This policy explains what data Nexora collects when you use our IDE extension, our CLI, our website and our dashboard (together, the « Service »), why we collect it, and the choices available to you. The Service is operated by Kemzang Teumena Stephane Bryan, trading as Nexora, a sole trader established in Cameroon.
1. Data we collect
- Account: email address, display name, preferred language.
- Subscription & billing: plan subscribed to, payment history (handled by Paddle, see section 5).
- Use of the Service: volume of tokens consumed per request, AI model used and timestamp — needed to compute your quota and to bill you. The content of your conversations and your code is transmitted to the AI models to generate a response, but is not retained by Nexora beyond what is necessary to operate the Service.
- Extension preferences: settings saved in the IDE extension (preferred model, and the like).
- API keys: if you generate API keys from the dashboard to authenticate the extension or the CLI.
2. Purposes
We use this data to: provide and maintain the Service, authenticate your account, compute your credit consumption and enforce your plan limits, process payments, keep the Service secure (rate limiting, abuse detection), and respond to your support requests.
3. Payment
Payments are processed by our provider Paddle, acting as Merchant of Record, which handles your card details directly along with applicable VAT and taxes. Nexora has no access to your full card number and does not store it on its servers.
5. Third-party providers
We rely on the following technical providers to operate the Service:
Supabase
Database hosting, authentication and storage of the user account.
Paddle
Merchant of Record: handles card payments, international VAT/taxes and invoicing. Nexora does not store your card details.
Resend
Sending transactional emails (payment confirmation, account notifications).
Upstash
Technical cache used for rate limiting (abuse prevention) and quota consistency.
PostHog
Anonymous product analytics from the IDE extension, sent only if you enable telemetry. Identified by an editor-generated machine identifier, never by your name or email. Session recording and automatic capture are disabled.
Depending on the AI model or models your request calls on (DeepSeek, Gemini or Claude), the content needed to generate the response is transmitted to the corresponding model provider.
6. Data retention
Your account and usage data are kept for as long as your account is active. If you request deletion of your account, we delete or anonymise your personal data within a reasonable period, subject to any legal retention obligations (notably accounting ones) that may apply to certain billing records.
7. Security
Exchanges with the Service are encrypted in transit (TLS). Access to your account is protected by Supabase's authentication mechanisms, and access to your data by our team is limited to what is necessary to operate and secure the Service.
8. Your rights
Whatever your country of residence, you can contact us to request access to, correction of or deletion of your personal data, or to obtain an export of your account data. To exercise these rights, write to us at contact@nexoracoding.com.
9. Minors
The Service is not directed at people under 16. We do not knowingly collect data concerning minors under 16.
10. Changes
This policy may be updated to reflect changes in the Service or in applicable regulation. The last-updated date at the top of this page reflects the version in force.
11. Contact
For any question about this policy or your personal data, contact us at contact@nexoracoding.com or visit our Contact.