Content Nexa
Login

Privacy Policy

Last updated: July 9, 2026

1. Who we are

Content Nexa ("Content Nexa", "we", "us", "our") operates the marketing, content, CRM, email, and website platform available at contentnexa.com. We are the data controller for personal data processed through the platform.

Contact: privacy@contentnexa.com (privacy requests) or support@contentnexa.com (general support).

2. Data we collect

  • Account data: email, display name, avatar, timezone, workspace and role.
  • Content you create: posts, captions, media, schedules, campaigns, CRM records, emails, and website content.
  • Connected accounts: OAuth tokens, profile IDs, page/account names, and metadata for social, email, and other platforms you explicitly connect.
  • Email hub data: message metadata, threads, and attachments from mailboxes you connect (Google, Microsoft, IMAP).
  • Usage data: logs, IP address, device and browser information for security, reliability, and analytics.
  • Billing data: processed by our payment provider; we store only the identifiers and receipts required for invoicing.

3. How we use your data

We use your data to operate the platform, publish and schedule content on your behalf, sync emails and contacts, generate AI outputs you request, display analytics, secure the service, provide support, and send transactional communications about your account.

4. AI data usage

Content Nexa uses AI models (via the Lovable AI Gateway and other providers) to power features such as copywriting, image generation, transcription, lead scoring, email drafting, and website generation.

  • Prompts and inputs you submit to AI features are sent to the model provider only to produce the requested output.
  • We do not sell your data and we do not use your content to train third-party foundation models.
  • AI providers may retain requests for a short abuse-monitoring window under their own terms; we choose providers that do not use customer data for model training by default.
  • AI outputs are stored in your workspace so you can review, edit, and reuse them. You can delete them at any time.
  • AI can be wrong. You are responsible for reviewing outputs before publishing.

5. Social and OAuth connections

When you connect a third-party account (Facebook, Instagram, LinkedIn, TikTok, YouTube, Threads, Pinterest, Google, Microsoft, etc.) we receive only the scopes you approve during the OAuth flow. We use that access to:

  • Publish and schedule the content you create in Content Nexa.
  • Read analytics, comments, and messages required for the feature you enabled.
  • Sync emails, contacts, and calendar data for the Email Hub and CRM when you connect a mailbox.

Access and refresh tokens are stored encrypted. We never post, message, or read data outside the scopes you granted. Disconnecting an account in Accounts → Disconnect revokes the token and removes the cached platform data from our database. We do not sell connected-platform data and we do not share it with advertisers.

6. Sharing

We share data only with (a) infrastructure subprocessors that host, store, or send data on our behalf under contract, (b) the third-party platforms you explicitly connect, and (c) authorities where legally required. We do not sell personal data.

7. Retention

We retain account and content data while your account is active. On deletion, data is removed within 30 days, except minimal billing, tax, and legal records where retention is required by law.

8. Data deletion

You can delete your data at any time:

  1. In-app: Accounts → Disconnect removes a connected platform; Profile → Delete account permanently removes your user, workspaces you own, content, connections, and analytics.
  2. By email: send "Delete my data" from your account address to privacy@contentnexa.com. We confirm within 7 days and complete deletion within 30 days.

Full instructions, including Meta (Facebook/Instagram) removal, are on the Data Deletion page.

9. Your rights

You may access, export, correct, or delete your data at any time from your profile or by emailing privacy@contentnexa.com. Depending on your location you may also have the right to object to or restrict processing, and to lodge a complaint with your local data protection authority.

10. Security

We use encryption in transit (TLS) and at rest, scoped access controls, row-level security on customer data, and audit logging on privileged operations. Report suspected vulnerabilities to privacy@contentnexa.com.

11. Contact

Content Nexa · contentnexa.com
Privacy: privacy@contentnexa.com
Support: support@contentnexa.com