Privacy Policy

Last Updated: July 2026

At Nexora, we take your privacy seriously. This policy describes how we collect, use, and protect your personal information when you use our platform.

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, build a profile, or apply for an opportunity. This includes:

• Name, email address, and authentication credentials.
• Profile data including education history, skills, and links to third-party accounts (e.g., GitHub, LinkedIn).
• Application data submitted to hackathons and internships.
• If you choose to connect Gmail for Auto Tracker, limited Gmail metadata such as message subject, sender, date, message/thread identifiers, labels/headers, and short matched snippets when enabled. We do not require full inbox scanning for normal app use.

2. How We Use Your Information

We use the information we collect to provide, maintain, and improve our services. Specifically, we use it to:

• Create and manage your builder profile.
• Transmit your applications to organizers (only when you explicitly click 'Apply').
• Send you technical notices, updates, and security alerts.
• Power Auto Tracker, when enabled by you, by detecting application-related Gmail signals such as registration confirmations, shortlist/interview updates, and outcome messages, then placing those signals into your private application tracker.

3. Gmail Auto Tracker

Gmail Auto Tracker is optional and user-controlled. Nexora uses Gmail access only to help update your application tracker. The feature looks for opportunity-related signals such as submitted applications, registrations, interview or next-step emails, shortlist notices, offers, rejections, waitlist messages, and closed application updates.

We do not sell Gmail data, use Gmail data for advertising, train AI models on Gmail data, or share Gmail data with organizers, recruiters, or other users. Gmail data is not used to build a public profile unless you manually choose to add or publish information yourself.

Nexora's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide or improve user-facing Auto Tracker features shown in the Nexora app.

You can review detected tracker items, change their status, delete them from your pipeline, disable Auto Tracker, or disconnect Gmail at any time from the Nexora app. Disconnecting stops future Gmail scans. Deleting a tracker item removes that item from your application pipeline.

4. Data Protection and Security

Nexora applies administrative, technical, and organizational safeguards designed to protect personal information and sensitive Google user data, including Gmail Auto Tracker data.

• Encryption in transit: Nexora uses HTTPS/TLS for data transmitted between the app, website, Firebase, Google APIs, and backend services.
• Encryption at rest: Data stored in Firebase and Google Cloud services is protected using Google Cloud's encryption-at-rest controls.
• Authentication and authorization: User accounts are protected with Firebase Authentication. Private profile, tracker, and Gmail-derived records are tied to the authenticated user and restricted through Firebase Security Rules and backend access checks.
• Least-privilege Gmail handling: Auto Tracker requests only the Gmail access needed to detect application-related signals. Nexora stores limited metadata required for the tracker, such as sender, subject, timestamp, message identifiers, labels/headers, and optional short matched snippets when enabled. Email bodies are not displayed publicly and are not used for advertising, profiling, or model training.
• Limited access: Access to production systems and user data is limited to authorized personnel or service accounts who need it to operate, secure, debug, or support Nexora.
• User controls and deletion: You can delete tracker items, disconnect Gmail, disable Auto Tracker, or request account/data deletion. When Gmail is disconnected, Nexora stops future Gmail scans.
• Monitoring and incident response: We monitor for reliability and security issues and will take appropriate action if we detect unauthorized access, misuse, or a security incident.

No internet-based service can guarantee absolute security, but Nexora works to protect user data using reasonable safeguards appropriate to the sensitivity of the information.

5. Information Sharing

We do not sell your personal data. We only share your information with third parties in the following circumstances:

• With Organizers: When you apply to an opportunity, the organizer receives the data you included in your application.
• With your consent: If you opt-in to our Talent Match program, vetted recruiters may view your public profile.

6. Your Rights

You have the right to access, update, or delete your personal information at any time through your account settings. You can completely erase your footprint using the 'Delete Account' option in your dashboard.