Last updated: November 1, 2026. This policy explains what NexaCloud collects and why. Questions: [email protected].
What we collect
- Account: your email address, and a password hash if you sign up with a password. If you sign in with GitHub we receive your verified primary email address; we do not keep your GitHub access token.
- Projects: project names, the GitHub owner and repository you enter, and the files you deploy. Deployed sites are public by design.
- Billing: payments are handled by Stripe. We keep your Stripe customer and subscription identifiers and your plan; we never see your card number.
- Usage and analytics: first-party page and click counts. We do not store IP addresses or browser strings; a visitor is represented by a daily hash that cannot be reversed. We honor the Do Not Track and Global Privacy Control signals.
Cookies
We use a session cookie to keep you signed in and a small first-party cookie (up to 90 days) that remembers which website or campaign brought you, so we can understand where sign-ups come from. We use no advertising cookies.
Who processes data for us
Cloudflare (hosting and network), Stripe (payments), Resend (transactional email), GitHub (sign-in) and Google Search Console (search performance of public pages). Data may be processed in countries other than yours.
How long we keep it
Account data is kept while your account exists. Old versions of a site are removed automatically, keeping the newest five. Ask us to delete your account and data at any time.
Your rights
You can ask to access, correct or delete your data, and to object to processing, under laws such as the GDPR and the Brazilian LGPD. Write to [email protected].
Children
NexaCloud is not directed to children under 16.
Changes
We will update this page when practices change and change the date above.