Privacy Policy — Nexa Ed

1. Who we are

Nexa Ed is a product of Nexium Labs ( nexiumlabs.io ). We operate the Nexa Ed platform at nexa-ed.com and all associated subdomains. References to "we", "us", or "our" mean Nexium Labs.

2. Data we collect

We collect the following categories of data:

Account data — name, email address, school name, and role, collected at sign-up via Clerk.
Student records — academic results, attendance, and profile data uploaded by your school. This data is tenant-scoped and isolated.
Uploaded files — PDF result sheets and documents submitted for AI processing. Files are stored via UploadThing and processed by Google Document AI.
Payment data — transaction records and billing authorisations. Card details are tokenised and held by Paystack; we never store raw card numbers.
Usage data — API call logs, rate-limit counters, and error traces used to operate and improve the service.

3. How we use your data

To provide, operate, and improve the Nexa Ed platform.
To process uploaded documents through our AI pipeline and return structured results.
To bill for services used and manage subscription state.
To send transactional emails (billing receipts, onboarding, alerts).
To investigate and respond to security incidents or support requests.

We do not sell your data to third parties. We do not use student data for any purpose other than delivering the services you have configured.

4. Data retention

Tenant account data is retained for the lifetime of the account. Uploaded files and processed results are retained for 12 months after upload unless you delete them earlier. Billing records are retained for 7 years for legal and accounting purposes. You may request deletion of your account and associated data at any time by emailing [email protected].

5. Sub-processors

We use the following sub-processors to deliver the service. Each is bound by a data processing agreement:

Convex Inc. — reactive database and backend hosting
Neon Inc. — PostgreSQL database hosting
Clerk Inc. — user identity and authentication
Paystack — payment processing
Google Cloud — Document AI OCR processing
Upstash Inc. — rate limiting and async queuing
UploadThing / Ping Labs — file storage
Resend — transactional email delivery
Vercel Inc. — web application hosting

6. Cookies

We use session cookies set by Clerk for authentication. We do not use advertising cookies or third-party tracking pixels. Analytics, if enabled, are collected in an aggregated, anonymised form.

7. Your rights

You have the right to access, correct, or delete personal data we hold about you. To exercise any of these rights, email [email protected] from the address associated with your account.

8. Changes to this policy

We may update this policy from time to time. When we make material changes, we will notify tenants via email at least 14 days before the changes take effect. Continued use of the platform after that date constitutes acceptance.

9. Contact

For privacy-related questions, email [email protected].

2. Data we collect

We collect the following categories of data:

Account data — name, email address, school name, and role, collected at sign-up via Clerk.

Student records — academic results, attendance, and profile data uploaded by your school. This data is tenant-scoped and isolated.

Uploaded files — PDF result sheets and documents submitted for AI processing. Files are stored via UploadThing and processed by Google Document AI.

Payment data — transaction records and billing authorisations. Card details are tokenised and held by Paystack; we never store raw card numbers.

Usage data — API call logs, rate-limit counters, and error traces used to operate and improve the service.

3. How we use your data

To provide, operate, and improve the Nexa Ed platform.

To process uploaded documents through our AI pipeline and return structured results.

To bill for services used and manage subscription state.

To send transactional emails (billing receipts, onboarding, alerts).

To investigate and respond to security incidents or support requests.

We do not sell your data to third parties. We do not use student data for any purpose other than delivering the services you have configured.

4. Data retention

5. Sub-processors

We use the following sub-processors to deliver the service. Each is bound by a data processing agreement:

Convex Inc. — reactive database and backend hosting

Neon Inc. — PostgreSQL database hosting

Clerk Inc. — user identity and authentication

Paystack — payment processing

Google Cloud — Document AI OCR processing

Upstash Inc. — rate limiting and async queuing

UploadThing / Ping Labs — file storage

Resend — transactional email delivery

Vercel Inc. — web application hosting