is deleted within 30 days
• Campaign data and uploaded images are deleted within 90 days
• Billing records are retained for 7 years as required by law
• Anonymized, aggregated data may be retained indefinitely for analytics

6. Your Rights

Depending on your location, you may have the following rights:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request deletion of your personal data ("right to be forgotten")
• Portability: receive your data in a machine-readable format
• Objection: object to processing based on legitimate interest
• Opt-out of marketing: unsubscribe from marketing emails at any time
• California residents (CCPA): right to know, delete, and opt-out of sale of personal information

To exercise any of these rights, contact us at support@nexwallcorp.com. We will respond within 30 days.

7. Data Security

We implement industry-standard security measures including:

• All data transmitted over HTTPS/TLS encryption
• Passwords hashed using bcrypt
• JWT tokens with expiration for session management
• Database connections via SSL with certificate verification
• Regular security reviews of our infrastructure

No method of transmission or storage is 100% secure. If you discover a security vulnerability, please report it to support@nexwallcorp.com.

8. Cookies and Tracking

We use the following types of storage:

• localStorage: stores your authentication token, language preference, and app state (never sent to third parties)
• Session cookies: used for OAuth flows and CSRF protection

We do not currently use third-party advertising cookies or cross-site tracking cookies. You can clear localStorage and cookies at any time through your browser settings.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us personal information, we will delete it promptly.

10. International Data Transfers

NexWall Corp AI is operated primarily in the United States. If you are accessing the Service from outside the US, your information will be transferred to and processed in the US. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

11. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the Service at least 14 days before the changes take effect. Your continued use of the Service constitutes acceptance of the updated policy.

13. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or your personal data:

NexWall LLC (operating as NexWall Corp AI)
30 N Gould St Ste N, Sheridan, WY 82801, United States
Phone: +1 (307) 533-6294
Email: support@nexwallcorp.com
Website: nexwallcorp.com