NEXSTA Privacy Policy

1. Scope

This Policy explains personal data processing during registration and use of NEXSTA. For visitor data collected by a customer through its AI employee, the customer determines the processing purposes and NEXSTA processes the data to provide the service within the customer's settings.

2. Data we process

Data may include name, email, phone number, account and company details, AI employee settings, uploaded knowledge, conversation messages, outcomes and leads, support requests, consent records, usage and security data, and payment references and statuses.

Passwords are stored as protected hashes. NEXSTA does not request or retain full payment-card numbers or CVC codes. The application does not retain source voice recordings; recognized text and technical metadata may be stored.

3. Purposes

Data is used to create and protect accounts, provide platform functions, fulfil orders, track quotas, preserve conversations and leads, provide support, prevent abuse, comply with legal duties, and improve service reliability.

4. Legal bases

Processing relies on entering into and performing a contract, the user's separate consent, compliance with legal duties, and the legitimate interest in service security where it does not override user rights.

5. Recipients and processors

Where required for selected functions, data may be shared with providers of infrastructure, automated-registration protection, request processing, and system email. Sharing is limited to the function's purpose and the processor's contractual terms.

Where a selected function requires a cross-border transfer, the operator performs it on a lawful basis and in accordance with applicable legal requirements.

Website and knowledge-base content is treated as user-provided source material, never as an instruction to change NEXSTA security rules.

6. Retention

Data is retained while required for account operation, contract performance, support, and service protection. Financial documents, consent records, and other information may be retained longer where required by law or needed to demonstrate lawful action. Data is deleted or anonymized when the purpose ends, subject to backup cycles and mandatory periods.

7. Security

Data transfer between the browser and NEXSTA is protected by HTTPS. When paying, card data is entered and processed by the payment provider; NEXSTA does not retain PAN/CVC. NEXSTA uses company-level access isolation, server-side authorization, protected sessions, password hashing, request limits, versioned consent logs, and secret redaction. No transmission or storage method removes all risk; the operator acts to contain any incident.

8. User rights

Users may request processing information, access, correction, restriction or deletion, withdraw consent, and complain to the competent authority. Requests must be sent to the privacy contact. Identity may be verified before a request is fulfilled.

9. Cookies and sessions

The platform uses technical cookies and browser storage for login, security, language, and interface operation. They are not intended for independent advertising identification.

nexsta.site and the NEXSTA cabinet use Yandex Metrica to analyse visits, traffic sources and product-funnel actions. The service receives technical browser and device information, an IP address, a visitor cookie identifier, page URLs and events. NEXSTA does not send names, phone numbers, email addresses, form or conversation contents, or payment credentials to Metrica. Session Replay, click/link/scroll maps and form analytics are used on public pages and login/registration pages. Recording of all field contents is disabled; fields and the chat are additionally hidden with protective markup. Private cabinet pages containing customer data, conversations, knowledge and billing are not recorded by Session Replay. The tag loads automatically without a separate banner. A previously saved analytics opt-out remains respected while its preference cookie is present. Consent to submit personal data is requested through a separate unchecked checkbox in the relevant form. Yandex describes its processing at https://yandex.ru/legal/confidential/.

10. Policy updates

The current version remains available at this stable page address. A new version receives a new number and effective date; NEXSTA requests renewed consent where necessary.

Seller details and contacts

Provider / operator

Индивидуальный предприниматель Малыгин Алексей Петрович

Tax ID

591903446790

OGRNIP

326237500420932

Registration date

2026-09-14

Registering authority

Межрайонная инспекция Федеральной налоговой службы № 16 по Краснодарскому краю

Support, cancellation and refunds: support@nexsta.site

Phone: +7 (495) 049-88-08

Personal data: privacy@nexsta.site