Last updated: July 15, 2026

1. Introduction

Welcome to AINexLayer ("AINexLayer", "we", "us", or "our"). We operate the website at www.ainexlayer.com and the AINexLayer application and related products (collectively, the "Service"). We respect your privacy and are committed to protecting personal data. This Privacy Policy explains what data we collect, how we use it, who we share it with, and the choices you have.

By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our policies and practices, do not use the Service. We may update this policy from time to time; material changes will be reflected by updating the "Last updated" date above.

2. Data We Collect

We may collect the following categories of personal data:

Identity Data — name, username, or similar identifier you provide when registering for an account.
Contact Data — email address and other contact details you provide when contacting support or using our contact forms.
Account and Authentication Data — hashed passwords (for local sign-in) and tokens issued by identity providers (such as Google) when you sign in with a third-party account.
Chat and Knowledge Base Data — messages, prompts, documents, notes, and related content you submit while signed in. Anonymous sessions on our free public pages are not stored in a user-linked account database.
Document and Integration Data — content from files you upload and data retrieved from third-party services you connect (such as Slack, Google Drive, Notion, Confluence, GitHub, and similar tools) under the permissions you authorize.
Billing Data — information needed to process payments (such as transaction identifiers and credit balances). Payment card details are handled by our payment processors and are not stored on AINexLayer servers.
Technical Data — IP address, browser type and version, time zone, operating system, device identifiers, and similar technical information from devices used to access the Service.
Usage Data — how you interact with the Service, such as pages visited, features used, referring URLs, and timestamps.
Marketing and Communications Data — your preferences for product updates and marketing communications from us.
Aggregated Data — statistics derived from the above after identifiers are removed. Aggregated data that cannot reasonably identify you is not treated as personal data.

3. How We Use Your Data

We use personal data to:

Create and manage your account, authenticate you, and provide the Service you request.
Process payments, manage credit balances, and help prevent fraud and abuse.
Answer your queries by sending prompts and content you submit to large language model providers (see Section 8) and returning responses to you.
Synchronize data from third-party services you explicitly connect so the Service can search and reference that content on your behalf.
Monitor, analyze, and improve the Service, diagnose issues, and detect security incidents.
Communicate with you about product updates, security notices, support requests, and — where you have agreed — marketing.
Comply with applicable law and enforce our Terms of Service.

4. Cookies and Tracking Technologies

We and our partners use cookies, local storage, and similar technologies to operate the Service, remember preferences, measure usage, and (where applicable) serve advertising. Categories include:

Strictly necessary — required for authentication, session management, security (including CAPTCHA), and core functionality.
Preference — remember choices such as theme, language, and onboarding state.
Analytics — help us understand how the Service is used so we can improve it (for example, PostHog product analytics).

You can control cookies through your browser settings. Blocking strictly necessary cookies may prevent the Service from working correctly. Where required by applicable law, we ask for your consent before setting non-essential cookies.

5. Data Security

We implement technical and organizational measures designed to protect personal data against accidental loss, unauthorized access, alteration, and disclosure. Access to personal data is limited to people who need it to operate the Service.

No system can be guaranteed fully secure. We cannot guarantee that personal data transmitted to or stored by the Service will be free from unauthorized access. You are responsible for keeping your account credentials confidential.

6. Data Retention

We retain personal data only as long as needed to provide the Service and meet legal, accounting, and reporting obligations. Account data is retained for the life of your account; you may request deletion at any time. Aggregated data that no longer identifies you may be retained for analytics and product improvement. Anonymous sessions on free public pages are not retained in a user-linked account database.

7. Third-Party Services

We use third-party processors and providers to operate the Service. Each has its own privacy policy, which we encourage you to review:

Authentication — Google (OAuth sign-in) and other identity providers you choose.
Hosting and infrastructure — cloud hosting, CDN, DNS, and security providers (for example CAPTCHA via Cloudflare Turnstile).
Analytics — PostHog (product analytics).
Large language model providers — OpenAI, Anthropic, Google, and other LLM providers process prompts and content you submit so the Service can generate responses.
Payment processors — providers that process credit purchases and related payments.
Integration providers — when you connect a third-party service (such as Slack, Google Drive, Notion, Confluence, GitHub, Jira, Linear, or similar), data is exchanged with that service under the scopes you authorize.

We do not sell personal data. We share data with the providers above only as needed to operate the Service.

8. Your Rights and Choices

Subject to applicable law, you may have rights regarding your personal data, including the ability to:

Access the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your personal data.
Object to or restrict certain processing.
Receive a copy of your data in a portable format where applicable.
Withdraw consent where we rely on consent (including for non-essential cookies or marketing).
Opt out of personalized advertising using the controls described in Section 5, or by using a browser privacy / global privacy control signal where we support it.
Contact a competent privacy authority if you believe our processing does not comply with applicable law.

To exercise these rights, contact us using the details in Section 12. We may need to verify your identity before responding.

9. Children's Privacy

The Service is not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it. We do not knowingly serve personalized advertising to children.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or operations. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, provide additional notice (such as an in-product notification or email). Continued use of the Service after an updated policy becomes effective means you accept the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or our privacy practices, or want to exercise your rights, contact us at:

Email: support@ainexlayer.com