Privacy Policy

NEXA (“we”, “our”, or “us”) operates the website nexa.community and the NEXA professional networking service. Questions about this policy can be sent to zubin@nexa.community.

We collect the following categories of personal information:

• Identity and contact data - your name, email address and, where you message us, your phone number or messaging address.
• Sign-in information - your name, email address, email verification status and profile photo when you sign in with Google.
• Google Contacts data - if you grant permission when connecting contacts, we access names, email addresses, and professional details (employer, job title) of people in your Google Contacts and Other Contacts. This data is used exclusively to identify potential warm introductions within your existing network. A contacts connection does not give us access to your email inbox or unrelated messages. See the “Contact data and permissions” section below for full details.
• Professional history - job titles, employers, skills and education that you provide or that we find in public data about you on the web, to improve the quality of introductions we make on your behalf.
• Resume data - if you optionally upload a resume, we extract structured information (current role, skills, work history, education). The file is stored securely on your behalf.
• Goals and preferences - what you are looking for (e.g. a new role, a cofounder, investors) and any details you provide.
• Voice conversation data - when you speak with NEXA's AI, the conversation is transcribed. Audio is processed in real time and not stored beyond what is needed to generate a response.
• Phone contacts - if you grant permission, we access your device's contact list to identify people in your network who may be relevant to your goals. Contacts are used solely for matching and are never sold or shared with third parties for marketing.
• Usage data - pages visited, features used, and interaction events collected through analytics tools and standard server logs.
• Event host and guest data - when NEXA co-hosts a Partiful event, we receive event details, host identity and contact details, and guest names, RSVP status and history, questionnaire answers and any public profile links provided for the event. We may use public data about guests on the web to obtain professional person and company facts and create qualification scores and decision history for that event. An event guest does not need a NEXA account for this processing to occur.

We do not ask for government IDs or health information to use the networking service. Information you or an event host supplies in a free-text message or event answer may still include sensitive details; please avoid including information that is not needed for the request or event.

When you message NEXA, we use your messaging address and the messages you send us to reply and keep the conversation connected. Your messaging address may be a phone number or a channel-specific account identifier. A person who meets NEXA in a group can ask for help there without joining the waitlist; being in a group does not permit us to send them a first private message. If you ask to get started, we save your stated goals with your invite-only waitlist entry. Asking a question alone does not enroll you.

Joining the waitlist does not give us permission to contact your friends, RSVP to events or send marketing. We ask separately before sending an invitation when access is ready. Reply STOP to stop texts, or ask to withdraw to leave the waitlist and clear your saved goals. You can still request your data after stopping texts.

NEXA message history expires after 90 days. Your waitlist entry and saved goals expire 12 months after your last explicit join, rejoin or goal update. Ask to export your data for a private download link that works once and expires after 15 minutes. Anyone you forward that link to can use it.

To delete your NEXA messaging data, ask for deletion and confirm it in the same conversation. We stop pending texts before removing the data, retaining only limited consent, security and opt-out evidence. Your messaging provider may keep its own copies under its retention policy. Message contents and saved goals are not included in product analytics.

If both people opt in to an introduction, NEXA may create a group chat with them to make the introduction. Before each person opts in, we tell them that their phone number will be visible to everyone in that group chat, including the other match. We do not create the introduction group unless both people agree to that sharing.

Group members can keep messages and contact details they receive in their own messaging apps. Deleting your NEXA data cannot remove copies already received by other group members or their messaging providers.

If a host adds NEXA as a Partiful co-host, we process the event and its guest data to help that host review requests to attend. This can include professional enrichment and automated analysis of answers against criteria the host publishes for a curated event. Open events do not receive automated guest scoring or decisions. The host can review results; depending on its settings, NEXA may approve a guest or place a guest on a reversible waitlist. NEXA never automatically declines a guest. A decline requires the host's explicit action.

Guests RSVP to the host's event, not to NEXA. Event approval data is used for that host's event, under the host's instructions. RSVP details, questionnaire answers, scores and decisions remain scoped to that event. We do not use them to enroll a guest in NEXA, match them for NEXA's own purposes, or message them for marketing without separate, recorded permission. Professional person and company facts found in public data about a guest on the web may be retained separately and reused for other co-hosted events. We do not obtain a guest's email address or phone number from public-data services for this purpose. Hosts cannot browse those retained facts or see another host's guest list. Partiful controls its own RSVP service and its own copies of event data.

An authorized host sees data and analysis for their own event. We also use event, public-data and service providers to operate the service. We do not sell guest data or share it for cross-context behavioral advertising. For guests who have not separately opted in, event-specific records are deleted 30 days after the event; retained person and company facts expire after approximately 90 and 30 days respectively. Both stores are deleted on December 1, 2026, apart from limited consent and audit evidence. The retention section below explains these separate clocks in more detail.

Hosts sign in to a separate NEXA Events account and link their Partiful identity. That does not create a networking account. See the co-host terms for the detailed event service, criteria, and decision rules. Guests and hosts may contact jhalak@nexa.community about a score, event data, or a privacy request.

The host of an event you join through NEXA can see your name, role, company, LinkedIn link, a short summary of your answers and your phone number with most digits hidden, to review matches. They never see your messages with NEXA. NEXA also uses your NEXA profile, LinkedIn and, if you added one, your resume to find your matches; the host does not see those. You can leave any time and ask us to delete your data.

This applies only when you choose to join a host's matching program by texting NEXA. The host sees these details only for guests in their own program, never for another event, and never your messages with NEXA, your NEXA profile, your resume or the data we use to find your matches. If you ask NEXA to remove you or delete your data, the host's view of you goes with it.

We use your information to:

• Identify and make relevant warm introductions within your professional network.
• Personalize the AI conversation so it can ask sharper qualifying questions.
• Surface relevant contacts from your Google Contacts, phone contacts, and other connected sources.
• Communicate with you about introductions and service updates.
• Improve and debug the NEXA product using aggregated analytics.
• Comply with legal obligations.
• Operate co-hosted events and show hosts the information and analysis needed to review their own guests.

We do not use your data to train general AI models, and we do not sell your personal information to third parties.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We disclose personal data to providers that help operate NEXA and, for co-hosted events, to the host of the event. Provider categories include:

• Google - when you choose Google sign-in or connect Google Contacts, we receive the information you permit under Google's Privacy Policy.
• Public-data research providers - public profile links supplied by you or for an event may be shared to find relevant professional person and company facts in public data on the web.
• Conversation and event-processing providers - conversation data is processed for conversation and matching features. For co-hosted events, relevant guest data is processed for event qualification. We require providers used for guest assessment not to retain the guest information we send them for that purpose.
• Storage and hosting providers - your profile and preference data is stored on our behalf.
• Analytics providers - usage events are processed to help us understand and improve the product; private message content and saved waitlist goals are not included in those events.
• Event platforms and hosts - Partiful supplies event data and receives event decisions made through its service. An authorized host can see the guest roster, questionnaire answers, analysis and decisions for their own event. Partiful and hosts have their own data practices.

We may disclose data if required by law, to protect the safety of users, or in connection with a merger or acquisition (with prior notice to you).

Data obtained from Google APIs is never shared with third parties for advertising purposes, used to train AI models unrelated to the NEXA service, or otherwise transferred beyond what is necessary to provide NEXA's core functionality.

Access to your Google Contacts, phone contacts, and any other contact sources is always optional and requires your explicit permission. You may revoke Google Contacts access at any time through your Google Account permissions. Revoking permission does not affect previously identified matches, but we will stop accessing new contact data immediately.

Contact data is used to identify potential introductions within your existing network. We do not contact anyone in your network without your explicit instruction. A contacts connection gives us access to contact records, not the contents of your email inbox, calendar events, or unrelated messages. Private messages you send directly to NEXA are handled as described above.

We retain your personal information for as long as needed to provide the NEXA service and fulfil the purposes described in this policy, or as required by law. You may request deletion at any time and we will remove your data within 30 days, except where retention is required by a legal obligation.

Event data has separate, shorter clocks. For guests who have not separately opted in to NEXA, event-specific guest records, questionnaire answers and scoring history are deleted 30 days after the event date. Public professional facts about a person can be retained separately for approximately 90 days and company facts for approximately 30 days, even after an event record is deleted. Both event guest data and those separately retained facts are deleted on December 1, 2026, regardless of those clocks. Limited consent and audit evidence may remain. Deleting NEXA's copy does not delete the host's or Partiful's copy. Contact us for a request that also covers the separately retained professional facts.

We use a short-lived sign-in cookie to complete your sign-in. It expires automatically within 10 minutes and contains no tracking identifiers.

We use first-party analytics cookies to distinguish unique visitors and understand how the product is used. No third-party advertising cookies are used.

Depending on where you are located, you may have the following rights regarding your personal data:

• Access - request a copy of the data we hold about you.
• Correction - ask us to correct inaccurate or incomplete data.
• Deletion - request that we delete your data.
• Portability - receive your data in a structured, machine-readable format.
• Objection - object to processing based on legitimate interests.
• Withdraw consent - where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, email zubin@nexa.community.

For our networking service, messaging and NEXA Events accounts, NEXA determines the purposes of processing. For a co-hosted event's guest approval, the host sets the event purpose and criteria. If you are in the European Economic Area or the United Kingdom, the legal bases for processing where NEXA determines the purpose include:

• Contract performance - processing your data to provide the introductions service you requested.
• Legitimate interests - product analytics and service improvement, balanced against your rights.
• Consent - for optional data such as resume upload, Google Contacts access, and phone contacts.

If you are an event guest, ask us or the event host about the basis for that event's approval processing. Separate permission is required before NEXA uses your event data for its own matching or onboarding purposes.

You have the right to lodge a complaint with your local supervisory authority (e.g. the ICO in the UK, or your national data protection authority in the EU).

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act:

• Right to know - request details about the categories and specific pieces of personal information we have collected about you.
• Right to delete - request deletion of your personal information, subject to certain exceptions.
• Right to correct - request correction of inaccurate personal information.
• Sale or sharing - NEXA does not sell personal information or share it for cross-context behavioral advertising.
• Right to non-discrimination - we will not discriminate against you for exercising your CCPA rights.

To submit a request, email zubin@nexa.community with “CCPA Request” in the subject line.

NEXA is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

We may update this policy from time to time. When we do, we will revise the date at the top and, for material changes, notify you by email or a notice on our website. Where a new use requires your permission, we will ask for it before that use; an updated policy or continued use alone does not provide it.

For any privacy-related questions, requests, or concerns, please reach out to: zubin@nexa.community